Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/R4xMuytHIUedH1Enwq2EYUTsCo8.roa
File: R4xMuytHIUedH1Enwq2EYUTsCo8.roa (raw, json)
Hash identifier: UOJjVbYDl5yrWlaopmGzt08tL07EUUwpWfd1y7UI5h0=
Subject key identifier: 47:8C:4C:BB:2B:47:21:47:9D:1F:51:27:C2:AD:84:61:44:EC:0A:8F
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07FE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/R4xMuytHIUedH1Enwq2EYUTsCo8.roa
Signing time: Tue 13 Jun 2023 19:24:11 +0000
ROA not before: Tue 13 Jun 2023 19:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046 (0x7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 19:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=478C4CBB2B4721479D1F5127C2AD846144EC0A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:a9:db:9c:3a:35:06:65:9b:46:ca:57:da:
29:e8:2a:a3:45:06:be:48:b6:2f:29:dd:19:12:3e:
c6:fa:51:ae:84:3d:0a:cf:33:96:a5:95:4d:0c:ab:
9c:39:2f:d4:3d:63:8f:a6:b0:df:d3:7d:48:07:b8:
0e:43:08:e7:17:93:f9:7a:63:f6:17:f3:c4:a3:cf:
af:e3:9c:11:12:a4:af:8c:0e:05:fc:50:88:9e:d0:
0c:53:30:fa:8f:94:79:b1:9b:58:a5:16:6d:33:ea:
5b:45:8d:dc:86:fb:8b:9b:ad:08:9e:c5:80:38:b1:
ae:64:ad:56:c2:42:a2:91:da:4c:bc:7a:d0:32:09:
4f:31:78:b6:6f:c7:42:8d:de:27:85:68:0e:6e:a9:
e1:75:9a:6a:5f:bc:22:fb:7a:c1:c1:e0:8b:96:22:
b3:a0:3a:de:77:2f:e1:6a:bd:f8:0f:40:9e:82:b6:
05:a8:3b:6a:fc:e0:49:2f:8d:18:d1:db:46:f7:d0:
f2:2a:7c:de:c0:b6:2f:3c:b0:6e:35:00:55:0d:7e:
c8:e4:d8:b1:c0:08:51:b3:16:9a:58:78:0c:0b:3a:
6c:de:20:be:06:ed:1c:db:31:7d:55:7f:d8:26:20:
a3:7a:58:40:a0:45:f4:bd:87:0a:e8:91:16:ea:40:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8C:4C:BB:2B:47:21:47:9D:1F:51:27:C2:AD:84:61:44:EC:0A:8F
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/R4xMuytHIUedH1Enwq2EYUTsCo8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
89:cb:bf:c1:95:d2:e5:d5:01:07:ec:f0:0f:52:96:50:10:57:
6c:78:99:6e:6a:bb:a0:cd:89:aa:97:c6:c7:ce:dd:57:b5:05:
6c:27:a3:0b:39:53:d1:ac:01:75:2b:1f:9f:be:99:78:eb:a2:
91:ac:68:e9:b7:86:e3:c3:06:c8:f0:22:08:9c:a1:05:f4:57:
d2:f8:93:d3:c1:f4:68:a8:44:7d:7e:4a:89:2a:82:0f:8b:56:
2a:b6:c7:b2:6b:3a:a0:b1:79:cf:cb:20:1a:47:92:1b:43:e3:
13:be:ad:01:ce:67:d7:f2:b0:57:16:0d:9d:5d:b8:89:0d:0b:
34:c4:a9:ac:f3:96:86:b5:15:c6:72:bf:22:39:12:a2:87:74:
33:e4:b3:da:1a:69:57:dd:3d:d2:cb:7b:ba:f1:01:1c:0b:a9:
c5:bd:81:2c:37:39:d0:f5:c7:69:56:c6:d9:41:59:7b:e4:0a:
40:50:b4:01:d1:3b:75:f3:83:70:65:5e:77:e3:af:4c:4c:35:
f3:57:0d:38:d2:f7:b8:3e:26:21:01:23:2d:78:57:f6:38:2c:
3d:b9:d0:b6:03:d1:05:96:36:02:4f:91:9e:42:b4:9d:81:15:
75:72:cb:df:6e:8b:43:e4:6a:47:2c:6e:3d:1a:8a:bd:ad:ef:
11:a3:a8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org