Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/lIz4jPOl-r1xgGzR5WIEBpeSelM.roa
File: lIz4jPOl-r1xgGzR5WIEBpeSelM.roa (raw, json)
Hash identifier: UdlvzLKuscORhhYq+4ThMYAGXEYD8Y+fpiz8ItPMGDQ=
Subject key identifier: 94:8C:F8:8C:F3:A5:FA:BD:71:80:6C:D1:E5:62:04:06:97:92:7A:53
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 087E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/lIz4jPOl-r1xgGzR5WIEBpeSelM.roa
Signing time: Wed 14 Jun 2023 11:24:12 +0000
ROA not before: Wed 14 Jun 2023 11:24:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 11:24:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=948CF88CF3A5FABD71806CD1E562040697927A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:67:85:28:6f:db:42:b0:79:fb:cc:90:3a:
7a:76:36:f1:cf:ba:55:7f:7e:c9:ca:68:09:8b:31:
32:87:ac:09:67:cd:30:83:9c:50:d0:cb:5c:36:21:
e7:2c:e9:e1:a8:de:18:82:0b:1a:ce:be:58:19:b9:
c7:8b:df:3c:00:21:38:11:bf:58:b5:c4:0c:db:87:
b9:b8:f9:8e:78:ec:d8:77:23:89:2e:46:ae:b1:f5:
21:c7:2c:29:24:31:90:af:96:9a:c3:10:8e:bd:00:
d3:13:eb:0d:65:91:50:1e:88:0e:82:19:f4:97:df:
e1:4c:4a:5a:41:35:3b:6c:41:31:37:f5:cc:56:5c:
cf:ec:8f:d2:93:9b:e1:73:d1:1f:70:31:96:ee:75:
2e:d4:d1:2c:53:a5:43:e7:74:8f:79:25:32:89:80:
05:c5:85:2d:c1:95:30:20:2d:dd:a0:7b:8e:66:4a:
03:98:4f:37:48:f5:3d:eb:a6:47:2c:10:2e:b2:70:
c2:69:7c:f3:81:6a:8b:60:9d:6d:fa:d0:0f:21:25:
4d:58:7a:3c:d9:30:d4:a7:be:2c:f4:ab:e6:73:17:
c1:bb:32:ba:f8:56:80:6c:2b:b0:31:ca:d9:88:f6:
0f:a9:2f:2b:c5:69:55:40:c2:1e:69:bb:e8:ec:4a:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:F8:8C:F3:A5:FA:BD:71:80:6C:D1:E5:62:04:06:97:92:7A:53
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/lIz4jPOl-r1xgGzR5WIEBpeSelM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:60:ad:d2:03:04:e7:df:dd:82:50:a7:85:20:1c:71:07:e6:
29:a8:f7:e3:88:06:c6:19:ba:cc:c7:12:7c:7c:28:ad:36:02:
84:72:ce:47:bd:b3:4a:60:57:8f:fe:03:4a:99:35:9e:e8:4e:
3e:f0:c7:ec:44:90:8f:ff:49:6a:69:d4:d2:76:75:fc:ef:b8:
8a:cf:c8:77:02:0a:b1:a0:56:2d:48:03:cd:6c:2f:70:7a:b1:
bd:fb:ca:92:c2:65:3a:42:98:60:f2:e1:b8:6f:0b:0c:b4:32:
3c:07:20:0e:0f:36:57:e6:81:46:79:ff:70:71:73:95:df:2d:
e7:ea:8c:9e:51:e8:e6:0f:06:17:04:46:4e:27:2c:75:5d:d7:
97:19:c1:bd:57:d2:46:12:f7:18:21:e9:e5:13:13:61:8f:3b:
06:60:f2:fb:87:c4:57:45:a5:56:c8:3b:f9:7d:1f:f8:d3:16:
42:fd:72:68:77:ff:79:d9:1d:f6:9d:d8:f3:1e:90:ed:bc:1e:
28:c4:79:1d:ca:1e:1e:25:e7:b2:32:d5:79:fc:e8:e7:df:02:
f0:d3:d8:5d:ab:6a:f8:5e:b4:96:01:bd:98:93:71:cf:c5:7e:
8f:ff:9a:9d:65:3e:0c:cb:5b:93:47:7d:a8:bb:57:9e:0c:3d:
c3:24:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org