Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/SLB9sNScst1JufCXt9k7chNXZGA.roa
File: SLB9sNScst1JufCXt9k7chNXZGA.roa (raw, json)
Hash identifier: TxrZOkHHY+FuT8+eH/fxwYm77AcTlcuimIxgUSlJfZE=
Subject key identifier: 48:B0:7D:B0:D4:9C:B2:DD:49:B9:F0:97:B7:D9:3B:72:13:57:64:60
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08D6
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/SLB9sNScst1JufCXt9k7chNXZGA.roa
Signing time: Wed 14 Jun 2023 22:24:06 +0000
ROA not before: Wed 14 Jun 2023 22:24:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 22:24:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=48B07DB0D49CB2DD49B9F097B7D93B7213576460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:64:29:22:dc:59:fa:93:8b:9a:88:3f:d6:
6a:d7:ff:dd:ae:c8:7d:f4:be:1e:6e:09:e3:94:c9:
3d:6f:46:c6:0b:f1:26:1c:6c:1f:7f:3a:28:f9:eb:
66:97:2d:85:4a:7e:e2:6c:b9:94:12:b4:5b:bc:b2:
32:e1:84:a5:1f:52:70:08:ca:d7:23:06:c3:21:1e:
17:c3:59:15:58:c2:36:be:7e:4d:78:5e:34:16:ac:
fd:12:9f:51:c5:3f:66:01:45:90:d0:2e:cf:67:5e:
79:6a:55:6c:5e:37:1a:65:3b:24:82:b4:4d:10:58:
c3:97:6f:a6:ad:29:d2:ed:77:a7:22:8f:3f:c3:3f:
4b:de:cb:b3:8c:16:cd:8b:97:6a:f9:94:c9:7c:07:
0e:a3:36:fa:35:ff:8b:8a:bc:40:5f:b6:37:50:1e:
df:ee:fb:b4:4c:51:2b:71:1a:b1:d6:de:2b:39:ca:
cf:eb:75:40:75:f8:51:fe:8f:30:37:14:26:26:73:
47:ce:3f:ba:30:64:02:b7:af:1f:41:ce:8d:79:9e:
e7:d5:f5:09:f1:72:1d:f7:01:a0:1d:7b:ee:bc:cf:
08:18:9e:fd:17:ef:9e:68:18:5f:0f:22:2d:cb:38:
38:dc:50:c4:6a:13:41:0f:de:91:9e:96:a9:1b:2c:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:7D:B0:D4:9C:B2:DD:49:B9:F0:97:B7:D9:3B:72:13:57:64:60
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/SLB9sNScst1JufCXt9k7chNXZGA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
52:5a:7a:79:0c:9c:00:26:6b:25:5e:4f:e7:a7:d3:c8:f6:37:
54:ef:9f:c7:49:40:5e:85:03:12:f8:ab:1f:1c:51:20:c8:74:
96:3d:50:7a:ec:d6:7b:8b:a6:78:7a:ed:25:26:90:3a:64:a2:
5d:89:4a:03:6b:5a:e6:c9:50:13:dc:91:c4:ea:17:da:bd:c2:
71:2e:0e:7d:d7:e2:ba:ec:e2:45:42:95:2d:cf:22:d4:4e:66:
03:f2:a0:42:e1:89:9d:da:17:10:88:72:db:a1:f8:8b:99:59:
db:20:9f:87:e7:38:e2:24:d7:7b:74:3d:76:63:5e:73:56:d7:
0b:b8:0d:45:78:cf:ae:54:d5:5e:b6:41:7b:27:c5:d8:93:0e:
b8:b3:89:a2:db:a6:f5:2d:65:76:66:35:52:5e:24:a1:6d:4a:
4d:f8:39:c3:39:88:ee:d9:90:b7:1f:7f:47:01:70:46:b8:05:
f5:2e:eb:48:61:dd:6b:06:58:4c:ac:a7:ed:a7:74:e2:b8:8c:
33:0c:02:ca:2f:7e:b8:98:4b:b6:99:e6:89:18:8a:7b:9d:ff:
fc:70:41:68:67:7f:74:9c:ea:4b:83:65:3a:c1:c3:c5:45:f5:
ac:62:15:e7:c6:d9:10:d6:cc:22:4a:09:a1:aa:bb:1a:86:bd:
76:97:49:8e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MjI0MDZaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDQ4QjA3REIwRDQ5Q0Iy
REQ0OUI5RjA5N0I3RDkzQjcyMTM1NzY0NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGV2QpItxZ+pOLmog/1mrX/92uyH30vh5uCeOUyT1vRsYL8SYc
bB9/Oij562aXLYVKfuJsuZQStFu8sjLhhKUfUnAIytcjBsMhHhfDWRVYwja+fk14
XjQWrP0Sn1HFP2YBRZDQLs9nXnlqVWxeNxplOySCtE0QWMOXb6atKdLtd6cijz/D
P0vey7OMFs2Ll2r5lMl8Bw6jNvo1/4uKvEBftjdQHt/u+7RMUStxGrHW3is5ys/r
dUB1+FH+jzA3FCYmc0fOP7owZAK3rx9Bzo15nufV9Qnxch33AaAde+68zwgYnv0X
755oGF8PIi3LODjcUMRqE0EP3pGelqkbLHwdAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUSLB9sNScst1JufCXt9k7chNXZGAwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvU0xCOXNOU2NzdDFK
dWZDWHQ5azdjaE5YWkdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAUlp6eQycACZrJV5P56fTyPY3VO+f
x0lAXoUDEvirHxxRIMh0lj1QeuzWe4umeHrtJSaQOmSiXYlKA2ta5slQE9yRxOoX
2r3CcS4OfdfiuuziRUKVLc8i1E5mA/KgQuGJndoXEIhy26H4i5lZ2yCfh+c44iTX
e3Q9dmNec1bXC7gNRXjPrlTVXrZBeyfF2JMOuLOJotum9S1ldmY1Ul4koW1KTfg5
wzmI7tmQtx9/RwFwRrgF9S7rSGHdawZYTKyn7ad04riMMwwCyi9+uJhLtpnmiRiK
e53//HBBaGd/dJzqS4NlOsHDxUX1rGIV58bZENbMIkoJoaq7Goa9dpdJjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org