Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/mNo_ownJLax_Kg0Zqw2MAYptqkM.roa
File: mNo_ownJLax_Kg0Zqw2MAYptqkM.roa (raw, json)
Hash identifier: qpA+I6D3nzKpMdvS7R2qdo/W14IGIedyAAmGhBrrnOQ=
Subject key identifier: 98:DA:3F:A3:09:C9:2D:AC:7F:2A:0D:19:AB:0D:8C:01:8A:6D:AA:43
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0812
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/mNo_ownJLax_Kg0Zqw2MAYptqkM.roa
Signing time: Tue 13 Jun 2023 21:54:04 +0000
ROA not before: Tue 13 Jun 2023 21:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 21:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=98DA3FA309C92DAC7F2A0D19AB0D8C018A6DAA43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:8f:f7:3f:a4:b6:da:f4:3b:a3:3f:49:01:
31:d0:84:fc:0c:34:08:40:c3:e9:e6:48:34:d2:29:
e8:75:46:2e:a2:c2:d5:db:96:9c:18:73:78:d2:51:
3a:a2:fa:c4:8a:c0:d3:4a:b6:dc:07:bb:c1:39:b9:
8f:4c:97:12:05:cf:8b:15:3a:24:25:4d:99:ef:00:
cd:c9:e9:e6:b0:c9:40:70:5c:9d:83:b7:9b:7a:8f:
8f:0b:7d:e6:41:3d:8d:a8:07:2f:3c:a9:53:7f:60:
68:d3:cf:8b:33:94:d4:e0:f0:c9:a3:30:d8:24:55:
65:47:5f:b9:9d:a5:85:44:4b:6a:8a:19:cd:ca:a4:
1f:c9:21:87:c6:7a:cf:6a:8d:d5:3e:8f:7a:8c:d1:
36:fe:e2:6f:eb:37:46:6f:07:09:4d:eb:34:ec:ae:
36:85:d2:a2:7e:2b:88:df:fb:09:a4:4a:6e:d5:34:
d2:39:2c:7b:36:14:ce:78:b2:c4:fd:1e:4f:46:74:
60:18:64:06:da:51:c4:32:3a:4c:71:0b:e0:05:e3:
28:0c:99:51:26:03:4e:8d:c1:52:68:c6:f0:44:76:
90:3c:f4:c0:98:c9:f9:89:3a:6f:ef:25:26:2d:3a:
ba:d4:cb:46:d3:38:66:e9:cb:c1:02:51:fa:28:17:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:3F:A3:09:C9:2D:AC:7F:2A:0D:19:AB:0D:8C:01:8A:6D:AA:43
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/mNo_ownJLax_Kg0Zqw2MAYptqkM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
03:48:71:85:85:e0:a8:65:54:de:af:e6:17:f8:b9:7d:97:d9:
a3:53:95:c8:3c:50:82:91:83:86:6d:05:ec:4b:45:86:6b:79:
0e:42:61:aa:4a:55:5a:1e:05:06:65:d7:52:9e:af:fe:06:88:
95:32:ae:26:f9:3e:4e:ec:4f:d0:36:30:c4:2a:9e:1c:3b:4a:
f8:61:3b:9c:73:14:45:ab:ce:0e:19:1e:04:88:36:bb:ae:cb:
5c:4f:60:6f:4a:4e:9f:89:29:4b:38:7d:ca:a2:e7:66:9c:6d:
78:ba:4f:76:f8:1d:bd:22:6d:8d:78:60:a3:eb:00:db:be:fe:
a8:e1:b1:2d:ab:49:e0:57:c4:22:1e:e3:8a:81:93:f5:14:b6:
62:57:a4:8b:1a:c5:e9:fb:5f:16:a6:0a:f9:6d:cf:bf:dd:61:
3f:45:ec:c7:35:45:2c:ad:36:31:dc:0c:a7:93:21:3d:1b:82:
34:b7:77:87:78:c7:89:be:ea:00:1b:39:f8:3c:96:11:e5:42:
f1:da:a0:ee:42:55:42:0b:47:8e:4f:cb:62:c4:c9:9a:4a:a9:
ec:bc:c1:e8:1a:a5:c3:82:77:31:dc:ea:c3:28:7f:25:6c:b0:
15:73:26:4f:2c:e6:48:f2:3f:09:d8:65:a7:14:eb:8c:c5:88:
0c:1e:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org