Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/c16VApmhNBgCt4Qc0Adz-upXjdc.roa
File: c16VApmhNBgCt4Qc0Adz-upXjdc.roa (raw, json)
Hash identifier: iRmZoRXeVyJPtfGxVwpLU6H1VoPZD6CNHhXpbUaKbQk=
Subject key identifier: 73:5E:95:02:99:A1:34:18:02:B7:84:1C:D0:07:73:FA:EA:57:8D:D7
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08C2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/c16VApmhNBgCt4Qc0Adz-upXjdc.roa
Signing time: Wed 14 Jun 2023 19:54:07 +0000
ROA not before: Wed 14 Jun 2023 19:54:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 19:54:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=735E950299A1341802B7841CD00773FAEA578DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:50:28:9f:63:d6:72:f7:66:2b:d6:fa:7f:
22:f2:e2:c6:0b:7b:7f:e2:49:87:36:ea:6e:dc:35:
91:3c:98:82:c0:ac:43:18:68:6a:e3:59:69:63:59:
a1:3b:ff:db:ff:e2:a7:71:c3:f9:b0:a1:48:76:86:
5b:22:a9:3a:2a:48:fe:f0:63:fa:d6:da:74:e0:a7:
ba:17:35:44:7c:ad:e8:50:9b:75:29:fe:d6:a8:61:
92:03:7e:bd:44:5d:10:bf:31:c5:99:f4:c5:44:45:
0d:39:0b:4e:5b:70:2c:29:ac:8f:e5:a1:31:15:11:
60:ed:e2:4e:9e:e0:88:e0:89:7c:e1:4a:5d:77:d0:
31:17:13:66:1e:6f:54:43:37:55:ac:d1:aa:e9:c2:
c6:4e:af:e3:9f:ff:eb:6d:58:9e:26:46:7d:20:48:
e9:f0:62:e7:e7:60:06:47:a9:95:70:69:55:1e:34:
84:4b:fc:52:5a:0d:c3:29:bb:00:35:67:32:0f:00:
b3:a2:8d:c7:d0:f7:dd:22:f6:24:ce:39:c2:83:63:
df:f7:40:0d:29:44:3c:11:e5:10:56:7f:7b:5c:1b:
9c:76:d8:be:b8:41:66:19:2f:75:ce:4b:a8:a1:1a:
8a:9d:f3:4d:0d:f3:7f:06:dc:22:f5:53:5c:7f:ff:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5E:95:02:99:A1:34:18:02:B7:84:1C:D0:07:73:FA:EA:57:8D:D7
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/c16VApmhNBgCt4Qc0Adz-upXjdc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:3d:fc:25:a3:60:eb:18:77:84:a9:0b:5f:bd:67:7f:a2:e6:
f4:49:43:ed:ce:a0:c5:ff:76:7f:d8:c9:f7:e5:b6:8d:26:2a:
93:ba:cf:d8:52:ed:40:8f:4d:d5:49:11:a8:ba:60:13:2f:45:
5c:17:a7:32:7a:99:08:78:3e:c8:76:ce:97:42:6c:8c:6b:ba:
b2:9e:fc:8e:06:f1:36:46:7e:31:3a:17:28:1c:6e:f2:52:d9:
e8:a4:14:62:58:b1:05:d6:81:fe:c8:a7:e7:67:7c:9a:e0:7a:
06:59:e0:34:23:4e:20:6e:62:81:0a:29:68:b4:1e:a6:8e:37:
32:9a:34:0f:1a:78:a3:d5:77:d1:a1:16:73:17:55:89:0e:a9:
4f:c3:f2:32:f2:48:89:a1:86:9c:3c:1f:0a:a4:73:42:12:21:
63:7f:d1:77:62:f1:eb:0d:19:6f:ab:5d:db:50:27:6c:77:8c:
bb:e2:41:4c:38:e8:9b:45:4a:ee:de:e8:33:a6:fc:fa:5f:be:
9f:27:f6:8e:1d:d5:5e:c9:0c:db:da:db:b7:e8:07:43:0c:25:
6c:1c:e1:5b:57:88:67:8d:75:29:a3:1e:e2:f3:18:a8:32:9e:
13:eb:bd:1c:8b:fe:a5:55:00:d0:0d:73:20:c0:e3:f0:0a:c1:
1e:2f:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:01 2024 by rpki-client on console-fra.rpki-client.org