Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/T0yVa3Sa1GUN9_77hcOVeWQXcXU.roa
File: T0yVa3Sa1GUN9_77hcOVeWQXcXU.roa (raw, json)
Hash identifier: 8UBFugZ3CES5IzgM0XYwCMYgwOck3IsLNjdYoIGYtZg=
Subject key identifier: 4F:4C:95:6B:74:9A:D4:65:0D:F7:FE:FB:85:C3:95:79:64:17:71:75
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 081A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/T0yVa3Sa1GUN9_77hcOVeWQXcXU.roa
Signing time: Tue 13 Jun 2023 22:54:03 +0000
ROA not before: Tue 13 Jun 2023 22:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 22:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4F4C956B749AD4650DF7FEFB85C3957964177175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:18:62:8b:cf:7a:00:8e:b1:b2:b5:3e:94:
9a:7b:a2:c9:bd:d5:e9:95:93:ae:76:2f:b5:d3:86:
54:da:3a:3e:55:5e:02:94:3c:ba:ac:ca:e1:3d:85:
86:95:43:04:e4:d8:6f:28:f7:3f:66:43:ac:d6:d2:
02:c8:4e:f5:0b:30:43:8f:ea:0e:d3:5a:5b:0a:ba:
27:e3:6a:2b:a8:e6:b6:28:97:de:2b:ab:23:b1:bd:
22:7c:10:14:e0:e7:53:53:36:eb:b7:59:cb:8e:b2:
95:5d:55:12:1a:06:91:ca:48:a5:1e:76:b3:cd:e8:
fc:7a:f6:79:81:6e:ac:c9:09:66:14:37:b7:23:a7:
2b:f3:0e:fd:e4:03:ca:d0:28:ea:92:2a:b5:8c:65:
bb:ad:e2:4c:b6:03:9e:25:47:38:b7:91:67:c9:8b:
42:8b:30:22:f1:91:31:c6:d2:1d:6d:66:fe:e1:c5:
40:e0:48:46:50:e3:8b:31:cc:be:19:e7:c2:4b:ea:
22:63:02:57:66:50:53:1f:e0:16:af:c2:9c:10:f8:
9e:20:88:96:12:fe:3e:89:66:f3:82:a8:0d:da:b1:
0f:2a:96:89:e3:be:13:69:1e:20:7f:56:a8:26:e5:
b4:fe:1e:60:52:36:49:0f:56:15:f1:18:7a:f6:de:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:95:6B:74:9A:D4:65:0D:F7:FE:FB:85:C3:95:79:64:17:71:75
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/T0yVa3Sa1GUN9_77hcOVeWQXcXU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:78:26:80:e7:59:ae:d1:87:b8:a8:90:bc:19:10:c9:35:33:
b9:77:2c:b6:47:7c:e9:1c:18:37:2c:3d:ac:09:54:9f:dc:73:
d7:f6:be:d7:6b:9c:f2:16:ca:6f:2b:2d:cd:bb:c9:be:b4:8b:
c8:97:c0:1b:e6:d6:86:0e:98:7c:58:75:0d:87:92:8e:b6:ba:
48:9c:f8:64:ed:07:49:45:da:ee:64:4e:19:d7:97:3f:7d:db:
8c:b2:6e:3e:7c:7d:bb:56:35:45:f7:98:2f:47:cd:02:a7:07:
a4:f1:62:46:99:28:2b:04:25:c8:16:10:52:a6:51:f7:79:a4:
7e:49:c2:e5:b9:b2:f8:62:64:99:67:18:37:43:60:df:a7:6d:
a4:ad:43:ef:fc:95:ee:5b:5b:4f:46:f6:45:14:1f:30:89:2c:
6d:52:3d:50:cd:ab:bf:4f:49:a8:6a:31:6e:8d:55:96:34:f4:
73:f6:3c:18:03:85:30:f4:70:57:b1:ce:f7:55:46:36:6a:8e:
3a:3a:0d:c4:99:53:d5:62:9a:ef:79:13:71:78:53:99:10:1b:
e5:80:f8:c9:f3:67:b4:1c:15:f2:75:d9:e1:a8:83:03:c1:91:
3c:4f:b1:b9:38:f8:ae:65:5c:9b:f8:76:81:d7:65:8c:8b:b7:
96:46:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org