Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/cggbuwJVdmV5HBSUtXmbxN282Zo.roa
File: cggbuwJVdmV5HBSUtXmbxN282Zo.roa (raw, json)
Hash identifier: sHQw3mK2M+bY4GCXlpDsDeyBjn7VWrgLVBkWVzxmmW4=
Subject key identifier: 72:08:1B:BB:02:55:76:65:79:1C:14:94:B5:79:9B:C4:DD:BC:D9:9A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0802
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/cggbuwJVdmV5HBSUtXmbxN282Zo.roa
Signing time: Tue 13 Jun 2023 19:54:03 +0000
ROA not before: Tue 13 Jun 2023 19:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 19:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=72081BBB02557665791C1494B5799BC4DDBCD99A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:34:1c:14:bf:45:7b:16:73:1b:75:b6:79:c8:
b8:d6:80:7f:6f:4a:f3:ad:23:12:18:f5:d3:4b:16:
68:de:f5:e8:c2:41:22:f2:86:07:f9:a9:42:a5:7c:
88:60:2c:d7:5a:bb:41:34:16:e7:82:44:bd:32:b5:
ab:76:49:bc:a3:e5:84:76:45:22:55:de:db:3a:0d:
43:73:b7:ff:90:8a:35:9b:07:84:8d:b8:f7:c3:fd:
dd:5c:74:9e:f5:db:06:ec:fe:0d:49:7f:6a:9f:cd:
9e:af:fc:a2:21:d5:0c:69:14:30:c2:33:07:2e:ea:
6f:72:9d:7f:2d:cd:23:0b:be:c9:f8:12:f3:f2:10:
49:60:a1:e3:b1:1b:71:6a:a5:d3:93:29:53:55:a9:
28:56:47:23:8f:d0:b3:c4:a1:42:31:b3:e9:72:58:
50:ef:ad:76:cf:3d:cd:0b:6c:dc:b2:2e:5a:4d:5e:
71:bf:9f:ba:c0:cc:c0:cd:2e:f9:24:5e:e1:33:50:
30:29:56:5e:f3:26:60:5d:ed:a6:4d:18:37:dd:1c:
c3:2a:5a:af:2f:89:27:01:ec:56:57:b3:a9:21:e3:
26:08:d7:a2:5d:42:76:a0:9b:69:e2:64:36:11:8a:
ff:02:f9:61:14:ad:7a:1c:c4:64:15:ea:9a:7d:1c:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:08:1B:BB:02:55:76:65:79:1C:14:94:B5:79:9B:C4:DD:BC:D9:9A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/cggbuwJVdmV5HBSUtXmbxN282Zo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:9f:ec:a8:26:63:ca:67:4c:57:5e:c3:01:b9:5b:a0:ab:22:
ea:b0:b5:38:42:72:16:b8:21:a5:f7:9c:cb:9d:89:66:49:43:
8f:54:5d:be:fc:e5:4b:9c:73:ff:2c:e1:41:37:0a:56:80:f6:
fd:5f:fc:ab:00:d5:a4:2c:04:5b:83:20:ea:9f:48:a6:f1:6f:
34:1e:5b:d1:01:95:6a:91:27:33:b5:81:21:72:cd:6a:95:07:
5b:86:79:fc:f0:28:97:50:25:ab:2d:2d:e6:7a:17:44:03:29:
ea:7b:84:d9:3d:4f:9c:e2:69:ec:a1:1d:e0:8c:ff:09:02:3f:
fb:e1:c2:6b:7e:50:13:53:63:a3:ff:8e:75:55:e8:05:81:24:
7b:65:7f:ea:1a:0e:9a:a7:7b:34:4a:e4:01:e7:58:f5:25:67:
80:4e:8e:12:55:3a:e6:97:4b:48:fc:5e:b2:14:c3:44:05:ac:
44:16:e2:4f:28:a1:4e:78:6b:85:f5:1d:73:e7:56:cd:b9:b1:
87:57:7d:19:07:87:52:5b:6e:c8:c4:b1:e0:59:7f:27:1a:43:
d2:db:77:ce:9a:d3:0a:15:da:cb:b8:05:9f:d2:15:1a:6c:99:
59:bd:72:5d:b0:20:13:28:13:4e:dd:d2:cb:f9:50:d7:fa:4d:
1f:fb:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:01 2024 by rpki-client on console-fra.rpki-client.org