Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/k5PjKIm7-qS3h75In5RrpZlfPaw.roa
File: k5PjKIm7-qS3h75In5RrpZlfPaw.roa (raw, json)
Hash identifier: HIYeFlXBfo1ZJiv79yjMH9UAeCAvtHwcHCrRwndlStA=
Subject key identifier: 93:93:E3:28:89:BB:FA:A4:B7:87:BE:48:9F:94:6B:A5:99:5F:3D:AC
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 06FB
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/k5PjKIm7-qS3h75In5RrpZlfPaw.roa
Signing time: Mon 22 May 2023 02:41:21 +0000
ROA not before: Mon 22 May 2023 02:41:21 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: May 22 02:41:21 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=9393E32889BBFAA4B787BE489F946BA5995F3DAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:fe:b9:94:9e:d2:3b:0d:3e:f2:84:5b:bb:
f6:b3:6b:3b:3f:69:c7:56:e8:51:6b:e3:f4:b8:62:
58:ed:d1:48:8f:50:b7:e4:a2:33:6d:b4:f9:cc:c7:
7c:e3:c0:21:26:f3:e0:ca:13:82:92:c8:96:09:50:
5c:8e:4d:84:5a:84:64:95:ea:c1:c8:fc:6d:4d:a5:
76:92:9a:a7:04:14:22:46:c7:0c:38:70:9d:99:44:
75:84:15:8a:7a:12:36:77:24:81:1d:1b:e2:8d:e9:
97:b8:e3:0f:ea:b9:9a:3e:a8:5c:93:01:13:00:f7:
62:b0:35:20:86:64:5d:61:49:b1:8b:ba:1e:13:3e:
94:dc:03:3c:bd:49:f7:39:d9:23:70:58:72:b4:be:
17:3c:b3:c2:7d:21:c5:ba:12:24:ab:b2:96:24:80:
51:7c:49:b7:43:0a:5c:2b:ca:ae:b0:c5:46:1f:97:
25:7a:a4:3c:a8:a3:97:76:8c:3d:51:6e:9a:b0:25:
6b:81:fc:67:96:59:f5:ba:ef:8b:46:54:e9:48:b1:
19:62:b9:bc:0f:64:cd:7b:05:fd:e4:3d:b0:bc:05:
2f:57:80:ae:67:81:23:bf:6a:90:c0:e4:22:a3:a5:
b8:f9:7b:9f:89:0c:c1:bf:c5:6b:49:00:dc:56:ec:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:93:E3:28:89:BB:FA:A4:B7:87:BE:48:9F:94:6B:A5:99:5F:3D:AC
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/k5PjKIm7-qS3h75In5RrpZlfPaw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:5e:24:8f:fc:f2:7d:6c:43:20:d6:ea:dc:62:7e:57:79:1e:
56:54:2f:e2:bc:68:39:69:17:e9:34:c7:42:cd:1e:e6:92:25:
52:d8:67:81:40:b3:85:c3:f9:2d:65:fb:cb:66:00:41:fa:8e:
93:4a:cf:23:94:a9:49:60:37:18:fb:e9:fe:bb:ce:f7:24:13:
b2:91:ee:ca:68:51:89:70:2c:07:42:92:fe:6f:da:46:47:64:
f9:35:df:3c:27:ed:1f:a5:79:6d:1b:a3:23:65:07:b8:76:92:
2e:21:07:5d:19:91:57:7b:02:42:fb:6d:99:42:7f:5c:27:34:
39:8f:62:15:f2:42:76:82:76:c6:8a:c7:7b:51:80:97:9c:71:
51:56:b3:34:52:5c:95:74:ee:f0:7f:80:68:20:6d:bb:52:9b:
c0:7b:cc:b5:b3:23:4f:22:3b:df:82:fd:c8:c2:47:c1:71:d2:
e2:f2:57:1b:25:54:e8:bd:61:45:bb:9c:71:76:4a:31:34:cf:
76:3d:63:7d:b4:78:13:3f:58:bb:95:19:96:59:3b:7d:f0:85:
ff:67:bb:ba:f0:ab:b9:c7:83:23:14:f0:72:8a:a5:6b:4f:72:
3d:a6:dd:21:7f:7f:7c:a3:9d:5d:bf:f2:0a:e2:8c:e2:97:45:
17:1e:84:37
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA1MjIw
MjQxMjFaFw0yNDAyMTcwMjQ2NTlaMDMxMTAvBgNVBAMTKDkzOTNFMzI4ODlCQkZB
QTRCNzg3QkU0ODlGOTQ2QkE1OTk1RjNEQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg+/65lJ7SOw0+8oRbu/azazs/acdW6FFr4/S4Yljt0UiPULfk
ojNttPnMx3zjwCEm8+DKE4KSyJYJUFyOTYRahGSV6sHI/G1NpXaSmqcEFCJGxww4
cJ2ZRHWEFYp6EjZ3JIEdG+KN6Ze44w/quZo+qFyTARMA92KwNSCGZF1hSbGLuh4T
PpTcAzy9Sfc52SNwWHK0vhc8s8J9IcW6EiSrspYkgFF8SbdDClwryq6wxUYflyV6
pDyoo5d2jD1RbpqwJWuB/GeWWfW674tGVOlIsRliubwPZM17Bf3kPbC8BS9XgK5n
gSO/apDA5CKjpbj5e5+JDMG/xWtJANxW7PDNAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUk5PjKIm7+qS3h75In5RrpZlfPawwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvazVQaktJbTctcVMz
aDc1SW41UnJwWmxmUGF3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAG14kj/zyfWxDINbq3GJ+V3keVlQv
4rxoOWkX6TTHQs0e5pIlUthngUCzhcP5LWX7y2YAQfqOk0rPI5SpSWA3GPvp/rvO
9yQTspHuymhRiXAsB0KS/m/aRkdk+TXfPCftH6V5bRujI2UHuHaSLiEHXRmRV3sC
QvttmUJ/XCc0OY9iFfJCdoJ2xorHe1GAl5xxUVazNFJclXTu8H+AaCBtu1KbwHvM
tbMjTyI734L9yMJHwXHS4vJXGyVU6L1hRbuccXZKMTTPdj1jfbR4Ez9Yu5UZllk7
ffCF/2e7uvCruceDIxTwcoqla09yPabdIX9/fKOdXb/yCuKM4pdFFx6ENw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org