Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ZyNAKnaHgq77AgxY7ASB3JqIt0Q.roa
File: ZyNAKnaHgq77AgxY7ASB3JqIt0Q.roa (raw, json)
Hash identifier: ONMFqLHFRb+WVz1wb+DD5qJw4sHgwTl0okFoebMxY2g=
Subject key identifier: 67:23:40:2A:76:87:82:AE:FB:02:0C:58:EC:04:81:DC:9A:88:B7:44
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 083A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ZyNAKnaHgq77AgxY7ASB3JqIt0Q.roa
Signing time: Wed 14 Jun 2023 02:54:03 +0000
ROA not before: Wed 14 Jun 2023 02:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 02:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6723402A768782AEFB020C58EC0481DC9A88B744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:99:da:33:d2:4a:b5:33:ac:66:91:b1:27:
4b:af:91:82:3b:f4:13:72:91:3f:70:e8:95:46:7a:
89:5f:56:c5:0b:0a:39:b9:41:cd:4f:94:c2:4f:fe:
2a:d8:8a:15:a1:f1:25:03:c9:16:8b:1b:bc:53:72:
98:be:9d:cf:e4:ef:e1:d0:63:dc:10:84:44:4a:e3:
c9:cf:d3:02:e7:88:10:d3:65:5e:20:0f:2e:68:ad:
c3:53:b4:1a:10:af:b6:2d:57:fa:6e:ad:68:6a:a6:
25:97:44:39:cf:60:28:1e:7c:1f:26:71:98:59:cd:
b3:4a:89:b1:4f:11:b7:d0:e3:5e:49:51:fc:ac:29:
0f:de:8d:30:84:9b:32:77:38:a3:d5:cb:db:7a:32:
a7:b3:c1:b8:83:cd:02:77:ea:dd:96:e2:04:6e:50:
9a:6c:fa:a3:1a:ad:08:06:ac:5e:c6:ed:e6:a7:92:
75:87:43:f2:c4:d5:0c:91:41:d2:68:16:5a:28:d8:
95:1c:d1:83:b4:98:91:c0:15:f1:59:fb:09:98:87:
f6:a8:67:46:86:1c:69:7a:bc:d5:3d:a0:76:18:a8:
d7:a3:f8:ac:4a:92:28:60:13:cb:ef:38:54:a4:ab:
4c:fd:75:3f:f4:0f:c5:4c:57:54:d5:6c:21:2c:b5:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:40:2A:76:87:82:AE:FB:02:0C:58:EC:04:81:DC:9A:88:B7:44
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ZyNAKnaHgq77AgxY7ASB3JqIt0Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ce:0e:07:b6:f3:d3:26:4f:b3:fa:7f:46:99:00:eb:f5:94:
1e:cf:dd:2e:41:a1:de:14:13:9a:c6:44:db:69:2e:73:55:db:
25:bc:36:b8:5c:80:92:c5:8c:25:0f:04:d5:c5:74:c4:3d:28:
1d:24:41:69:17:d3:2b:63:39:71:5c:d8:6b:ac:76:bb:23:2a:
a7:72:c2:21:b3:dc:6e:f4:8b:51:0e:d8:c3:52:ce:3c:84:e4:
8a:8d:07:d6:43:d1:66:25:68:53:6d:c1:f8:06:80:68:ae:5f:
e3:70:1a:b6:56:c6:6b:e5:6b:01:b7:3e:f4:d1:1b:49:85:df:
a3:47:1e:4e:c5:c4:d3:14:5d:99:42:0f:ea:62:b8:81:97:eb:
35:d9:fb:59:cc:2a:4d:25:91:2b:1c:26:d8:d4:f5:7c:79:c4:
05:75:91:3b:a9:9c:18:13:46:ac:b8:a7:89:25:91:17:29:25:
72:75:9d:97:c9:32:bb:1e:50:c1:c1:be:11:69:83:36:69:11:
22:e9:b9:73:f1:14:75:2b:c9:e5:e3:45:b7:b8:94:61:b1:8f:
06:4e:d6:19:8b:6c:13:f6:20:7a:ae:c1:d1:da:0c:d4:e4:3f:
5f:eb:3d:67:f7:85:eb:b1:5d:06:3d:a8:57:d3:8c:da:3d:dc:
1d:9e:b3:7c
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQw
MjU0MDNaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDY3MjM0MDJBNzY4Nzgy
QUVGQjAyMEM1OEVDMDQ4MURDOUE4OEI3NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkPpnaM9JKtTOsZpGxJ0uvkYI79BNykT9w6JVGeolfVsULCjm5
Qc1PlMJP/irYihWh8SUDyRaLG7xTcpi+nc/k7+HQY9wQhERK48nP0wLniBDTZV4g
Dy5orcNTtBoQr7YtV/purWhqpiWXRDnPYCgefB8mcZhZzbNKibFPEbfQ415JUfys
KQ/ejTCEmzJ3OKPVy9t6MqezwbiDzQJ36t2W4gRuUJps+qMarQgGrF7G7eanknWH
Q/LE1QyRQdJoFloo2JUc0YO0mJHAFfFZ+wmYh/aoZ0aGHGl6vNU9oHYYqNej+KxK
kihgE8vvOFSkq0z9dT/0D8VMV1TVbCEsteuvAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUZyNAKnaHgq77AgxY7ASB3JqIt0QwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvWnlOQUtuYUhncTc3
QWd4WTdBU0IzSnFJdDBRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAPM4OB7bz0yZPs/p/RpkA6/WUHs/d
LkGh3hQTmsZE22kuc1XbJbw2uFyAksWMJQ8E1cV0xD0oHSRBaRfTK2M5cVzYa6x2
uyMqp3LCIbPcbvSLUQ7Yw1LOPITkio0H1kPRZiVoU23B+AaAaK5f43AatlbGa+Vr
Abc+9NEbSYXfo0ceTsXE0xRdmUIP6mK4gZfrNdn7WcwqTSWRKxwm2NT1fHnEBXWR
O6mcGBNGrLiniSWRFyklcnWdl8kyux5QwcG+EWmDNmkRIum5c/EUdSvJ5eNFt7iU
YbGPBk7WGYtsE/Ygeq7B0doM1OQ/X+s9Z/eF67FdBj2oV9OM2j3cHZ6zfA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org