Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/sZukMAvOkLx0R7Ek7kRZZ9hK-rk.roa
File: sZukMAvOkLx0R7Ek7kRZZ9hK-rk.roa (raw, json)
Hash identifier: /VaBA8ORVfIXiBjc0hqrBwKsB+lmsnnkNKC3YCYBTfc=
Subject key identifier: B1:9B:A4:30:0B:CE:90:BC:74:47:B1:24:EE:44:59:67:D8:4A:FA:B9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07BA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/sZukMAvOkLx0R7Ek7kRZZ9hK-rk.roa
Signing time: Tue 13 Jun 2023 10:54:02 +0000
ROA not before: Tue 13 Jun 2023 10:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 10:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B19BA4300BCE90BC7447B124EE445967D84AFAB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:5e:24:6b:c3:40:fb:ab:04:92:8d:f0:6f:
1d:78:78:b2:6e:b8:5b:19:ca:82:e5:0f:a8:f8:26:
52:93:f6:06:9c:ff:6d:71:17:61:cd:e4:9c:7b:f4:
99:3e:81:04:10:82:6f:aa:3b:fc:c0:87:5a:3c:50:
6d:53:19:52:78:0e:6b:d8:20:92:21:f9:e8:9f:ac:
0d:ef:b7:5d:03:e4:39:c5:8e:0c:e9:5e:9b:37:0d:
66:76:f9:27:d0:10:76:ad:06:e6:e8:25:c6:65:19:
32:91:bc:60:7d:86:93:9e:06:a1:c5:6e:0f:9f:90:
1b:ab:98:d2:be:0f:6b:a8:28:25:8c:26:f7:e7:13:
98:4e:03:e4:ca:03:e4:39:24:3c:83:5a:97:f5:3f:
d8:68:3d:47:c6:2c:1b:6d:ef:89:db:2c:04:b8:6f:
32:58:40:e9:71:e1:ef:c3:d0:74:ff:42:cf:fe:79:
bb:aa:4c:39:96:bf:7d:f4:06:58:26:3c:55:5e:81:
d4:d5:74:20:db:37:32:a9:a3:94:93:2d:cc:cc:61:
46:c4:33:0a:64:48:68:e5:ef:a2:db:25:a4:3c:8c:
0d:d7:4c:2f:f7:a0:1c:09:8a:c4:13:0a:a4:d6:ff:
d7:ed:8b:65:be:d2:f5:22:e8:f2:10:33:8a:3e:fa:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9B:A4:30:0B:CE:90:BC:74:47:B1:24:EE:44:59:67:D8:4A:FA:B9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/sZukMAvOkLx0R7Ek7kRZZ9hK-rk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:33:e3:94:bd:80:c2:60:0d:05:ee:bd:9d:82:7f:bb:bf:f5:
57:02:7b:98:ef:57:fd:66:ac:ba:95:00:c3:44:19:27:3f:a5:
d6:2a:1e:b9:ee:67:0f:d1:dc:8a:33:4f:76:48:6f:20:5e:a4:
08:e9:dc:9c:10:7e:47:8a:9e:5d:13:04:a8:83:ca:dc:37:46:
42:63:51:14:a9:e5:30:84:cf:1e:2a:a5:e7:95:9b:ad:2a:f5:
02:a0:c8:19:92:64:be:df:b1:9d:53:57:fc:93:28:3c:18:22:
2e:5b:28:c7:00:bf:7f:0e:21:bd:c5:30:4e:71:81:dd:70:12:
ad:dd:6a:96:05:de:4c:e5:89:ee:f4:fb:9f:44:98:f1:96:a9:
24:a0:02:83:14:bc:34:4c:c2:53:72:0e:27:f3:7f:67:9f:bb:
f8:ad:93:49:9d:5c:6f:66:e9:ff:35:cf:79:38:c1:b3:8f:a6:
5a:63:30:0d:68:77:2d:4c:4d:91:fe:98:a0:ec:c5:6a:6e:d7:
ea:c2:7e:6d:6c:4a:36:28:00:56:20:6f:0b:32:89:07:79:f0:
c0:8a:8a:f3:60:cf:84:07:a3:45:37:6f:74:22:df:ce:d0:dd:
dd:18:5a:79:34:08:4b:69:1c:e2:40:b2:56:56:89:e3:77:d2:
56:45:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org