Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/hsgIfM5NO6CtpTd1TzjK_qc1CUQ.roa
File: hsgIfM5NO6CtpTd1TzjK_qc1CUQ.roa (raw, json)
Hash identifier: COR4OJobDikeJKGqOTOlrj8cIaL8H6um24MshLIQSTs=
Subject key identifier: 86:C8:08:7C:CE:4D:3B:A0:AD:A5:37:75:4F:38:CA:FE:A7:35:09:44
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 090E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/hsgIfM5NO6CtpTd1TzjK_qc1CUQ.roa
Signing time: Thu 15 Jun 2023 05:24:09 +0000
ROA not before: Thu 15 Jun 2023 05:24:09 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 05:24:09 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=86C8087CCE4D3BA0ADA537754F38CAFEA7350944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:0f:87:c9:9b:00:e7:74:31:53:47:f8:46:
6d:f1:bd:d1:d3:01:de:b2:f7:da:d6:15:a1:b5:f5:
b9:fd:2b:47:ca:da:f4:1b:76:cb:27:6e:d1:23:98:
f9:93:6e:20:ad:e6:b1:d0:d7:85:ba:d9:fc:68:48:
9d:03:d9:a1:9b:26:ef:33:25:bf:6d:f2:07:97:67:
9c:1f:ad:88:02:fd:1f:53:2d:c5:dd:7d:63:6e:a4:
a0:dc:7b:32:70:ef:74:4e:79:e2:59:a5:3a:c7:22:
70:59:7e:3b:20:71:b7:b0:02:d7:06:50:74:df:9a:
6f:4c:2e:d9:f8:19:e9:3d:54:c7:7c:f6:9c:35:9a:
c0:db:1f:90:6a:4c:77:cf:85:95:ef:46:1b:c2:55:
60:82:2f:d5:8f:af:f9:c8:a4:bf:90:18:e0:8a:c9:
cc:16:9e:63:3e:1a:72:a2:ed:62:17:fc:88:56:de:
0c:b4:48:f7:ec:a0:fc:88:d7:d0:d6:44:b9:7e:3f:
e2:52:43:6d:6c:f9:30:20:69:5f:67:93:b6:1c:56:
62:f2:81:71:4d:94:d2:56:ba:3e:c3:ea:5c:c8:b8:
e7:26:2f:75:27:18:d4:35:31:e6:9d:11:44:b1:80:
1b:d9:2f:65:2a:c2:20:47:a8:66:b4:30:d8:7d:a6:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:08:7C:CE:4D:3B:A0:AD:A5:37:75:4F:38:CA:FE:A7:35:09:44
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/hsgIfM5NO6CtpTd1TzjK_qc1CUQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
72:d1:ca:78:fc:99:da:29:0c:1c:bb:b6:6b:78:a9:3e:2d:91:
f9:b8:72:2c:8b:d1:75:f7:fb:a5:22:cb:e6:b9:15:17:6f:c5:
80:64:0a:74:1f:66:f0:96:28:9a:6f:7c:49:10:47:b4:92:67:
ba:26:a2:05:30:ac:54:64:4f:26:53:16:8a:9b:54:97:fc:c4:
72:bf:60:67:4b:c5:f5:96:53:4f:7d:8e:7a:3f:5e:51:0d:85:
3f:4a:10:cc:b3:10:fa:78:14:b6:42:fd:0a:fe:4f:8a:43:39:
8b:e5:a4:59:ef:aa:d2:8a:fe:30:20:6a:dd:6c:89:59:58:35:
b0:68:dc:35:47:2d:ac:cc:78:ae:36:23:7d:72:3b:db:36:f7:
44:38:80:46:4a:6d:8c:ad:d9:ef:d9:a4:bc:91:b6:9b:27:f9:
72:7a:8f:3c:27:86:62:2f:17:fc:58:28:33:00:80:81:93:68:
15:d9:a5:09:36:10:75:4e:17:c9:ac:c9:c8:7d:90:0f:0a:4c:
8d:0e:d4:00:d3:b1:1c:30:d8:9c:ef:80:ce:be:c3:19:61:39:
f7:90:18:1a:99:2e:cc:5c:10:f7:86:b6:84:d3:0f:ce:88:d4:
c3:bb:13:a3:09:02:2a:3a:76:c9:55:74:0a:4f:53:65:17:8e:
76:ac:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org