Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/owcJQ2ajEWXfRHl-76zszhpFfds.roa
File: owcJQ2ajEWXfRHl-76zszhpFfds.roa (raw, json)
Hash identifier: tnx+oMAKydgxQf6s5sGm4Wk452CgpTfQpl3WuJYsHL4=
Subject key identifier: A3:07:09:43:66:A3:11:65:DF:44:79:7E:EF:AC:EC:CE:1A:45:7D:DB
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 084A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/owcJQ2ajEWXfRHl-76zszhpFfds.roa
Signing time: Wed 14 Jun 2023 04:54:03 +0000
ROA not before: Wed 14 Jun 2023 04:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 04:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=A307094366A31165DF44797EEFACECCE1A457DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:3d:8d:04:af:1a:1a:f5:c7:1f:ce:79:e1:
36:84:2f:8c:8b:97:46:fa:c7:c3:0a:c9:28:a5:e7:
60:c4:db:cb:3b:ef:70:0a:10:3d:7f:f5:fd:f8:4e:
16:65:23:d3:7e:80:6e:33:f6:e0:06:e4:65:b8:fd:
ed:2e:7c:39:ff:55:ae:f4:3f:dd:dd:61:5d:cf:ad:
6c:08:32:b7:8c:e2:5d:3e:f4:81:72:c9:9b:2a:70:
f7:3d:88:a8:99:3e:88:84:5e:ec:cd:74:7b:0a:de:
17:a9:e4:e3:e0:cd:db:80:4c:b3:1e:29:8f:34:68:
19:24:c8:cf:4f:89:c4:f2:02:96:c8:35:81:91:0c:
50:e9:fa:7d:21:84:a4:a6:23:e0:bd:4f:7e:d7:71:
d0:97:7c:a8:a5:ae:f9:67:de:f4:c7:58:3c:7b:d9:
a0:96:63:d0:21:7f:5d:f7:03:b9:67:e1:4d:a7:54:
8f:1f:47:07:f6:c3:ec:64:3e:dc:d7:54:19:66:b1:
6e:04:bb:ba:b0:7e:83:43:93:37:73:c0:c6:3f:34:
69:63:2f:23:bc:99:05:ee:3a:25:c4:18:08:fe:61:
cf:95:10:f8:e6:9f:86:11:9a:2c:04:a3:87:39:bb:
eb:ff:a6:ee:de:bc:50:16:4f:a8:06:c4:50:84:a9:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:07:09:43:66:A3:11:65:DF:44:79:7E:EF:AC:EC:CE:1A:45:7D:DB
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/owcJQ2ajEWXfRHl-76zszhpFfds.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
11:c0:fd:30:fc:34:fa:03:a9:a5:ca:30:44:c8:c2:75:ee:2e:
2c:cf:cf:3f:1e:1c:13:42:b9:3d:26:04:22:df:61:62:56:f8:
68:ab:14:42:18:a8:7d:11:9c:e7:7c:30:0c:96:c0:f2:e2:00:
c9:40:c4:44:e7:25:05:2b:40:a1:28:5a:01:69:f8:c8:5f:f1:
be:fc:c2:04:b5:c5:43:53:df:01:c2:77:4a:31:6e:75:f6:da:
4d:01:9e:f5:a9:5d:42:be:be:01:52:12:ec:1b:59:f2:db:12:
12:bd:6d:52:65:9e:5b:52:f1:12:ee:7e:e8:48:3c:37:cc:b3:
b6:54:4e:24:90:46:20:2b:a8:61:89:a1:c9:7c:9f:89:32:18:
6f:f8:82:a8:6e:97:c0:80:b0:4b:e6:da:2e:30:2a:04:0d:2c:
13:fc:17:14:1e:fa:ca:fc:8e:6a:4a:00:ec:7f:bf:43:f9:42:
c4:10:35:ca:20:96:f0:c9:d6:24:0a:f0:9a:b8:5c:05:a1:94:
1e:08:f8:01:86:aa:92:ca:2d:1c:86:43:45:2e:e8:4d:11:1b:
43:e4:65:08:7f:bd:37:1a:76:a4:94:a9:5c:7a:ca:51:bf:01:
f5:af:ff:79:85:38:93:60:5b:ea:33:de:d2:cc:64:09:85:77:
74:6a:b7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org