Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/eh35ChqgouvplbLeuO8rmNHnmxE.roa
File: eh35ChqgouvplbLeuO8rmNHnmxE.roa (raw, json)
Hash identifier: UCmLCsm5yPNWUohUHVrJntwJRFeDJMcbfOP7dJCxUxw=
Subject key identifier: 7A:1D:F9:0A:1A:A0:A2:EB:E9:95:B2:DE:B8:EF:2B:98:D1:E7:9B:11
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07EE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/eh35ChqgouvplbLeuO8rmNHnmxE.roa
Signing time: Tue 13 Jun 2023 17:24:03 +0000
ROA not before: Tue 13 Jun 2023 17:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 17:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=7A1DF90A1AA0A2EBE995B2DEB8EF2B98D1E79B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:69:4d:65:13:27:13:cf:3b:1f:4d:82:68:
59:5e:7c:f4:8f:da:55:e0:a5:f0:3a:48:b3:97:a5:
25:10:be:4b:33:8b:54:c2:85:46:3e:54:c8:24:bf:
3b:c6:86:a8:2d:92:16:e5:43:df:2d:61:e1:62:de:
31:12:28:69:3c:d0:3e:f9:2c:49:30:a5:3b:97:e6:
ed:69:de:b2:cd:ac:52:b7:67:a3:61:42:da:93:a2:
8d:46:a5:45:e2:24:58:56:03:11:6e:17:5f:b3:2a:
da:91:22:1a:2b:1e:18:e4:58:11:49:18:72:ec:8b:
73:ff:b6:7f:24:1f:a3:ee:30:0b:d8:55:b5:c4:ef:
23:e0:c3:25:88:62:98:ce:d0:41:d5:7b:30:21:83:
3c:1e:dd:04:01:e7:1d:5f:a7:2e:35:32:84:80:6c:
5d:cc:84:c2:ed:d2:c8:74:fe:57:93:13:ce:d7:9b:
ea:de:33:68:7b:99:74:b5:ad:86:2a:d7:27:0a:a0:
e0:98:ea:ca:4c:5b:e2:32:02:bd:b5:07:62:1e:18:
e3:b4:da:d4:4e:eb:d2:7c:69:fc:26:6b:bf:85:a0:
e0:23:8e:da:ab:03:79:69:cc:a8:87:9a:70:9a:b6:
1b:4e:5d:4f:10:f8:f0:e5:81:41:e9:e5:cb:3a:50:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1D:F9:0A:1A:A0:A2:EB:E9:95:B2:DE:B8:EF:2B:98:D1:E7:9B:11
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/eh35ChqgouvplbLeuO8rmNHnmxE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:59:71:97:0c:49:10:ac:70:89:18:68:fa:45:a3:91:4f:c5:
a1:bd:9a:54:c6:34:f1:59:ea:46:09:72:6b:fc:19:a8:4f:20:
a2:8f:90:de:2e:e2:e7:25:b0:7c:a8:80:63:09:ec:b7:dc:1c:
2c:95:fd:e4:d4:aa:d4:5b:94:93:32:31:70:14:c1:ff:31:ec:
3e:d2:6b:b3:2c:81:2c:68:cb:2f:96:eb:cc:0c:d4:1e:ce:30:
91:57:38:3a:fd:64:5b:b5:57:e9:c5:60:94:4f:b9:cc:1f:ef:
b0:1f:eb:cf:96:4c:47:57:2d:2a:4a:32:84:4c:ce:e1:5c:20:
d1:64:84:78:7b:5c:4f:e0:57:a1:dd:bc:91:1f:97:38:af:2e:
2a:1a:07:3f:b8:1a:0b:32:8f:5b:02:c7:14:be:29:de:c9:01:
89:ad:b8:99:ef:b9:98:d9:8b:b6:a5:70:17:63:05:49:cc:86:
3c:3c:6c:c3:48:28:2f:b7:54:b7:d1:b5:5e:f8:49:ed:e1:5e:
75:69:36:41:12:30:3c:97:9a:b3:95:d0:3f:5a:27:81:11:a2:
d8:f7:62:9a:2a:c2:cf:69:d7:e0:77:f3:e0:51:e3:dd:10:04:
14:62:50:4f:99:be:80:d7:6b:5b:e5:3c:42:60:34:32:fc:4d:
eb:3a:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org