Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/e8eBTQ8gDnwzUl7440EptQjKgNc.roa
File: e8eBTQ8gDnwzUl7440EptQjKgNc.roa (raw, json)
Hash identifier: 6VA3qQ/wwhGNlpYg8Vc2gnB4U8WXmUscgoHxpXNJSOk=
Subject key identifier: 7B:C7:81:4D:0F:20:0E:7C:33:52:5E:F8:E3:41:29:B5:08:CA:80:D7
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08A2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/e8eBTQ8gDnwzUl7440EptQjKgNc.roa
Signing time: Wed 14 Jun 2023 15:54:04 +0000
ROA not before: Wed 14 Jun 2023 15:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 15:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=7BC7814D0F200E7C33525EF8E34129B508CA80D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:82:8b:3a:d1:3a:68:ce:45:6c:ac:cf:8a:3b:
05:b9:e0:bd:1f:ac:7a:d7:bc:10:2e:29:55:43:04:
cd:18:73:83:dd:b1:25:69:a8:dd:44:35:ba:86:19:
66:17:ba:1a:8f:f6:46:07:d9:76:38:a2:07:58:92:
1c:33:87:d7:bb:ce:82:ae:92:e4:3a:7a:3e:41:15:
c2:6b:a3:d2:0d:d2:67:93:b5:f8:f5:5a:db:98:6b:
14:34:11:1f:1a:6c:be:4e:8d:bb:9f:0a:8f:36:9c:
24:d4:c1:77:1f:d2:4d:e0:2e:5f:de:42:24:71:87:
92:02:97:36:2b:23:8d:7b:6d:59:e8:ec:87:93:d1:
02:ee:e2:70:f6:81:e5:e3:97:a5:f6:6e:d5:fe:2f:
50:c0:82:ff:d9:2d:70:db:0f:14:c0:b8:01:21:0c:
1e:9c:0c:03:ee:cc:dc:7d:b0:8e:14:eb:02:3a:96:
83:7b:6b:35:61:ab:fd:ab:57:ab:73:7d:b9:f8:5b:
24:fc:66:eb:20:69:55:91:42:c5:21:20:df:6d:1a:
9c:09:2d:de:e1:44:cc:e8:02:38:65:57:15:86:dd:
a5:8a:eb:ae:e0:1d:09:2b:a6:5c:0c:6a:38:be:e1:
7b:da:55:d8:92:6b:e8:c7:27:db:a7:d1:48:e4:3d:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C7:81:4D:0F:20:0E:7C:33:52:5E:F8:E3:41:29:B5:08:CA:80:D7
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/e8eBTQ8gDnwzUl7440EptQjKgNc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
92:8e:29:af:db:3f:cc:64:37:c5:f2:ea:cf:b1:f6:2c:c4:03:
87:6a:02:fe:8c:0a:c5:f5:5a:03:ef:9b:e2:c2:76:2a:ca:fb:
16:dc:bc:d0:61:28:5c:01:b7:77:44:ad:78:60:d5:0b:e2:ff:
9c:ee:45:8f:6c:41:03:dd:ef:57:0e:91:0b:58:18:b8:15:5e:
06:6e:f1:fa:19:bd:81:a7:c3:f0:7c:eb:13:e2:da:af:43:bc:
8b:47:4c:09:27:82:3d:a9:62:8b:3a:fe:68:f5:42:c4:a4:9a:
b4:ac:64:cf:3a:10:70:a6:4f:05:8f:62:79:53:15:e2:20:ca:
f3:86:3c:93:e3:75:cf:b3:5f:4b:d3:65:ef:0a:4b:3b:61:56:
0b:37:55:7b:35:0b:bd:6c:5d:25:41:5d:56:d9:9e:09:79:57:
5f:90:97:b3:9f:ef:ce:c6:15:c0:6e:30:c4:92:00:44:67:76:
ee:a1:d9:f3:8e:f9:fd:d2:95:82:75:eb:4f:20:37:75:40:92:
ad:53:c7:1a:d2:1c:7f:97:65:38:d0:9a:50:d2:28:97:67:37:
42:38:d6:19:af:8e:10:22:33:a8:16:e3:a5:9d:0e:d7:31:25:
8e:d4:77:f4:13:fd:6c:09:02:75:f1:39:97:6f:6d:83:df:26:
f1:d9:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org