Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/fSiwkwX3rvVUGC2pKZBHuT9fkvM.roa
File: fSiwkwX3rvVUGC2pKZBHuT9fkvM.roa (raw, json)
Hash identifier: 5bGm8X07nvmaKUXeWzVUql814OEJqK/z4CdIMq60Lf8=
Subject key identifier: 7D:28:B0:93:05:F7:AE:F5:54:18:2D:A9:29:90:47:B9:3F:5F:92:F3
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08FE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/fSiwkwX3rvVUGC2pKZBHuT9fkvM.roa
Signing time: Thu 15 Jun 2023 03:24:08 +0000
ROA not before: Thu 15 Jun 2023 03:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 03:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=7D28B09305F7AEF554182DA9299047B93F5F92F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:f7:12:7a:92:c7:6c:ee:e9:6a:ce:d6:17:
26:39:59:b9:ad:e7:21:aa:06:95:41:c0:71:70:53:
ec:8e:1e:8a:77:65:b5:23:2b:f5:d1:36:35:35:fa:
a9:27:f4:5a:c8:ec:e6:e6:2b:00:1c:77:9b:75:04:
f9:17:a3:d2:74:1c:d1:16:77:68:d4:2a:1d:a3:18:
08:79:f7:e7:16:f7:51:f2:73:5e:7e:02:f1:40:71:
fc:ab:76:e7:ec:1c:b9:c3:61:a8:5b:b4:93:8c:81:
17:3d:a7:cd:ee:04:1a:a2:30:14:44:7a:38:d0:24:
e5:cd:58:f7:45:34:ac:eb:ec:af:4f:2d:2a:21:70:
2a:76:14:a1:6c:14:5d:cc:92:35:f7:cd:3b:cc:17:
e0:f1:a1:7d:af:0a:e8:92:10:c8:d9:e7:b4:38:83:
a0:76:3a:ec:be:43:0b:16:4b:91:27:3f:e3:ab:4d:
2c:29:bc:c2:b7:6c:bd:54:28:84:c9:7b:0d:05:dd:
2c:14:01:86:72:6a:94:c0:2c:7f:48:95:45:f1:28:
83:04:97:f7:77:c1:8c:88:78:a0:e3:21:b4:d5:22:
4a:69:f5:75:2d:0f:bd:fa:8f:78:5b:39:1d:b0:59:
e6:c0:cf:49:63:29:57:67:d9:f2:b7:ad:81:d4:89:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:28:B0:93:05:F7:AE:F5:54:18:2D:A9:29:90:47:B9:3F:5F:92:F3
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/fSiwkwX3rvVUGC2pKZBHuT9fkvM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:81:f7:b5:a2:10:70:5d:72:d7:3c:85:5e:63:25:e3:0e:ff:
ee:46:f6:e0:7d:4f:50:5d:dc:8b:51:1e:f5:c1:45:0a:74:f9:
80:1c:2a:e1:45:ae:c2:9f:1f:2d:dc:8d:91:8b:a4:27:25:69:
9f:a3:f3:d9:27:90:02:0d:53:71:c2:ec:b9:e1:8e:e1:a8:14:
70:04:75:61:8c:3b:81:f2:44:bc:fe:4b:74:9f:62:1a:f3:61:
ef:87:ec:1d:50:1d:bb:73:b2:4b:1a:4f:71:6d:64:15:8f:08:
40:a0:f3:45:be:cf:2f:d9:9e:9e:0f:c0:c2:8e:b0:02:14:e2:
57:ad:2e:f0:44:66:d5:e2:3c:85:66:e4:66:0e:12:53:07:aa:
8b:72:59:60:5d:fe:d0:30:1f:21:db:51:84:75:c8:e5:02:dd:
77:57:a4:8c:31:f5:68:ea:78:3e:56:18:e8:d5:2e:3d:4f:69:
19:a9:ae:3c:cd:10:18:14:42:2a:86:b3:39:45:90:82:ff:83:
c0:32:b4:50:6b:d4:f6:b9:10:58:3c:5f:79:2d:44:61:a4:19:
a1:37:60:73:df:88:b7:b5:2f:e6:4c:3b:12:0f:2d:7e:7f:18:
33:7a:63:68:53:a4:86:a2:b7:3e:b1:7d:2c:ee:fa:b4:ed:1a:
26:d3:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org