Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/PhZEaG7npXbfTgwVP64yxummmDE.roa
File: PhZEaG7npXbfTgwVP64yxummmDE.roa (raw, json)
Hash identifier: k8Z3frM0qfcXgyJ4PZokoMtrlMuZewR3yNw1diGiBT4=
Subject key identifier: 3E:16:44:68:6E:E7:A5:76:DF:4E:0C:15:3F:AE:32:C6:E9:A6:98:31
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 090A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/PhZEaG7npXbfTgwVP64yxummmDE.roa
Signing time: Thu 15 Jun 2023 04:54:06 +0000
ROA not before: Thu 15 Jun 2023 04:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2314 (0x90a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 04:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3E1644686EE7A576DF4E0C153FAE32C6E9A69831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:99:76:e2:6c:c6:d4:0b:59:08:a0:2f:a9:
dd:b6:9e:c0:01:fc:73:5c:e0:6c:c4:c8:32:f2:9d:
84:93:c9:42:f5:35:08:74:ad:26:52:ca:53:93:21:
d8:19:40:1d:6a:c4:bc:6e:85:71:7e:90:bc:ef:7e:
f1:26:ce:04:60:1f:dd:cd:d6:9c:4f:06:ed:a5:c3:
fd:f2:0f:13:b0:be:df:46:fe:96:4f:8c:a4:6b:00:
56:36:87:14:bb:88:16:96:c7:fc:1e:bd:2c:c7:c3:
3b:e3:47:47:46:79:4d:db:3a:d2:26:7e:fc:be:cd:
fb:36:84:1b:d7:ae:f6:4e:d3:2c:e6:62:a5:49:91:
b4:26:14:ae:b8:1a:a6:a8:be:2f:3f:27:4a:f9:0c:
f0:cf:b0:6a:dd:5c:60:18:3b:7e:4e:ad:0d:b4:f6:
8f:4b:d8:a0:fd:1a:cd:63:60:e3:15:2b:30:16:59:
83:d6:96:33:12:a5:5e:5b:d9:fc:b3:55:c5:1b:d6:
d9:41:47:01:53:69:22:67:f3:5a:dc:7f:12:9c:bf:
ec:66:47:75:63:2c:02:c0:90:30:50:56:82:1f:42:
c6:be:f3:ce:12:8f:e5:91:b4:b0:de:72:ff:5f:32:
e3:10:63:1a:18:78:f7:4f:0b:38:e4:19:d6:4b:06:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:16:44:68:6E:E7:A5:76:DF:4E:0C:15:3F:AE:32:C6:E9:A6:98:31
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/PhZEaG7npXbfTgwVP64yxummmDE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ca:9c:5f:65:9f:ca:4a:bd:fe:50:36:54:e8:78:75:60:b4:
b6:7d:c7:3c:24:33:63:f6:e4:b2:ea:46:52:8a:9f:16:a4:bd:
fe:ef:9a:ca:17:da:70:92:a3:9b:20:2f:95:84:7e:ba:84:9e:
bb:63:dc:32:70:61:5a:2c:0f:93:cc:ca:f6:47:3a:f1:eb:e6:
17:fe:29:69:15:78:d2:a7:c1:25:2e:02:6d:1d:5b:2b:28:77:
c8:48:46:89:f9:bb:5d:8e:c6:80:36:f8:2f:25:46:23:76:af:
3e:b1:b8:f5:00:62:45:38:a0:e1:6a:b7:ab:51:19:ed:92:86:
bb:3f:ff:fd:ab:34:7e:7d:0d:dc:ad:4e:ba:56:3e:bd:f0:9b:
54:a8:c6:cd:28:fa:11:8b:d8:ed:58:10:aa:0e:e5:9e:22:9d:
18:7d:1b:fc:99:61:28:5d:da:ff:f5:8c:0d:07:40:f4:92:08:
a6:0d:90:7c:31:80:d3:d2:6f:a4:b6:55:14:a3:2a:85:98:77:
ef:53:9c:48:85:5d:4e:ff:0e:d5:6f:b1:a7:0c:84:14:9a:e6:
95:ce:0a:df:23:f3:9b:8f:be:e3:1f:85:1a:b2:ef:d4:50:ed:
44:b2:44:c7:8a:f0:b6:28:c5:d0:4d:c3:d1:3e:9e:3f:c3:0f:
f3:a6:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org