Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/YJrbFLdpNwuZrgdhB4GeAwXBXq0.roa
File: YJrbFLdpNwuZrgdhB4GeAwXBXq0.roa (raw, json)
Hash identifier: SAhktgILX6h1pd2/yqjpFIgiys8zjo7p+4pKvVXjC2k=
Subject key identifier: 60:9A:DB:14:B7:69:37:0B:99:AE:07:61:07:81:9E:03:05:C1:5E:AD
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 083E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/YJrbFLdpNwuZrgdhB4GeAwXBXq0.roa
Signing time: Wed 14 Jun 2023 03:24:02 +0000
ROA not before: Wed 14 Jun 2023 03:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 03:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=609ADB14B769370B99AE076107819E0305C15EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:1f:7d:c1:17:e2:e1:1d:9b:80:01:7b:1d:
70:a3:4d:ef:23:e1:c0:5f:3e:26:38:be:0c:33:60:
f7:e0:a3:2c:6f:e4:2f:37:44:e2:48:7d:14:aa:6a:
7b:54:0d:f6:4c:12:79:68:ec:5d:c7:66:41:38:9b:
16:57:0f:2c:14:21:ab:b0:6c:a7:81:1f:eb:74:bf:
af:a6:09:6d:6b:48:cb:c8:fd:ba:34:dc:64:a5:f8:
39:38:a4:75:e4:84:ec:33:fe:09:56:84:60:bb:61:
c0:28:2e:fc:46:f6:db:6c:cd:5d:f3:84:cd:01:13:
dc:d0:4f:00:7a:b3:fa:77:40:c5:6b:db:2e:19:4d:
f1:34:0f:24:59:a9:96:fe:58:ab:e5:2e:04:2f:c1:
78:9b:99:93:f8:71:dd:b3:eb:c0:5d:82:b7:ab:e0:
05:e9:0b:fd:74:c5:1e:21:d3:41:d1:19:05:10:31:
ea:82:52:ce:6c:21:52:8b:90:1b:e5:7e:54:34:d4:
d7:97:bc:a4:fc:7c:f0:97:49:5f:26:19:79:26:50:
3a:9c:f2:b1:9d:5e:cb:30:cd:76:bc:12:9d:2d:ad:
84:0a:13:c4:2d:8e:89:98:14:10:dc:ee:9b:05:3c:
62:87:e6:f3:3e:ae:02:84:3d:e5:1a:c4:bd:eb:14:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:DB:14:B7:69:37:0B:99:AE:07:61:07:81:9E:03:05:C1:5E:AD
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/YJrbFLdpNwuZrgdhB4GeAwXBXq0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:26:3b:60:3f:08:0d:7e:12:71:8d:d7:e6:aa:6f:b3:6e:31:
69:9e:be:65:18:52:4c:d6:88:2d:bb:18:92:d7:e3:70:e9:e9:
4e:45:bb:c7:b4:72:2d:ae:03:4a:20:24:be:87:8b:12:67:51:
a8:0e:76:5c:54:0b:97:fe:d4:34:a2:d3:5b:12:a1:5f:16:0a:
56:6a:cb:75:9e:7b:76:2e:88:80:d8:31:d6:eb:c2:f3:1b:43:
37:f9:b5:17:47:33:43:ea:5e:ce:04:6e:1c:90:4a:93:4b:92:
40:cb:15:1f:81:9d:bd:23:ed:ec:e3:8c:0f:b8:f1:92:cd:d9:
78:89:07:60:7b:83:ab:08:61:03:66:5f:97:96:d4:10:af:1e:
53:05:56:0d:95:af:8d:65:79:13:b4:e8:5e:0f:bd:66:0a:70:
6a:47:0e:40:99:89:63:64:8e:70:cc:55:7c:c1:e3:c1:45:ad:
41:ee:4f:9f:7d:f5:7b:cf:ba:be:5e:52:43:1a:db:27:79:44:
20:cb:c3:f2:dc:7d:af:d6:fb:c7:29:a6:8e:c1:24:f8:16:4a:
ec:df:43:fc:48:36:b4:d4:0c:ec:58:ee:d0:b8:89:92:f6:66:
ba:b9:ca:55:ce:b4:09:bc:8e:61:9c:64:99:34:f0:b6:a9:c5:
d6:24:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org