Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/mJp8h_z4Uf-qPqr4YkTH6n3u2vg.roa
File: mJp8h_z4Uf-qPqr4YkTH6n3u2vg.roa (raw, json)
Hash identifier: cqHK61VpUDUTRTzHqIpm2lEL9T+N/7DLFrn82dluQO4=
Subject key identifier: 98:9A:7C:87:FC:F8:51:FF:AA:3E:AA:F8:62:44:C7:EA:7D:EE:DA:F8
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 089A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/mJp8h_z4Uf-qPqr4YkTH6n3u2vg.roa
Signing time: Wed 14 Jun 2023 14:54:05 +0000
ROA not before: Wed 14 Jun 2023 14:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 14:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=989A7C87FCF851FFAA3EAAF86244C7EA7DEEDAF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:6a:16:b7:7f:7a:fd:aa:bf:44:dc:e1:ec:
f0:fe:63:0e:91:4b:35:ea:84:8b:46:48:6a:d7:32:
5b:2c:b0:92:f9:53:46:75:68:86:09:fb:cb:a1:3e:
61:76:e3:ab:c4:08:dc:4b:fb:2d:d7:77:d9:3f:a8:
03:f5:41:47:6d:ad:ba:aa:cc:82:16:2e:10:09:76:
bc:ae:14:21:1f:12:98:db:a5:36:f3:a2:b0:65:94:
19:dd:b1:95:62:9d:1b:18:72:15:62:24:fa:80:f9:
37:93:06:e9:a9:f7:90:2c:8f:b3:90:bf:32:0b:3d:
54:1f:02:13:a9:74:d4:19:8c:03:b3:ff:41:5d:9f:
0e:a6:8b:6a:5c:5c:cd:38:40:cd:b7:43:18:0e:78:
a1:52:4f:50:af:e0:06:fb:8d:42:0a:a9:40:f4:49:
69:cc:ae:68:d0:97:29:c2:ff:f9:5f:59:e8:97:ce:
cc:45:2a:83:db:87:4f:1b:0e:ed:da:4c:34:16:0b:
e3:1c:cb:a9:e2:fa:5d:ab:b2:fd:0e:31:0e:3b:5e:
9f:2f:68:ad:fa:24:01:72:6e:58:41:45:f9:79:73:
ef:7e:77:c1:0c:22:1b:60:e9:a2:f8:06:19:62:27:
e8:d6:e1:96:1f:b9:de:26:90:b7:7e:ab:68:fc:59:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9A:7C:87:FC:F8:51:FF:AA:3E:AA:F8:62:44:C7:EA:7D:EE:DA:F8
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/mJp8h_z4Uf-qPqr4YkTH6n3u2vg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
22:19:c3:87:42:6f:13:96:2f:b8:61:44:48:19:9d:42:c4:4e:
69:e0:08:a4:9c:fd:73:8b:49:aa:1b:81:9d:de:98:7c:19:9e:
33:f7:bf:7d:8b:f0:d3:af:ba:96:36:c0:8b:0b:a4:2c:87:42:
b2:73:87:19:df:e5:4b:20:d2:fe:f1:e0:45:9c:aa:7b:ee:2f:
a6:e5:38:90:c5:e6:56:90:ec:4c:f6:7f:85:d1:8d:fb:16:b7:
87:20:8d:01:aa:22:68:48:50:10:4e:05:41:3d:00:32:fe:7a:
e6:ec:3d:94:22:60:25:4b:43:18:ae:d3:21:4d:ea:e8:a9:e1:
6a:b4:4e:1d:06:c5:c2:e9:5b:9d:21:2b:41:59:e1:f5:96:22:
e0:34:03:10:72:01:2b:b9:46:9c:95:04:c3:dd:6a:96:36:62:
6b:79:6f:12:ea:09:6a:bb:11:e9:ec:24:ac:aa:46:c8:67:d4:
a0:45:f1:4e:99:be:de:15:9b:03:f7:31:16:50:34:89:91:b8:
2c:c3:05:5a:b1:fb:dc:51:09:3d:97:33:9a:58:5a:67:5e:60:
79:9d:02:38:db:e5:e8:1e:8a:79:3d:1a:86:22:7e:29:0a:b1:
3e:5a:0a:3a:67:00:a1:7c:63:40:51:e9:5c:9a:81:06:9c:a6:
4c:6b:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org