Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/mfsvhL5l_Ul3OWEaUY7YkMMtkJc.roa
File: mfsvhL5l_Ul3OWEaUY7YkMMtkJc.roa (raw, json)
Hash identifier: Gx8pqeXvVwFoUEh8a5bQGIPt3jqi4fTvQtUepJxZpmw=
Subject key identifier: 99:FB:2F:84:BE:65:FD:49:77:39:61:1A:51:8E:D8:90:C3:2D:90:97
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08E2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/mfsvhL5l_Ul3OWEaUY7YkMMtkJc.roa
Signing time: Wed 14 Jun 2023 23:54:06 +0000
ROA not before: Wed 14 Jun 2023 23:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274 (0x8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 23:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=99FB2F84BE65FD497739611A518ED890C32D9097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:9c:0d:88:7e:be:de:f6:b9:ff:37:3b:20:
cf:89:46:1b:0b:04:b2:22:9f:90:92:5e:92:51:ba:
5f:b2:a1:04:b7:43:48:64:4a:d6:f0:1f:c7:7a:ec:
5a:aa:bb:62:a1:61:a3:aa:33:24:6c:a1:0f:fe:29:
34:7d:f4:25:26:41:05:10:1d:49:41:19:21:aa:85:
c3:92:46:12:56:d2:6b:70:2f:15:11:a2:a4:8b:95:
47:ec:64:1a:0a:24:8c:74:47:af:fc:5e:f3:30:8e:
3f:68:8c:df:55:59:22:6e:b9:98:c0:bc:4c:4f:6c:
55:85:39:90:c7:9f:67:1e:c2:ac:6d:d4:98:45:30:
e6:dd:6e:b9:1c:0b:ec:0f:2d:3f:f2:ac:b5:01:98:
0f:a6:ff:ef:ad:27:3d:8c:99:6d:6f:2e:40:fd:01:
57:19:22:1b:a8:ff:ce:6a:1e:16:93:8c:9c:7b:16:
d3:df:f5:99:4d:32:18:4c:69:c0:c1:fc:04:07:72:
81:cf:7e:c2:b0:5f:79:24:56:d5:ed:ec:7a:1b:55:
7f:54:23:92:6a:f9:12:fd:be:74:5e:58:34:3f:8a:
91:2d:91:30:5b:ff:63:73:63:de:77:ce:67:c8:8f:
bf:ee:1b:3c:cd:0e:be:1f:2d:2e:2e:bf:ae:7b:9f:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:2F:84:BE:65:FD:49:77:39:61:1A:51:8E:D8:90:C3:2D:90:97
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/mfsvhL5l_Ul3OWEaUY7YkMMtkJc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:be:1d:2c:63:d0:15:3a:2c:f7:9d:ec:15:06:a6:1e:bf:c2:
a9:35:9d:a8:5e:eb:2d:f1:3a:14:47:63:fd:f3:1b:3e:5c:06:
43:d2:68:21:78:0c:63:02:44:43:7d:d3:16:67:68:cd:87:0a:
f4:c0:72:9f:5c:01:79:ba:c7:5a:34:92:7e:ba:02:63:bb:f1:
a4:1a:45:ac:fb:39:23:99:45:c4:bd:26:4a:b8:ee:ec:b3:7c:
1a:f1:f0:8c:68:da:3d:0f:b1:5c:6d:0f:e7:c4:34:e2:64:f2:
54:40:83:3c:31:b5:1c:ab:61:38:77:1f:55:94:87:8d:ba:3b:
98:00:bf:f3:54:ac:7f:fd:3d:64:92:e9:22:59:73:bb:82:12:
99:ef:12:96:25:a3:fe:d0:67:7b:cc:7a:91:1f:cf:b9:05:ac:
64:bf:68:3d:05:26:82:df:74:a1:12:7f:37:29:c6:4b:38:6b:
91:fb:35:d1:c4:eb:d3:38:26:e0:83:d2:b8:07:f3:ea:ce:59:
b0:7a:86:d1:2c:b5:f6:72:f6:84:c8:ec:b3:49:cb:15:38:e3:
f4:96:81:22:31:a8:70:ce:56:b7:50:fb:67:cb:66:b8:5b:35:
1a:ec:41:49:a6:e9:1a:34:9c:7f:81:0b:94:b0:db:fd:ee:16:
91:da:65:d7
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MzU0MDZaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDk5RkIyRjg0QkU2NUZE
NDk3NzM5NjExQTUxOEVEODkwQzMyRDkwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPg5wNiH6+3va5/zc7IM+JRhsLBLIin5CSXpJRul+yoQS3Q0hk
StbwH8d67Fqqu2KhYaOqMyRsoQ/+KTR99CUmQQUQHUlBGSGqhcOSRhJW0mtwLxUR
oqSLlUfsZBoKJIx0R6/8XvMwjj9ojN9VWSJuuZjAvExPbFWFOZDHn2cewqxt1JhF
MObdbrkcC+wPLT/yrLUBmA+m/++tJz2MmW1vLkD9AVcZIhuo/85qHhaTjJx7FtPf
9ZlNMhhMacDB/AQHcoHPfsKwX3kkVtXt7HobVX9UI5Jq+RL9vnReWDQ/ipEtkTBb
/2NzY953zmfIj7/uGzzNDr4fLS4uv657n+BXAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUmfsvhL5l/Ul3OWEaUY7YkMMtkJcwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvbWZzdmhMNWxfVWwz
T1dFYVVZN1lrTU10a0pjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEALb4dLGPQFTos953sFQamHr/CqTWd
qF7rLfE6FEdj/fMbPlwGQ9JoIXgMYwJEQ33TFmdozYcK9MByn1wBebrHWjSSfroC
Y7vxpBpFrPs5I5lFxL0mSrju7LN8GvHwjGjaPQ+xXG0P58Q04mTyVECDPDG1HKth
OHcfVZSHjbo7mAC/81Ssf/09ZJLpIllzu4ISme8SliWj/tBne8x6kR/PuQWsZL9o
PQUmgt90oRJ/NynGSzhrkfs10cTr0zgm4IPSuAfz6s5ZsHqG0Sy19nL2hMjss0nL
FTjj9JaBIjGocM5Wt1D7Z8tmuFs1GuxBSabpGjScf4ELlLDb/e4Wkdpl1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org