Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/qap1kLsmJ-Fe2VLBtO5CY3Td1EI.roa
File: qap1kLsmJ-Fe2VLBtO5CY3Td1EI.roa (raw, json)
Hash identifier: e/puBWEeXzBqhk8rku2mUyWkqJiYFbgu8f4Wu92pG5E=
Subject key identifier: A9:AA:75:90:BB:26:27:E1:5E:D9:52:C1:B4:EE:42:63:74:DD:D4:42
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07AA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/qap1kLsmJ-Fe2VLBtO5CY3Td1EI.roa
Signing time: Tue 13 Jun 2023 08:54:01 +0000
ROA not before: Tue 13 Jun 2023 08:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 08:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=A9AA7590BB2627E15ED952C1B4EE426374DDD442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:9f:65:15:d7:28:1c:5e:1f:fe:9e:0a:2b:
84:e1:71:9d:cd:57:c2:4b:3d:9e:9a:4d:ac:11:bd:
d8:be:7b:87:51:86:b6:c1:9c:ea:79:38:22:00:86:
42:8a:66:44:fa:cd:0b:5f:e2:f9:74:6b:80:37:b6:
22:e5:9f:45:b9:44:9e:14:99:f0:24:83:9d:12:59:
64:5c:50:98:fc:aa:fb:6e:09:69:2a:f0:af:db:3a:
9e:64:9b:3a:3a:c7:34:cc:88:0e:6c:2b:10:b1:a1:
ea:1c:94:11:92:7c:09:ca:14:ac:3f:3b:a1:c0:bf:
d3:e0:13:a4:b9:f3:e8:b7:93:b4:17:9c:1a:98:79:
71:91:51:86:23:a5:5f:10:75:c0:94:ef:14:c9:c4:
e9:62:e4:be:a1:85:fe:1f:62:55:b3:42:70:e2:c7:
b5:b5:a5:0b:e6:47:c5:7a:c7:e5:b9:84:e5:07:4f:
6b:02:eb:7f:ec:d9:31:f7:22:b0:56:23:0d:95:d8:
53:19:c0:c9:fc:d4:0a:e1:41:97:16:c7:c3:8c:3b:
37:08:1e:9d:f0:ed:b3:8a:5a:f9:c6:ef:b2:0f:82:
8a:4a:01:0b:c5:2c:35:48:f3:36:cf:b4:49:4f:b6:
57:f4:ab:0b:38:5f:f6:39:9d:77:9f:7b:fd:c8:68:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AA:75:90:BB:26:27:E1:5E:D9:52:C1:B4:EE:42:63:74:DD:D4:42
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/qap1kLsmJ-Fe2VLBtO5CY3Td1EI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
34:46:6a:d3:21:7c:c9:c5:e7:9e:ff:da:b9:97:25:79:08:e3:
8e:a2:22:b6:a3:a0:32:d9:e2:f3:00:31:91:6b:5e:eb:35:c3:
67:da:fb:5e:df:37:60:92:f8:1a:2e:63:85:4a:cb:6e:b8:a9:
a2:1d:2b:b5:50:83:78:56:74:6f:99:bf:6f:1a:d8:fa:d1:cd:
7d:3a:54:c2:cc:9a:50:79:d6:9f:cc:ba:e3:0e:0d:06:14:9d:
28:26:80:d4:86:c8:52:7a:ef:41:e7:17:42:66:09:d6:c6:17:
a2:d4:45:84:70:ca:a0:65:f4:1c:99:1c:b3:a3:a3:74:19:34:
6b:15:aa:4c:4b:65:da:6b:53:d7:ee:a2:51:e9:ef:46:56:ee:
d8:f5:d4:88:d2:b3:c2:5a:e2:7b:3c:92:9d:01:f8:e2:00:4b:
68:14:9f:68:09:31:fe:5e:88:89:4e:04:39:80:2b:3a:78:d4:
54:30:93:7c:05:f4:e0:77:6a:40:8f:f2:7e:86:ad:e2:36:40:
30:94:f9:4f:dd:d3:a0:96:7e:d0:35:30:3d:c4:f5:1c:05:fe:
6d:d7:94:52:d4:73:e8:52:74:4b:f6:b2:a3:69:1c:14:f5:5b:
bc:f3:a1:36:49:9b:83:36:5c:93:77:5b:f5:dd:ac:fe:d4:c9:
6c:95:b5:db
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMw
ODU0MDFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEE5QUE3NTkwQkIyNjI3
RTE1RUQ5NTJDMUI0RUU0MjYzNzREREQ0NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWYp9lFdcoHF4f/p4KK4ThcZ3NV8JLPZ6aTawRvdi+e4dRhrbB
nOp5OCIAhkKKZkT6zQtf4vl0a4A3tiLln0W5RJ4UmfAkg50SWWRcUJj8qvtuCWkq
8K/bOp5kmzo6xzTMiA5sKxCxoeoclBGSfAnKFKw/O6HAv9PgE6S58+i3k7QXnBqY
eXGRUYYjpV8QdcCU7xTJxOli5L6hhf4fYlWzQnDix7W1pQvmR8V6x+W5hOUHT2sC
63/s2TH3IrBWIw2V2FMZwMn81ArhQZcWx8OMOzcIHp3w7bOKWvnG77IPgopKAQvF
LDVI8zbPtElPtlf0qws4X/Y5nXefe/3IaIVpAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUqap1kLsmJ+Fe2VLBtO5CY3Td1EIwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvcWFwMWtMc21KLUZl
MlZMQnRPNUNZM1RkMUVJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEANEZq0yF8ycXnnv/auZcleQjjjqIi
tqOgMtni8wAxkWte6zXDZ9r7Xt83YJL4Gi5jhUrLbripoh0rtVCDeFZ0b5m/bxrY
+tHNfTpUwsyaUHnWn8y64w4NBhSdKCaA1IbIUnrvQecXQmYJ1sYXotRFhHDKoGX0
HJkcs6OjdBk0axWqTEtl2mtT1+6iUenvRlbu2PXUiNKzwlriezySnQH44gBLaBSf
aAkx/l6IiU4EOYArOnjUVDCTfAX04HdqQI/yfoat4jZAMJT5T93ToJZ+0DUwPcT1
HAX+bdeUUtRz6FJ0S/ayo2kcFPVbvPOhNkmbgzZck3db9d2s/tTJbJW12w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org