Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/gjwotuPqHAhd7LIIj4pcQjTp5R8.roa
File: gjwotuPqHAhd7LIIj4pcQjTp5R8.roa (raw, json)
Hash identifier: 6XKhxFkCkhZdhJAZctzWQX7a8s7Vp6BZDYiHCyZTcuY=
Subject key identifier: 82:3C:28:B6:E3:EA:1C:08:5D:EC:B2:08:8F:8A:5C:42:34:E9:E5:1F
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08B2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/gjwotuPqHAhd7LIIj4pcQjTp5R8.roa
Signing time: Wed 14 Jun 2023 17:54:05 +0000
ROA not before: Wed 14 Jun 2023 17:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2226 (0x8b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 17:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=823C28B6E3EA1C085DECB2088F8A5C4234E9E51F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:a7:a2:25:55:89:b6:3b:e5:c1:07:25:8b:
6f:82:21:e1:11:40:ab:3d:bc:b6:36:9a:da:e4:6f:
ea:d6:29:ec:e5:58:19:8c:46:83:02:fe:bb:be:30:
df:4e:31:f9:31:b9:7b:9b:d3:6f:0c:a1:4f:07:63:
13:8c:25:0c:f8:87:44:45:ab:e4:fa:cf:6d:c7:df:
ca:f4:47:1f:95:4e:32:c5:53:99:50:91:2d:80:9e:
df:82:d0:44:31:0a:e7:f7:af:2e:85:76:b4:b4:e8:
10:f2:67:7c:da:75:2a:38:86:58:d4:2e:ff:13:e3:
5a:23:d5:9f:6c:f2:e1:eb:26:05:e1:b5:77:71:33:
c4:13:40:2a:9a:0f:93:fd:02:da:dc:ea:e7:85:02:
72:22:58:db:a6:36:48:10:3f:4e:cd:64:db:aa:71:
57:40:b8:05:86:05:70:97:5f:03:7c:88:cb:6b:83:
eb:06:c8:48:03:67:f1:46:ec:18:9a:cd:ba:58:2b:
11:2d:d5:ab:2d:e1:57:2a:06:8f:e0:8b:2b:9f:dc:
2d:f7:cd:e5:b2:32:19:31:62:3a:bc:0a:b3:30:28:
f2:c7:3b:69:1c:03:ef:93:24:67:68:ca:08:d2:af:
1d:df:fb:8c:00:d1:36:81:7c:ec:65:56:f9:6a:6e:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:28:B6:E3:EA:1C:08:5D:EC:B2:08:8F:8A:5C:42:34:E9:E5:1F
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/gjwotuPqHAhd7LIIj4pcQjTp5R8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:1e:03:96:73:dd:1f:e0:05:04:cf:aa:b1:62:c0:d3:a0:cf:
03:66:e1:92:92:9f:e6:5f:da:71:f6:9a:1b:25:94:7a:eb:91:
a1:bd:81:77:91:95:63:4b:76:93:2e:a4:a5:01:83:b3:7f:79:
53:de:6b:f8:e2:e0:96:23:5f:ca:f0:cd:2e:48:51:77:e8:e0:
82:73:b9:27:34:46:42:de:e1:02:29:34:8e:b1:07:9f:31:5c:
2f:f3:e4:af:12:d1:f7:b6:4b:9b:9a:12:72:6c:26:b5:26:9d:
5d:b0:7f:36:45:c8:eb:6a:22:5a:6d:76:42:d6:c7:25:78:a2:
0e:82:73:4a:5c:70:fc:c9:c9:e2:a1:5b:a3:f6:8f:bd:8a:05:
70:74:3e:77:10:5e:8f:80:88:1e:28:d6:9b:5a:9c:89:16:83:
16:36:2f:e3:fd:a5:88:a4:36:66:c6:11:cb:02:61:53:de:8a:
7e:f4:ac:8b:55:13:41:23:14:2e:9d:52:8a:74:e4:29:3e:3b:
4c:88:bc:79:6a:cf:d8:1c:27:db:6d:7a:96:9c:2e:b6:d1:01:
52:4a:24:5d:9d:8a:d3:56:5c:2b:c3:94:0e:12:ee:7b:06:2e:
d3:9a:8b:58:9b:c0:4c:0c:0a:b4:a9:21:9f:a6:4a:dd:56:19:
35:0b:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org