Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ULIRzoJW8EX5Ud-H4gI6goU1Wlg.roa
File: ULIRzoJW8EX5Ud-H4gI6goU1Wlg.roa (raw, json)
Hash identifier: PVJbJ4Uxotd1Ala2u4MgUr2Y1W0QaI01xndKxSvZJjU=
Subject key identifier: 50:B2:11:CE:82:56:F0:45:F9:51:DF:87:E2:02:3A:82:85:35:5A:58
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0862
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ULIRzoJW8EX5Ud-H4gI6goU1Wlg.roa
Signing time: Wed 14 Jun 2023 07:54:04 +0000
ROA not before: Wed 14 Jun 2023 07:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146 (0x862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 07:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=50B211CE8256F045F951DF87E2023A8285355A58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:ff:4e:1d:74:00:45:50:88:d7:4d:f8:0e:
c8:33:e0:3d:a5:c2:c9:3a:3a:08:6a:15:9d:67:2b:
44:d9:bf:33:af:86:10:b9:f0:f3:47:6c:8b:b7:60:
b4:d1:d7:6c:65:f5:aa:4b:31:04:00:85:de:c4:18:
44:ed:74:03:55:27:a6:4a:53:05:a6:2f:bf:5d:4e:
7a:9b:df:99:2d:96:c6:03:84:8f:25:fb:41:a9:37:
51:32:2a:43:ac:fb:2b:75:7d:78:52:6b:8c:84:7f:
88:78:14:37:93:36:6e:af:06:d8:66:40:cc:ad:3c:
6e:a7:6b:3f:d7:20:3e:b0:36:9f:80:44:2b:6e:3f:
aa:03:78:34:77:2f:63:1b:5c:9e:ad:1a:db:22:3c:
82:27:72:17:ad:49:06:59:a5:2b:0b:bc:c8:fd:e3:
3e:3e:d2:ec:3e:fd:86:e6:16:3f:95:a2:df:35:2a:
72:1d:f1:81:04:a7:1a:ee:14:dd:6a:6d:40:29:a2:
1f:00:b6:2f:ad:2a:ad:9f:f8:45:68:da:1b:b8:e6:
e8:03:93:6b:93:7e:ee:b7:a5:6c:7b:3f:dd:67:8d:
5c:9d:25:b3:9c:6a:ca:c9:e1:f9:13:42:89:33:76:
52:5e:82:ea:1c:26:8a:25:0d:f9:6d:44:6e:58:10:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:11:CE:82:56:F0:45:F9:51:DF:87:E2:02:3A:82:85:35:5A:58
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ULIRzoJW8EX5Ud-H4gI6goU1Wlg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:b1:33:20:cd:e6:e9:fc:07:9d:c8:79:96:8c:dd:50:f0:3f:
ff:a7:ba:93:da:86:27:a8:eb:ba:26:90:ed:c0:15:75:ca:ee:
a4:29:4d:b5:3e:06:d8:f5:2c:97:55:cc:78:b5:fd:58:c3:47:
4d:bc:f7:c4:91:75:a8:74:2a:8d:70:69:08:bb:c5:14:1a:ec:
65:5d:a7:65:2c:e9:3e:20:d7:d4:88:10:ab:03:82:4d:c9:66:
88:02:c4:07:d4:4b:f5:90:11:ae:29:a7:5f:ce:4d:9e:e1:be:
ac:1e:85:a9:93:20:7d:38:38:a2:8d:93:b1:a0:9e:06:57:cf:
15:21:8d:dd:bc:cc:45:64:0b:62:64:bb:7e:26:66:2a:b0:f8:
97:5f:78:0a:86:30:eb:79:38:27:2c:0e:dc:d2:45:2a:57:16:
5b:c8:d3:00:49:7e:07:a2:d5:6d:a9:26:cb:90:56:64:a5:f7:
ff:79:65:6e:b0:a2:16:74:fd:1a:91:3e:eb:e4:c1:29:08:c1:
d0:e2:1a:1f:3d:1c:a3:13:c0:e4:a2:84:08:86:34:03:86:0e:
64:73:5b:1c:af:6b:c8:28:e2:69:16:42:6d:b4:6a:5a:03:cb:
42:f1:c4:40:ba:91:38:6d:1e:7e:4d:78:74:dd:4a:52:c0:cb:
2b:41:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org