Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/bDSObgIL2InP_lsyPNd9acxpDVg.roa
File: bDSObgIL2InP_lsyPNd9acxpDVg.roa (raw, json)
Hash identifier: 0LzyqkDxAlLkxQiJLau/6qx4N2jMSzH1wVyP/Wfyq2E=
Subject key identifier: 6C:34:8E:6E:02:0B:D8:89:CF:FE:5B:32:3C:D7:7D:69:CC:69:0D:58
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0806
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bDSObgIL2InP_lsyPNd9acxpDVg.roa
Signing time: Tue 13 Jun 2023 20:24:03 +0000
ROA not before: Tue 13 Jun 2023 20:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2054 (0x806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 20:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6C348E6E020BD889CFFE5B323CD77D69CC690D58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:06:4e:9e:b7:b6:ba:2b:f1:cb:15:d7:50:
f0:e5:fa:e3:c4:b0:12:d4:a2:0b:47:69:71:b9:cf:
ea:11:b3:6b:2b:5e:a2:99:89:c0:77:5f:41:83:8e:
8e:b7:08:d0:e4:e4:0a:a7:cd:e3:67:6e:9a:51:69:
c4:72:46:8f:ec:95:43:92:84:8c:b5:c9:5c:e7:60:
f1:41:c8:c7:bf:7a:b0:bb:e1:44:97:3b:7a:95:9a:
2e:2f:24:e2:b3:e4:c1:db:2e:bb:ff:79:a9:bc:b3:
7c:a8:4b:d8:d0:d8:db:bc:5f:6a:18:a8:36:cc:86:
b4:40:66:59:79:35:13:ff:3e:81:8b:4d:3b:2f:28:
84:7f:01:40:bc:b9:07:6a:48:f6:b4:d4:17:c2:e1:
ab:2b:a9:d3:16:61:9d:23:d8:bb:8a:8b:27:eb:1b:
9c:18:1e:11:ce:d7:23:67:f5:ee:65:03:a3:63:d7:
cf:66:ec:e9:51:1e:d6:f1:a4:ae:b2:56:45:1f:68:
ce:f5:c7:34:46:e6:f3:cb:ea:78:93:80:75:7b:dd:
d3:ad:f6:f2:fc:82:17:83:c0:6a:21:bb:6a:9c:26:
2c:84:2d:52:6a:f1:06:b3:35:8c:37:4e:53:81:94:
d0:06:09:59:7e:45:26:fc:cf:fa:94:54:b2:3e:a6:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:8E:6E:02:0B:D8:89:CF:FE:5B:32:3C:D7:7D:69:CC:69:0D:58
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bDSObgIL2InP_lsyPNd9acxpDVg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:72:2b:7f:1d:8f:88:31:42:ed:65:7d:20:fe:1a:8b:6e:07:
f6:08:24:10:bc:f6:18:74:33:69:be:7d:d3:95:4e:fb:0f:b6:
d2:4b:2e:e5:f3:19:c2:2d:f3:ed:9b:35:ce:fd:d7:de:ba:68:
c7:38:2e:93:7a:c4:cf:cd:55:dd:ef:1b:36:09:08:9a:7c:32:
91:49:ce:b3:d6:77:c8:08:90:67:58:cf:73:b8:33:ef:39:7b:
da:2f:2f:eb:e5:92:4c:6c:4d:ab:70:9d:3d:ad:3a:c6:16:8d:
59:bf:bd:91:f9:ed:90:df:46:62:ef:d8:6b:59:19:c2:f0:bc:
97:7b:91:5e:77:43:07:0c:d4:e6:47:fb:29:0a:01:62:34:69:
28:99:0a:1b:7c:39:1e:41:83:ba:66:9f:3d:99:ca:88:f9:10:
aa:ea:01:71:79:cc:e3:7b:19:ce:df:b9:4f:5d:25:69:21:6a:
52:5a:fa:c1:64:63:c8:11:35:41:5a:c9:aa:11:07:c1:21:b1:
34:3c:5e:49:13:89:17:c8:04:70:43:1d:7f:a1:24:ab:c6:d2:
81:39:09:ff:e3:d2:a1:c3:63:9d:03:44:78:81:da:da:9a:ab:
dd:50:6b:c3:a6:ca:40:95:d7:fe:02:e5:2e:1c:10:fb:d2:9d:
33:b6:9c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:01 2024 by rpki-client on console-fra.rpki-client.org