Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/PrVNNyzoKyy6MvOaziLuYDqnUHo.roa
File: PrVNNyzoKyy6MvOaziLuYDqnUHo.roa (raw, json)
Hash identifier: SiEj8oo84bCQB78UMk2e4NGhLX7pAwdk5KIvafQz8ks=
Subject key identifier: 3E:B5:4D:37:2C:E8:2B:2C:BA:32:F3:9A:CE:22:EE:60:3A:A7:50:7A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0896
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/PrVNNyzoKyy6MvOaziLuYDqnUHo.roa
Signing time: Wed 14 Jun 2023 14:24:03 +0000
ROA not before: Wed 14 Jun 2023 14:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198 (0x896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 14:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3EB54D372CE82B2CBA32F39ACE22EE603AA7507A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:48:21:c7:6c:9e:f3:30:5a:cf:ea:40:91:
32:47:e8:ee:0b:45:0f:5e:b4:ad:f4:72:83:70:34:
e3:4a:2e:b9:75:21:ce:2e:29:d9:20:7b:bc:47:5e:
44:50:c5:90:ab:86:7b:09:30:4b:e6:43:5f:88:c0:
2d:66:29:56:9f:30:06:be:27:fb:6e:e0:59:9c:10:
a5:d0:15:76:51:e3:44:a2:aa:82:10:11:de:5f:48:
41:95:40:3b:db:03:eb:d3:e8:22:74:02:da:fb:d4:
49:c4:1e:14:b9:fb:9f:fd:91:51:bc:69:b1:10:9b:
6c:70:29:6b:ed:98:61:f1:98:1c:2b:de:03:d3:30:
a5:38:b9:12:8b:ad:16:e3:96:9c:ac:da:96:65:68:
ed:26:61:53:65:23:64:8a:c9:0f:0b:dd:b7:34:ad:
fa:b3:7f:7f:87:bb:4d:80:68:eb:d2:47:8b:c4:5e:
b7:9a:78:08:d9:14:40:ff:5f:21:3e:d0:57:a2:c4:
34:23:16:6d:68:47:ac:de:bc:2e:db:2c:bd:d1:09:
f4:85:88:e1:42:c9:bf:56:e5:1b:a0:ce:df:0b:52:
55:d1:52:6d:32:90:c5:e9:d3:a4:e3:7a:af:11:00:
5d:74:ba:34:ed:db:5f:54:5e:49:90:6e:84:24:6d:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:4D:37:2C:E8:2B:2C:BA:32:F3:9A:CE:22:EE:60:3A:A7:50:7A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/PrVNNyzoKyy6MvOaziLuYDqnUHo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
30:0d:d9:5f:ed:48:6b:f2:ce:02:86:3c:c6:70:01:d8:0c:56:
ab:e5:40:6b:c4:c0:c6:54:3d:3c:71:ef:9a:35:15:05:aa:45:
9f:22:8f:b0:de:b1:3b:1b:72:c8:e0:ec:02:8c:d7:f6:86:99:
b8:aa:4b:16:dd:a3:38:25:2c:56:de:d1:04:a8:aa:80:f4:69:
90:0f:36:6a:20:cf:b3:2a:3b:70:4a:7f:12:a9:6f:5c:dc:53:
74:ac:bd:b7:22:1e:f8:0a:a8:13:e0:84:46:9c:fc:22:fa:b8:
a7:8a:bd:28:fc:54:ec:e3:47:ef:43:7d:5c:2e:43:71:f4:d4:
5f:96:ba:19:a2:74:60:6c:a2:e5:64:53:67:60:40:d2:3c:99:
b5:2e:68:59:a0:e9:95:7b:63:89:a4:10:1b:8b:16:03:b0:9a:
42:41:3b:27:4e:0e:7c:aa:e1:08:f9:33:35:b4:19:46:5f:a1:
3f:d2:5d:76:d8:ce:f3:8a:71:f0:6d:32:b4:cf:65:a3:7b:91:
39:86:74:0c:f4:41:39:e7:c0:69:a6:32:1a:b8:43:c0:e3:6c:
0f:59:9c:cd:07:1e:fe:21:70:64:5f:fd:c7:36:65:6f:72:dd:
5e:b5:b3:51:9c:7d:77:0e:ac:5a:3c:16:af:c1:d8:f4:a8:7c:
c1:3a:3d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org