Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/mQOEzr_-3_yLE92Ef-UBtlsOM5Q.roa
File: mQOEzr_-3_yLE92Ef-UBtlsOM5Q.roa (raw, json)
Hash identifier: 2vasR9xSOvX94OGus0jjFCgVpqWNuuVP1Ocs54qIhQ8=
Subject key identifier: 99:03:84:CE:BF:FE:DF:FC:8B:13:DD:84:7F:E5:01:B6:5B:0E:33:94
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 080A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/mQOEzr_-3_yLE92Ef-UBtlsOM5Q.roa
Signing time: Tue 13 Jun 2023 20:54:11 +0000
ROA not before: Tue 13 Jun 2023 20:54:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 20:54:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=990384CEBFFEDFFC8B13DD847FE501B65B0E3394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:d9:d4:87:64:9b:06:b0:2c:01:00:8d:06:
fd:94:a3:25:39:4e:84:58:ab:9b:89:76:e9:e7:f4:
78:2f:f5:ac:c5:ad:dd:ca:de:7a:f4:64:e0:ae:d5:
9d:b4:c0:cd:32:df:5f:6d:ba:5d:46:82:74:9e:7c:
63:6b:ad:48:ae:a6:df:d7:49:be:d9:5f:2c:19:45:
ee:a4:74:69:98:9f:c1:3f:ed:a8:f0:e1:0d:da:f0:
a7:4a:8a:24:93:a6:ef:ea:37:19:82:cd:f9:aa:00:
98:72:b2:04:f4:5e:c3:a6:89:e4:38:d0:14:6f:bb:
f9:18:26:ea:a5:50:37:f6:06:d5:0c:3c:e1:a4:89:
aa:63:a5:42:8c:a3:8c:f9:a0:9e:33:33:e7:30:a5:
57:ed:7a:98:37:d4:e4:84:e9:80:b3:a2:34:97:b2:
af:04:85:e6:ee:52:a0:7f:6b:3f:dd:7a:de:26:94:
c0:42:09:00:ca:3e:2f:80:d6:fe:31:21:40:a9:93:
6b:74:7f:5d:c1:f3:a7:0f:45:cd:0a:1a:3e:ea:fb:
98:af:ec:5a:87:c9:bb:6a:f6:b1:28:69:34:bd:eb:
77:9e:51:64:f1:9b:35:94:74:88:75:40:7b:52:01:
12:75:00:e7:f2:0c:b0:b2:a5:2f:6c:78:73:83:8e:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:84:CE:BF:FE:DF:FC:8B:13:DD:84:7F:E5:01:B6:5B:0E:33:94
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/mQOEzr_-3_yLE92Ef-UBtlsOM5Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:72:42:35:69:80:1d:53:03:c7:0b:f6:0a:bc:f5:16:65:a3:
68:63:86:af:94:82:8b:cc:11:38:c2:50:66:86:5d:0f:20:7d:
d6:3e:ee:80:a3:8e:11:15:6b:81:6a:fd:ea:8e:97:8b:a4:8b:
c7:04:6f:ae:e4:12:f4:3f:61:f2:2a:9c:ad:29:ae:1e:81:20:
69:4e:67:6b:9a:c5:b8:54:9b:a3:47:da:4a:76:39:ba:15:68:
e5:c6:44:f0:1f:f3:6c:28:f2:4d:e6:93:09:92:4a:91:08:13:
af:fe:a6:3a:34:6e:a2:39:73:05:9c:38:a8:19:0d:bb:68:b0:
ca:b6:8c:5c:77:c5:cc:61:a2:03:99:cb:3b:ae:5d:59:76:72:
01:1f:09:48:a4:5a:df:04:85:ef:37:e2:41:04:9a:5a:ca:55:
22:56:0e:8e:fc:55:34:47:1f:f1:11:c9:34:1d:ae:4a:40:5c:
9b:50:2e:83:3c:0d:a4:4b:bc:e8:8e:73:36:72:ea:43:c9:d5:
14:d6:e1:00:43:2f:4c:ed:7e:de:c3:36:e6:fe:e8:d8:f1:7f:
45:cf:87:0d:64:20:8b:9c:42:dd:e9:49:49:62:99:1e:42:da:
b8:fb:f4:7e:d0:fc:9e:d6:5d:e5:e4:08:c9:2f:5a:cc:7f:2f:
61:8a:bf:75
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMy
MDU0MTFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDk5MDM4NENFQkZGRURG
RkM4QjEzREQ4NDdGRTUwMUI2NUIwRTMzOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDARtnUh2SbBrAsAQCNBv2UoyU5ToRYq5uJdunn9Hgv9azFrd3K
3nr0ZOCu1Z20wM0y319tul1GgnSefGNrrUiupt/XSb7ZXywZRe6kdGmYn8E/7ajw
4Q3a8KdKiiSTpu/qNxmCzfmqAJhysgT0XsOmieQ40BRvu/kYJuqlUDf2BtUMPOGk
iapjpUKMo4z5oJ4zM+cwpVftepg31OSE6YCzojSXsq8EhebuUqB/az/det4mlMBC
CQDKPi+A1v4xIUCpk2t0f13B86cPRc0KGj7q+5iv7FqHybtq9rEoaTS963eeUWTx
mzWUdIh1QHtSARJ1AOfyDLCypS9seHODjqbBAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUmQOEzr/+3/yLE92Ef+UBtlsOM5QwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvbVFPRXpyXy0zX3lM
RTkyRWYtVUJ0bHNPTTVRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAoHJCNWmAHVMDxwv2Crz1FmWjaGOG
r5SCi8wROMJQZoZdDyB91j7ugKOOERVrgWr96o6Xi6SLxwRvruQS9D9h8iqcrSmu
HoEgaU5na5rFuFSbo0faSnY5uhVo5cZE8B/zbCjyTeaTCZJKkQgTr/6mOjRuojlz
BZw4qBkNu2iwyraMXHfFzGGiA5nLO65dWXZyAR8JSKRa3wSF7zfiQQSaWspVIlYO
jvxVNEcf8RHJNB2uSkBcm1AugzwNpEu86I5zNnLqQ8nVFNbhAEMvTO1+3sM25v7o
2PF/Rc+HDWQgi5xC3elJSWKZHkLauPv0ftD8ntZd5eQIyS9azH8vYYq/dQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org