Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/eOorfdzhJCRkKfqn9OuYQ-rNH9g.roa
File: eOorfdzhJCRkKfqn9OuYQ-rNH9g.roa (raw, json)
Hash identifier: rDOwaa8jFbNwnU1NL3dFXzwiNtDKwOAavWkN84ntjgY=
Subject key identifier: 78:EA:2B:7D:DC:E1:24:24:64:29:FA:A7:F4:EB:98:43:EA:CD:1F:D8
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07D6
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/eOorfdzhJCRkKfqn9OuYQ-rNH9g.roa
Signing time: Tue 13 Jun 2023 14:24:11 +0000
ROA not before: Tue 13 Jun 2023 14:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2006 (0x7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 14:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=78EA2B7DDCE124246429FAA7F4EB9843EACD1FD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:b9:0a:f4:0c:46:a2:98:70:d9:94:2f:b0:
69:c5:ef:ef:fb:56:ef:ed:1a:d2:06:88:cb:46:1a:
f2:02:df:17:37:e3:fe:62:98:c0:48:71:7e:15:b8:
10:1a:ef:73:a8:42:f3:c2:fc:98:b9:12:4a:96:7e:
0f:04:c6:07:c8:a1:a3:80:f0:0e:3b:96:f3:4b:7c:
fd:16:71:87:ca:51:76:0e:77:83:5e:a4:7c:6e:a7:
0c:23:a0:b0:75:a0:a6:dc:42:ad:41:74:e7:15:6a:
5f:b1:11:3c:f4:71:18:2b:72:f8:ec:57:43:a5:81:
50:ea:67:96:ed:34:2a:ca:cc:18:84:5a:e9:c1:27:
16:36:04:8f:21:10:3b:0c:db:f3:5a:36:d6:ec:07:
68:65:fa:92:3d:cc:ba:a1:ce:fc:c0:ce:07:d5:65:
c0:da:6c:b4:7f:8a:f4:37:3b:8b:12:a3:11:1d:28:
2f:67:09:11:2a:c6:8f:32:c8:11:72:22:90:69:e9:
d6:3c:a0:64:a2:b4:49:62:81:75:4c:15:0f:88:d6:
30:e7:24:6e:a3:6a:38:d3:61:69:d3:5f:76:99:25:
68:75:31:4d:7a:07:0c:1e:b6:fb:f1:ca:34:fe:47:
7e:d2:d8:13:af:03:6c:0d:9a:1d:2d:a3:db:4a:76:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EA:2B:7D:DC:E1:24:24:64:29:FA:A7:F4:EB:98:43:EA:CD:1F:D8
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/eOorfdzhJCRkKfqn9OuYQ-rNH9g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
41:9f:92:b1:39:a9:9f:25:64:de:9f:53:10:26:ea:c6:12:1a:
fa:e2:48:66:39:63:f9:e6:2c:e3:ce:fb:c7:ca:f6:ad:fb:17:
35:1a:40:78:80:c1:a5:2b:c7:d5:82:9c:22:fb:e8:99:43:5c:
04:25:66:6b:cb:d5:a4:fb:2e:06:a4:84:55:60:5d:54:18:83:
dd:06:73:bd:7c:cd:03:d5:30:85:da:a4:e0:21:ed:d3:57:2a:
c6:ee:d6:f3:6d:b2:5e:fb:87:59:71:62:46:42:9e:d1:18:4a:
9d:bb:a0:27:b1:77:08:63:a5:74:08:56:14:5c:5e:9b:93:b7:
5c:60:ae:bd:e7:cd:5c:f2:6d:02:12:aa:5e:07:a4:b5:74:89:
42:e3:b9:e2:a0:d2:6d:04:b3:d7:85:8a:71:d2:e5:f9:83:f1:
8e:42:5a:cb:5a:92:3b:c8:58:5d:f6:30:59:6e:95:b9:af:3b:
89:49:f8:7c:07:4d:eb:bc:48:c3:4e:0e:92:56:3e:67:f7:8b:
c5:90:7d:63:88:b6:4a:9d:33:b3:8b:f8:7d:3b:05:49:c8:cf:
29:ac:44:e8:35:5b:c6:84:08:a6:61:4c:fc:fd:05:28:59:67:
52:68:c8:93:61:0e:1a:f1:b5:54:d9:df:eb:a1:33:0f:8e:14:
d5:59:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org