Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/V9iZUkXhl0c5I2YzK3SqusJL_QM.roa
File: V9iZUkXhl0c5I2YzK3SqusJL_QM.roa (raw, json)
Hash identifier: RA1ZpPAfdYhYx3wvMq8t5sGra0QN0UXG7LZL8Pq+VNY=
Subject key identifier: 57:D8:99:52:45:E1:97:47:39:23:66:33:2B:74:AA:BA:C2:4B:FD:03
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08E6
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/V9iZUkXhl0c5I2YzK3SqusJL_QM.roa
Signing time: Thu 15 Jun 2023 00:24:08 +0000
ROA not before: Thu 15 Jun 2023 00:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2278 (0x8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 00:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=57D8995245E19747392366332B74AABAC24BFD03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:c7:78:07:d3:23:68:c9:47:71:8e:14:e6:
25:34:35:5e:ff:b4:3e:f8:e8:22:65:de:3f:09:68:
74:2e:ec:1c:a5:72:43:fc:cf:57:e0:df:2f:b3:0f:
4a:c0:c2:19:c8:ad:47:64:b6:60:e8:b9:52:78:09:
17:87:8f:f3:29:2e:f9:34:02:35:9d:43:1a:3c:3d:
b8:a2:77:ed:92:2e:2e:73:c0:c7:4c:8b:d4:e6:4f:
5b:5d:c6:d8:fe:9e:65:87:fa:f4:9b:3a:23:0d:f3:
60:95:9a:95:c8:ea:10:7e:bc:5b:dc:39:00:64:77:
63:42:04:d8:5e:9d:25:5f:7a:cf:e5:37:25:f9:5a:
4f:fd:e8:3f:a1:ee:25:f6:2f:03:b3:1d:2b:0c:c0:
20:35:9e:c4:3b:92:48:3a:8d:81:35:9a:16:16:a8:
64:16:74:93:f8:22:ce:5f:b0:89:15:6d:fa:ea:0a:
0d:3c:09:70:2d:4d:b1:63:3a:4c:38:45:0c:be:93:
3a:71:27:0a:20:84:f7:86:33:e3:4b:81:c8:fe:4c:
5a:33:c3:b5:31:b7:dd:d3:ab:c7:01:a1:6d:a4:b7:
77:27:40:16:4f:18:3c:21:81:3d:5a:e7:2a:6d:b7:
03:af:9a:a4:5d:c6:a8:5e:fa:1d:a4:2d:49:c5:76:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D8:99:52:45:E1:97:47:39:23:66:33:2B:74:AA:BA:C2:4B:FD:03
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/V9iZUkXhl0c5I2YzK3SqusJL_QM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
26:32:cd:1b:d5:51:f6:10:3b:d3:1e:6d:ac:a6:1b:4a:ff:02:
04:4f:40:1b:9b:9c:c1:f2:85:f6:7e:9b:8b:8a:50:10:4b:18:
50:f7:d4:be:60:be:a8:0e:51:a6:53:f9:15:9c:cf:56:91:98:
98:8b:f2:74:db:18:69:99:a9:08:6e:d1:0d:f5:26:fa:73:cf:
45:a1:cd:81:d2:54:21:10:49:7c:d9:1f:d9:c2:b1:95:56:fa:
1b:29:83:11:40:88:09:c0:7c:6d:9c:95:1f:16:0c:82:3c:51:
46:cc:3a:9d:6c:2f:37:99:fa:e3:c8:6b:e4:4e:da:2c:db:ab:
56:59:7b:02:f4:c7:9f:81:74:50:5e:23:3c:50:4f:52:9d:03:
f2:e7:a1:5e:b5:fc:b1:14:d5:0b:4e:48:e7:dd:3d:25:fc:49:
90:b5:8d:7c:35:53:79:f8:cd:c9:36:ef:02:ec:3f:47:b4:77:
5f:5a:7a:ed:e3:a1:40:e7:40:de:f5:fb:d7:6e:46:c2:62:69:
55:1b:ee:5e:12:91:a0:65:0c:cb:9f:82:96:53:1d:54:b8:48:
26:11:b0:86:5e:ac:6a:0c:5e:04:73:51:2f:bc:67:f8:f9:2b:
06:3c:05:ab:5d:38:8b:f0:7c:90:0b:c3:55:bb:bc:17:7d:36:
93:d4:ad:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org