Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/P5EzfXaXhloFosxJKFjNhnyWCUs.roa
File: P5EzfXaXhloFosxJKFjNhnyWCUs.roa (raw, json)
Hash identifier: WFpKOaXHw1T/UVAcZXCPrSHAnENrlKjr2VqLgXafQY4=
Subject key identifier: 3F:91:33:7D:76:97:86:5A:05:A2:CC:49:28:58:CD:86:7C:96:09:4B
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 085A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/P5EzfXaXhloFosxJKFjNhnyWCUs.roa
Signing time: Wed 14 Jun 2023 06:54:03 +0000
ROA not before: Wed 14 Jun 2023 06:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 06:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3F91337D7697865A05A2CC492858CD867C96094B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:cd:53:49:d8:79:2a:b6:20:83:f7:0d:08:
e8:be:60:3f:6b:c0:6a:62:77:e3:d6:3b:16:b0:ef:
df:c2:df:c3:ae:83:c1:8c:3a:2a:78:59:28:88:08:
ef:81:1a:ea:32:8c:36:f4:c8:8c:26:48:5b:05:45:
a2:2b:b5:eb:a8:f7:b8:ac:13:71:a5:57:c5:28:04:
23:81:d7:88:c6:dd:c4:a7:97:5c:8a:59:17:fc:9b:
63:91:d9:a1:c3:2b:a4:7b:40:4f:df:00:0a:50:d6:
2b:3f:88:56:2d:72:83:26:16:26:2a:f6:0f:9a:07:
85:66:a4:b3:b5:be:82:d8:00:71:7d:44:b9:52:2e:
40:2b:33:45:56:b7:82:5d:b2:71:c9:a5:86:a9:02:
02:2b:9f:cd:92:5e:84:f0:0a:ee:d7:27:3a:e4:7e:
5d:11:1e:66:c2:55:d2:2c:b1:e5:ce:ff:9b:f6:9a:
8b:1a:1b:f2:ea:29:81:d1:83:25:00:52:84:5c:45:
79:bc:49:03:c8:3e:21:a2:99:31:63:75:b2:94:6c:
2b:f2:ed:bb:59:f9:0f:96:a5:10:1b:27:bd:fd:ae:
7e:2d:7c:d8:f2:f9:d6:61:12:4c:65:c8:1a:60:4c:
8b:2f:c5:83:73:b3:87:73:6c:79:8b:16:37:e9:ee:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:91:33:7D:76:97:86:5A:05:A2:CC:49:28:58:CD:86:7C:96:09:4B
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/P5EzfXaXhloFosxJKFjNhnyWCUs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
70:ed:96:a8:62:d1:dd:3e:c4:a0:e3:02:46:a7:ee:fa:a8:48:
1f:64:70:f0:30:3a:55:ba:04:39:c6:7d:b2:8c:95:93:49:21:
5e:d7:b8:db:37:33:0e:a4:32:e9:96:f5:27:c7:4e:3e:fb:5d:
39:59:df:f1:e8:5d:ab:a3:d7:a9:18:85:70:f3:e9:63:81:be:
6a:76:a8:f3:28:a9:68:98:74:e5:ff:48:0d:f5:39:a9:b0:41:
38:dc:83:29:b5:af:46:5a:a3:64:9e:da:c9:44:2c:74:0b:be:
c6:b0:47:89:16:fe:46:5a:1e:2c:48:0c:d1:89:d5:36:29:a7:
5a:2b:fa:70:9d:28:5e:12:22:07:51:bc:ea:4b:94:7a:57:09:
05:74:88:6b:64:22:dd:fd:fa:4f:a0:91:39:3f:40:6a:16:28:
4a:11:78:6c:9e:67:c2:7a:97:e1:33:ca:dc:8c:a0:87:d7:da:
d5:1c:31:bf:c5:d8:9a:f4:d8:aa:7b:83:2e:06:f7:a6:1c:f4:
4d:80:f4:ad:e3:14:ec:98:1d:40:10:50:bf:06:b8:1e:09:a8:
44:45:85:97:0f:60:6a:eb:e4:46:b7:24:0e:c8:ba:7a:d1:81:
b1:2a:33:2c:79:9a:ec:5e:79:db:ad:d8:64:f1:0e:33:02:e4:
35:77:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org