Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/_E25U2EqF8UnhQ5jD38S6Bofprk.roa
File: _E25U2EqF8UnhQ5jD38S6Bofprk.roa (raw, json)
Hash identifier: 1iZzOb47xZPOZS/kfrwWJxStIOpyOqj84PdKxFJ6wwQ=
Subject key identifier: FC:4D:B9:53:61:2A:17:C5:27:85:0E:63:0F:7F:12:E8:1A:1F:A6:B9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 089E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_E25U2EqF8UnhQ5jD38S6Bofprk.roa
Signing time: Wed 14 Jun 2023 15:24:15 +0000
ROA not before: Wed 14 Jun 2023 15:24:15 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206 (0x89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 15:24:15 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=FC4DB953612A17C527850E630F7F12E81A1FA6B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:fa:c2:1e:ff:88:bd:7a:24:a5:16:c9:33:
ac:9b:50:7f:5a:7f:2a:5c:db:ca:b7:68:2d:b5:77:
ac:fc:76:08:e8:f9:78:fa:f4:79:5b:32:16:f4:4c:
b7:c7:02:35:b7:8d:7a:86:c1:df:36:6f:76:ae:34:
bf:db:14:94:60:09:19:0a:3e:c7:88:3e:dc:bd:c4:
2e:87:ac:7e:03:1f:d3:b3:a3:66:1e:db:c0:c7:9b:
74:64:77:a2:ac:00:42:aa:4d:b8:7f:51:0e:eb:5c:
97:f8:b4:3e:55:96:4b:20:85:7b:52:d7:70:ba:cb:
b7:07:37:23:cf:f8:1d:eb:ab:7f:e8:91:48:0a:47:
9a:55:55:83:f3:bb:01:c2:7f:f5:25:fb:e4:af:b1:
5b:d6:11:b5:06:64:9c:e5:85:59:e5:c7:42:c3:84:
16:6d:62:ab:7c:a3:bc:10:ef:d1:68:d2:16:8f:3d:
0f:b7:6a:7c:2f:36:5b:bd:bb:2b:df:0d:db:8d:73:
3a:f8:13:2a:06:5a:ce:f4:3a:a1:11:ca:60:4d:5f:
78:75:c8:dd:0a:cb:1e:c1:2c:25:6a:6b:4c:15:aa:
32:2e:e5:df:d4:03:5c:3e:87:77:2d:b8:77:88:a9:
9e:35:ca:af:d3:90:d1:fc:0f:06:d3:04:1d:2a:0a:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4D:B9:53:61:2A:17:C5:27:85:0E:63:0F:7F:12:E8:1A:1F:A6:B9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_E25U2EqF8UnhQ5jD38S6Bofprk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:59:22:d6:f6:38:70:0d:56:5a:83:42:1e:24:5e:4f:af:53:
9a:3b:44:1b:9b:73:e7:28:ee:4f:6e:43:85:87:b5:d7:b1:36:
cc:aa:cb:c7:c0:6a:74:08:a7:88:10:db:b4:41:d7:6c:70:9e:
0c:90:a5:7b:1b:6a:36:2b:8c:41:8b:8f:45:6b:63:d7:67:4d:
f5:af:28:97:78:14:40:9c:28:b0:dc:96:58:21:75:c3:d6:1b:
2a:d0:ca:cf:e6:e8:01:ec:82:05:9c:c3:cf:33:8a:72:98:9e:
5c:65:6e:45:6c:5c:de:56:c5:bb:c4:1d:95:76:0d:20:f7:76:
4d:03:36:3d:28:56:9f:65:75:27:66:13:ea:08:82:0b:48:68:
96:65:bc:a7:1a:0c:9b:6a:9f:70:40:a7:62:59:b5:81:26:59:
87:7e:e7:10:f3:bf:cb:54:8c:a5:a3:bd:c7:26:ab:71:6a:be:
60:af:2e:8f:cb:d3:0b:3e:27:65:4a:3e:46:58:cc:5c:b9:2c:
2e:9a:9c:eb:8d:fd:36:b0:bc:c4:ff:4e:5e:8a:bd:ef:9e:ad:
39:03:61:c0:2c:0f:cb:fa:53:75:53:3c:67:70:bd:68:83:26:
50:f5:7e:66:4a:85:29:da:b5:34:c9:98:72:ee:50:fb:31:94:
00:b6:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org