Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Vu0GMTwJMYNd8fsZUcXrVKiwSWk.roa
File: Vu0GMTwJMYNd8fsZUcXrVKiwSWk.roa (raw, json)
Hash identifier: jNh082p+/ug1M6oLe8EA4CPoAjLrw/RRN16MJBnwSF8=
Subject key identifier: 56:ED:06:31:3C:09:31:83:5D:F1:FB:19:51:C5:EB:54:A8:B0:49:69
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08D2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Vu0GMTwJMYNd8fsZUcXrVKiwSWk.roa
Signing time: Wed 14 Jun 2023 21:54:06 +0000
ROA not before: Wed 14 Jun 2023 21:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 21:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=56ED06313C0931835DF1FB1951C5EB54A8B04969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:77:c9:11:12:e3:12:1e:b0:ef:8f:65:e7:
0c:cd:90:ac:aa:d5:3f:ae:bb:a8:bd:6f:70:f3:d0:
34:00:c8:d7:8b:c1:ab:72:c8:af:b5:98:9c:ba:7c:
cd:21:86:1d:06:8f:0b:3b:d2:78:86:e7:cc:4b:c2:
c4:24:80:68:43:ba:65:4f:fe:75:a5:b4:ba:09:96:
f0:4e:59:99:7e:4a:b0:39:cd:35:98:df:2a:e4:bb:
a5:ef:90:a3:52:f6:3c:67:68:2d:74:b0:a9:06:e8:
58:2e:79:d9:6f:64:db:f8:40:56:10:4b:d1:56:04:
d2:4e:b6:85:8d:8d:0a:4f:f2:c8:82:e9:49:ae:a4:
46:95:8f:ec:4f:30:55:82:5a:a4:3e:bb:72:1f:09:
41:64:f7:d2:20:5e:ac:7c:30:47:0b:b0:b2:0f:24:
84:ce:04:8d:51:4a:a3:42:e2:f0:5d:b1:62:6a:9a:
93:fa:21:b1:08:e9:fd:8c:3f:91:21:d6:60:a5:01:
c1:f0:fc:a8:ac:d8:e8:bd:c0:e0:26:70:81:fb:3c:
55:6c:e6:18:8b:14:c0:39:83:15:db:4f:e9:c8:88:
39:16:6f:0d:1f:d8:60:67:9a:a5:2a:fa:fb:71:45:
dc:7f:69:aa:35:b6:84:33:06:8b:96:85:67:9e:37:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:ED:06:31:3C:09:31:83:5D:F1:FB:19:51:C5:EB:54:A8:B0:49:69
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Vu0GMTwJMYNd8fsZUcXrVKiwSWk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:fd:07:1b:c2:0d:48:4e:9c:34:e0:78:5d:21:a5:b0:dc:10:
64:5b:6a:67:2d:40:f0:6e:1c:20:62:80:b8:8a:14:43:b0:2b:
36:ad:1f:1f:70:74:d2:4f:d9:46:62:f3:6e:d7:00:b3:a7:2f:
bf:cf:6e:7f:6f:bd:7f:14:b2:82:0e:6f:52:e2:34:a0:e5:c4:
2d:c1:e8:9e:e9:ec:07:67:f8:a7:c1:81:a9:70:38:e4:85:be:
c4:51:42:79:0b:b4:81:50:72:49:5d:bd:f2:85:ad:06:ea:34:
19:81:50:83:2e:1f:38:a6:74:a7:ac:2e:4d:47:6f:4b:fd:01:
52:52:3a:94:b7:c6:02:20:08:10:86:50:1f:04:6b:b0:33:5d:
25:07:ed:0e:e7:f8:1a:c2:d8:f2:99:4c:3b:f6:2c:99:f7:9f:
f8:d0:03:e0:16:b6:bb:4d:25:5f:da:02:da:f3:67:c4:3f:94:
ff:e8:0f:82:6c:a5:51:f6:af:56:c0:a5:1b:5f:6d:9c:78:c8:
5b:ee:a4:57:96:4e:dd:2f:08:a2:2c:74:33:5b:ce:7e:f7:da:
33:c2:66:2c:fb:85:72:ea:a2:8b:ad:bb:ac:50:a0:d2:11:be:
88:8d:b7:c0:6a:0d:c2:c9:97:93:6b:50:61:e3:36:ba:d4:b7:
5a:87:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org