Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/U-IIco1dB4NftZ8L49h2EnruH38.roa
File: U-IIco1dB4NftZ8L49h2EnruH38.roa (raw, json)
Hash identifier: A8T/q7+VGObKaV/TQ9MMSnFikM0eKDMV6kFyK4fmXJI=
Subject key identifier: 53:E2:08:72:8D:5D:07:83:5F:B5:9F:0B:E3:D8:76:12:7A:EE:1F:7F
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08EA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/U-IIco1dB4NftZ8L49h2EnruH38.roa
Signing time: Thu 15 Jun 2023 00:54:05 +0000
ROA not before: Thu 15 Jun 2023 00:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282 (0x8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 00:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=53E208728D5D07835FB59F0BE3D876127AEE1F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:c3:e2:0a:fd:fd:4f:79:0f:92:31:23:b8:
48:66:41:66:00:38:0a:3b:6d:bc:93:0f:8f:2a:10:
f0:3a:32:be:de:83:c9:d7:35:20:41:d4:f5:66:84:
02:08:b1:54:9c:17:e4:49:22:6d:7a:c1:f5:16:22:
5a:57:d9:a6:40:10:4a:79:f8:84:a5:05:97:79:0c:
61:44:0e:63:3c:7b:34:42:e5:53:85:de:92:f9:d6:
0b:2e:27:32:2c:4f:5e:99:55:0e:80:0f:f8:d7:6f:
8e:2a:c9:e8:29:ff:b4:b7:f2:42:c2:cd:66:08:08:
ea:37:01:cc:64:bc:2b:7e:9e:5b:40:9e:a1:38:8e:
f9:f1:b2:be:20:d5:31:7f:a7:44:71:66:4b:ec:d5:
da:5b:48:92:95:fe:64:56:af:5e:94:c7:7b:fe:af:
14:97:2f:74:5b:dd:ce:c9:8c:4e:6a:ab:ad:4f:90:
bc:ee:e1:7c:ad:6f:c7:10:90:d9:b6:2f:6e:bf:a6:
0b:6a:fc:e4:bc:c7:72:19:7d:b6:33:4d:86:d1:5d:
e6:19:82:74:81:73:93:78:6a:6d:af:18:d0:a3:22:
92:8b:ba:5f:a1:dd:ab:40:03:8b:4e:9f:e7:62:45:
37:f1:59:52:1c:14:10:7e:4e:48:7c:00:97:22:a9:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E2:08:72:8D:5D:07:83:5F:B5:9F:0B:E3:D8:76:12:7A:EE:1F:7F
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/U-IIco1dB4NftZ8L49h2EnruH38.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
53:7f:e9:d6:aa:99:41:0f:f6:43:db:9a:87:85:ee:f8:41:ca:
49:6b:fc:e7:77:d1:18:f6:84:d4:8b:1d:da:99:37:97:d9:3a:
16:8c:55:d1:74:de:71:db:0a:4f:50:0e:9a:ac:94:ce:80:8c:
44:c5:22:78:64:7e:e9:66:bc:14:be:6c:5f:86:bf:89:1f:1c:
ee:27:4d:f9:23:f1:d1:7f:f4:08:d6:fd:45:5b:92:83:68:9c:
3b:8e:ad:47:f1:92:3b:a9:de:f0:59:4e:5b:b1:7c:19:9e:d2:
9f:61:5d:97:97:99:18:3b:fc:1f:5f:09:f2:8d:05:3a:17:a9:
e5:d5:31:5b:c8:a1:a8:24:e5:f2:ad:57:58:bc:38:73:86:9a:
d9:63:1f:1a:13:94:a0:91:7b:57:74:1c:40:2a:21:7b:e8:77:
30:1b:44:a6:ba:c4:ed:45:51:5c:e6:4f:31:4d:cf:f3:de:83:
b9:a0:12:21:c7:42:cf:9d:ff:66:ca:c6:9f:2e:5e:ac:af:2e:
45:de:aa:8a:b5:14:26:4e:51:72:d0:b5:f5:bf:2e:3a:8e:60:
eb:01:bd:eb:1d:7a:70:19:57:97:d1:dc:58:0f:8b:20:fd:75:
65:34:c6:b0:c3:0a:5b:4c:2c:25:9b:b7:cf:91:9a:71:38:3f:
78:ee:5f:96
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTUw
MDU0MDVaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDUzRTIwODcyOEQ1RDA3
ODM1RkI1OUYwQkUzRDg3NjEyN0FFRTFGN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxKsPiCv39T3kPkjEjuEhmQWYAOAo7bbyTD48qEPA6Mr7eg8nX
NSBB1PVmhAIIsVScF+RJIm16wfUWIlpX2aZAEEp5+ISlBZd5DGFEDmM8ezRC5VOF
3pL51gsuJzIsT16ZVQ6AD/jXb44qyegp/7S38kLCzWYICOo3AcxkvCt+nltAnqE4
jvnxsr4g1TF/p0RxZkvs1dpbSJKV/mRWr16Ux3v+rxSXL3Rb3c7JjE5qq61PkLzu
4Xytb8cQkNm2L26/pgtq/OS8x3IZfbYzTYbRXeYZgnSBc5N4am2vGNCjIpKLul+h
3atAA4tOn+diRTfxWVIcFBB+Tkh8AJciqcaTAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUU+IIco1dB4NftZ8L49h2EnruH38wHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvVS1JSWNvMWRCNE5m
dFo4TDQ5aDJFbnJ1SDM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAU3/p1qqZQQ/2Q9uah4Xu+EHKSWv8
53fRGPaE1Isd2pk3l9k6FoxV0XTecdsKT1AOmqyUzoCMRMUieGR+6Wa8FL5sX4a/
iR8c7idN+SPx0X/0CNb9RVuSg2icO46tR/GSO6ne8FlOW7F8GZ7Sn2Fdl5eZGDv8
H18J8o0FOhep5dUxW8ihqCTl8q1XWLw4c4aa2WMfGhOUoJF7V3QcQCohe+h3MBtE
prrE7UVRXOZPMU3P896DuaASIcdCz53/ZsrGny5erK8uRd6qirUUJk5RctC19b8u
Oo5g6wG96x16cBlXl9HcWA+LIP11ZTTGsMMKW0wsJZu3z5GacTg/eO5flg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org