Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Sw2GJrGXZDxnjzQ5_8yvZtJxghc.roa
File: Sw2GJrGXZDxnjzQ5_8yvZtJxghc.roa (raw, json)
Hash identifier: fkqsPKcc7sZ4iC3rCBpAbuNj1P0JJhu7vgTWEBBU2pI=
Subject key identifier: 4B:0D:86:26:B1:97:64:3C:67:8F:34:39:FF:CC:AF:66:D2:71:82:17
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 05
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Sw2GJrGXZDxnjzQ5_8yvZtJxghc.roa
Signing time: Wed 01 Jun 2022 07:09:58 +0000
ROA not before: Wed 01 Jun 2022 07:09:58 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
103.41.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 1 07:09:58 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=4B0D8626B197643C678F3439FFCCAF66D2718217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:76:72:d9:c3:0b:a0:b9:a4:9a:3b:89:8d:
d0:50:7a:72:dc:01:3c:dc:ce:5d:68:ad:e8:aa:b4:
40:32:a8:91:26:a1:61:00:20:ed:80:21:73:f1:1c:
09:e7:5f:53:f1:ab:e5:fe:88:d8:42:3a:bd:92:6f:
5b:e2:21:da:da:9c:79:d1:fe:b5:c9:a9:6d:1d:b4:
fb:95:68:b7:f0:2d:f9:a5:dc:01:e8:6f:f4:9b:72:
c5:a6:ee:7c:8c:c5:91:18:56:bd:48:87:f2:5e:06:
05:a6:26:97:a6:e3:39:77:79:b4:61:47:9e:8b:7b:
1b:3e:1e:3e:bd:ed:0d:80:e6:9d:e3:a9:dc:a2:2e:
f9:77:3d:8b:0b:45:11:2f:38:c8:a7:fb:cb:29:f7:
08:b0:06:bc:1b:af:7a:10:9a:af:b4:ed:83:22:5d:
6e:e5:51:97:9d:33:6c:ef:31:79:59:5b:de:d8:49:
cb:53:36:e5:ac:fc:a9:ee:53:0a:cc:63:6d:3b:17:
fd:16:3d:05:6e:fa:5f:36:bb:8b:3a:0e:d5:83:c6:
72:45:5d:eb:80:8a:80:26:77:84:5b:83:48:cb:2d:
08:05:b0:02:19:09:14:04:e7:41:da:77:7e:1d:e9:
47:ea:77:08:aa:f8:17:52:3f:69:26:20:e8:f8:5b:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:86:26:B1:97:64:3C:67:8F:34:39:FF:CC:AF:66:D2:71:82:17
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Sw2GJrGXZDxnjzQ5_8yvZtJxghc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.41.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:63:42:8c:59:ff:14:6f:d2:14:22:8a:9e:a9:47:24:ba:8b:
0d:4f:6f:96:07:46:72:0c:43:be:02:4e:68:8b:f7:03:19:c5:
5e:f4:d7:be:3e:63:4f:71:0d:92:98:b9:87:5b:8d:65:a8:a3:
65:0b:a3:89:71:4a:ec:36:e3:f5:7b:d0:84:a5:9d:a3:ee:83:
e8:1c:ef:be:89:64:58:91:fd:73:f0:66:80:80:6f:c6:b7:a8:
79:7c:c0:18:26:c7:d3:87:7e:a4:41:60:9c:e8:6b:b6:dc:93:
39:80:be:3a:59:62:90:0a:cc:89:21:8a:4e:6a:f5:c2:2e:2d:
7b:10:eb:d6:e9:52:0e:f4:41:31:c7:68:ad:c0:71:11:35:ee:
e3:81:35:9f:00:a4:1c:81:db:44:fc:61:5b:5f:19:0b:19:42:
46:bd:b7:01:0a:63:6b:3f:3f:9c:00:35:4c:1c:09:53:08:84:
fe:84:09:78:52:a5:95:71:de:81:c2:bf:d9:dc:ee:40:3d:4b:
c5:6c:07:2b:f7:f8:74:dd:e6:ed:21:f3:10:be:b2:14:55:57:
09:b5:5f:17:bd:d3:4a:54:ee:60:4c:90:9f:c7:02:bf:7e:9f:
9e:bd:7e:e6:e7:d5:3b:18:dd:31:1a:b8:d2:f4:dc:45:90:d7:
b7:84:92:52
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwN0E2
MDg0MDlCMjUxQkNCMUE2QzAzMEExQzIxQkE0MUNEQkNCRjU2MB4XDTIyMDYwMTA3
MDk1OFoXDTIzMDYwMTA2NTg1NFowMzExMC8GA1UEAxMoNEIwRDg2MjZCMTk3NjQz
QzY3OEYzNDM5RkZDQ0FGNjZEMjcxODIxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALeodnLZwwuguaSaO4mN0FB6ctwBPNzOXWit6Kq0QDKokSahYQAg
7YAhc/EcCedfU/Gr5f6I2EI6vZJvW+Ih2tqcedH+tcmpbR20+5Vot/At+aXcAehv
9JtyxabufIzFkRhWvUiH8l4GBaYml6bjOXd5tGFHnot7Gz4ePr3tDYDmneOp3KIu
+Xc9iwtFES84yKf7yyn3CLAGvBuvehCar7TtgyJdbuVRl50zbO8xeVlb3thJy1M2
5az8qe5TCsxjbTsX/RY9BW76Xza7izoO1YPGckVd64CKgCZ3hFuDSMstCAWwAhkJ
FATnQdp3fh3pR+p3CKr4F1I/aSYg6PhbmIkCAwEAAaOCAfkwggH1MB0GA1UdDgQW
BBRLDYYmsZdkPGePNDn/zK9m0nGCFzAfBgNVHSMEGDAWgBQHpghAmyUbyxpsAwoc
IbpBzby/VjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMzkx
L0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvQjZZSVFKc2xHOHNhYkFNS0hDRzZRYzI4djFZLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5MS9TdzJHSnJHWFpEeG5q
elE1Xzh5dlp0SnhnaGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM
AwQCK/p0AwQCZynoMA0GCSqGSIb3DQEBCwUAA4IBAQBeY0KMWf8Ub9IUIoqeqUck
uosNT2+WB0ZyDEO+Ak5oi/cDGcVe9Ne+PmNPcQ2SmLmHW41lqKNlC6OJcUrsNuP1
e9CEpZ2j7oPoHO++iWRYkf1z8GaAgG/Gt6h5fMAYJsfTh36kQWCc6Gu23JM5gL46
WWKQCsyJIYpOavXCLi17EOvW6VIO9EExx2itwHERNe7jgTWfAKQcgdtE/GFbXxkL
GUJGvbcBCmNrPz+cADVMHAlTCIT+hAl4UqWVcd6Bwr/Z3O5APUvFbAcr9/h03ebt
IfMQvrIUVVcJtV8XvdNKVO5gTJCfxwK/fp+evX7m59U7GN0xGrjS9NxFkNe3hJJS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org