Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Sg_hN_DTSlhjHfNCUH5ol-40URI.roa
File: Sg_hN_DTSlhjHfNCUH5ol-40URI.roa (raw, json)
Hash identifier: 1qxXup0jZrqGL11PKx8uv3iQb9F9z3D5RUcCX6sSD3E=
Subject key identifier: 4A:0F:E1:37:F0:D3:4A:58:63:1D:F3:42:50:7E:68:97:EE:34:51:12
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07DA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Sg_hN_DTSlhjHfNCUH5ol-40URI.roa
Signing time: Tue 13 Jun 2023 14:54:02 +0000
ROA not before: Tue 13 Jun 2023 14:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010 (0x7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 14:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4A0FE137F0D34A58631DF342507E6897EE345112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:5b:88:cb:67:00:74:56:cb:22:6a:56:4b:
51:38:ed:03:3a:66:7e:29:9c:38:66:d9:8f:1c:cc:
31:32:1a:b4:30:07:c1:4b:70:63:4e:57:1c:55:ba:
e4:a8:26:d7:49:01:cb:68:3c:26:bf:fb:ba:4e:b4:
de:39:57:14:47:be:d1:3d:66:ab:f5:6b:72:60:a2:
24:36:ca:c2:4f:43:17:f9:94:24:50:47:95:b7:45:
f2:93:2d:dd:1f:1f:0a:a2:e9:5c:6d:8d:cc:23:ad:
4d:d2:06:0b:55:6b:6a:59:52:8c:bb:23:23:dc:9b:
20:80:d9:5f:02:09:e0:b1:e3:3b:59:f8:fc:83:81:
a7:83:4e:23:13:9a:79:04:0c:94:7e:ac:82:4f:40:
de:42:d3:6f:f2:aa:b8:a9:de:86:d0:94:73:7b:df:
bc:64:45:d1:34:2e:fa:1c:26:b8:4b:e6:42:85:5b:
b1:16:0c:14:f1:c8:98:01:de:05:ec:ea:00:4e:3a:
1d:8a:9f:cc:51:1a:cf:da:59:cf:e2:12:53:ed:25:
51:fb:59:0e:a6:4b:ee:e2:cf:85:c4:77:1a:c9:5f:
b6:e6:07:be:2a:3a:04:20:a3:e7:b9:d6:58:b6:74:
e3:99:51:27:df:6e:3e:1b:e7:b5:db:d5:66:3f:6d:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0F:E1:37:F0:D3:4A:58:63:1D:F3:42:50:7E:68:97:EE:34:51:12
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Sg_hN_DTSlhjHfNCUH5ol-40URI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
58:38:f5:48:15:ef:6d:12:f6:cb:1b:d2:a4:e6:45:9f:fd:27:
a3:f7:c1:ff:00:a0:e8:3e:49:29:2c:17:96:d2:b0:85:88:a2:
e4:17:c1:01:1d:84:65:7f:0b:8c:be:8d:e4:9a:e6:82:d8:31:
0e:70:3d:30:87:28:d7:e8:a2:bd:70:da:ef:91:8b:2e:73:14:
24:c6:4d:42:23:99:0b:07:68:e5:b2:ca:9a:cc:10:33:73:b2:
49:e3:05:54:8a:62:43:1e:13:74:da:58:3f:dd:92:ac:01:4c:
b9:8a:7a:c9:49:dc:bd:22:78:21:74:a9:42:c8:15:d9:04:a5:
82:bf:47:dd:99:37:4c:f4:0a:8a:65:17:c0:d5:c0:03:2f:67:
e2:2d:2b:65:dd:4e:2b:fb:0d:5b:7d:f9:00:a2:7e:80:d2:e2:
7f:99:7d:bb:a7:d0:66:14:c4:ac:09:91:a4:d4:7f:c1:5b:21:
33:f5:4b:0c:d2:47:10:27:63:da:21:37:4d:f9:2b:8f:21:09:
a2:d4:42:22:d7:ae:54:df:f5:73:98:27:0a:39:fa:a5:a8:23:
68:48:0b:7a:5b:79:d3:7e:72:d7:e5:60:6f:48:92:c0:48:15:
79:dd:1c:a8:5a:e2:e2:56:04:d4:2b:ad:0a:ee:ec:ca:83:7a:
7b:cf:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org