Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Pmeg1TF-peXQM_LY9Sq4c1nHa60.roa
File: Pmeg1TF-peXQM_LY9Sq4c1nHa60.roa (raw, json)
Hash identifier: BDzDcKvIVWP281xDiWPGtAFU9mpEGLyDliQBOw8/x40=
Subject key identifier: 3E:67:A0:D5:31:7E:A5:E5:D0:33:F2:D8:F5:2A:B8:73:59:C7:6B:AD
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07E2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Pmeg1TF-peXQM_LY9Sq4c1nHa60.roa
Signing time: Tue 13 Jun 2023 15:54:12 +0000
ROA not before: Tue 13 Jun 2023 15:54:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2018 (0x7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 15:54:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3E67A0D5317EA5E5D033F2D8F52AB87359C76BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:79:d7:51:e0:b6:ba:03:a5:17:6a:c5:d4:
fe:2c:91:41:d5:54:b5:72:5a:2e:42:ef:55:8f:62:
3b:e7:8d:8f:d1:84:12:d0:09:15:04:ba:47:63:f4:
fd:ae:e8:c4:83:1e:7c:db:61:2a:ae:91:a4:14:de:
e1:4d:e2:10:86:4a:bc:df:66:5e:6d:ce:aa:03:ad:
4f:97:a4:e7:dd:ec:11:6d:e6:c8:d7:87:88:bc:04:
17:0a:f8:2e:66:2a:df:d5:ed:aa:a4:d3:49:21:05:
f9:eb:43:b9:a0:44:35:80:79:4c:ad:87:f9:84:1a:
0c:0c:fb:db:eb:cc:ac:6c:20:90:ee:17:10:7b:7e:
b9:2e:5d:b6:f5:49:53:0b:ab:59:58:b7:2e:d2:47:
aa:c8:1a:19:a9:18:0d:ec:93:10:71:1c:01:72:1d:
b2:5c:e5:3c:fe:85:48:7e:05:05:34:db:c3:bf:70:
9b:ec:0f:78:74:87:86:50:08:3c:37:1d:73:43:61:
da:67:73:a5:68:b5:18:4b:8e:90:90:5c:bf:95:69:
63:5f:d4:79:e3:5f:d5:d9:91:f8:16:67:63:d0:74:
43:b3:9f:7e:94:93:ac:d0:8b:0d:8d:e9:e9:3b:e1:
bd:24:d7:d7:dc:6c:d8:66:39:ba:d9:c5:d0:1b:f2:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:67:A0:D5:31:7E:A5:E5:D0:33:F2:D8:F5:2A:B8:73:59:C7:6B:AD
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Pmeg1TF-peXQM_LY9Sq4c1nHa60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:60:e0:d0:a3:30:ee:51:17:b7:7d:b5:36:2e:c7:fd:b4:2a:
00:14:33:ee:de:dd:1d:46:5f:61:ab:8a:2e:9a:0a:9f:bd:4a:
b8:f4:4c:47:92:db:27:53:66:ec:09:a7:47:8f:d0:32:ad:ae:
ee:5d:c0:57:2c:70:49:40:80:1a:a0:ee:92:43:33:be:5b:ad:
d6:6e:7d:3f:fd:83:7b:36:73:1d:44:be:89:32:96:db:50:1b:
d6:8e:09:39:ee:56:f7:68:fc:9e:07:ac:a1:9b:55:a9:f2:6e:
59:a0:4f:f5:1b:cd:2c:2d:8c:1f:40:41:0e:76:00:cd:c4:1b:
11:8e:e7:53:6d:6c:e0:d4:8e:5c:1b:e8:b4:55:93:cb:70:ce:
77:34:20:52:7f:6c:d7:5a:24:e8:23:ad:09:f8:aa:e4:68:57:
28:bc:0c:5c:f5:fa:a8:cb:45:92:30:68:6d:ac:a4:8a:00:95:
8a:99:68:00:00:b7:56:5f:9d:20:a3:4e:74:da:76:fb:55:1d:
dc:b6:5b:b8:43:31:c4:d4:e3:69:65:46:30:dc:85:8d:7b:3a:
48:6e:77:55:dc:99:c4:f9:55:6d:0b:87:d8:a9:15:b1:1a:89:
e3:92:71:2c:57:24:0c:0d:9f:3f:fd:b2:bd:fe:ed:41:bf:83:
92:56:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org