Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/scpVLM5sd-fe1AroiEObLq_I8ho.roa
File: scpVLM5sd-fe1AroiEObLq_I8ho.roa (raw, json)
Hash identifier: hRzUwvt+mggaWEyNKQmZTWiY91xzclcNlMIQTCKbzTc=
Subject key identifier: B1:CA:55:2C:CE:6C:77:E7:DE:D4:0A:E8:88:43:9B:2E:AF:C8:F2:1A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08F6
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/scpVLM5sd-fe1AroiEObLq_I8ho.roa
Signing time: Thu 15 Jun 2023 02:24:07 +0000
ROA not before: Thu 15 Jun 2023 02:24:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 02:24:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B1CA552CCE6C77E7DED40AE888439B2EAFC8F21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:be:be:4e:0f:69:c7:9e:ea:33:28:68:2f:
96:cb:c8:cc:66:fc:9f:ad:04:09:59:dc:fa:e7:30:
f8:07:1a:d1:cb:cb:ba:96:63:01:4e:42:20:86:87:
9d:bb:20:5b:3c:ab:11:78:e9:2a:35:28:3c:2c:84:
30:7b:a0:d1:99:1b:5a:9a:f0:71:f1:8c:b5:72:1b:
51:31:69:c3:14:b6:3c:71:a5:ae:a4:de:02:ab:fc:
2f:49:18:e8:6f:f9:57:dc:10:b7:a3:8f:4c:41:29:
d3:7f:a3:67:cf:28:57:89:05:9a:96:d6:c2:c4:d4:
9f:ef:94:fb:10:15:fb:3f:54:f6:28:40:91:49:b1:
78:be:08:e1:ad:2c:19:ad:a2:a5:5b:3d:e4:40:a9:
44:67:bf:b0:a4:cc:b8:e4:ba:fc:f5:2d:df:cc:71:
ab:ac:44:48:c1:d4:a5:6c:6b:6e:57:4b:4e:b4:1c:
15:b7:37:61:50:32:54:4d:ba:b7:a9:5f:51:2a:1b:
1a:bf:0e:56:f0:8a:e1:6e:ba:78:2e:c3:51:4c:b0:
a1:4b:14:eb:fe:d3:39:89:24:76:f9:30:7b:bd:0c:
7b:5d:d8:73:c6:0e:34:08:0e:0f:c8:d2:7e:aa:f9:
c0:85:96:cd:8b:8e:b2:c6:8d:e0:b5:ed:ee:b6:70:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CA:55:2C:CE:6C:77:E7:DE:D4:0A:E8:88:43:9B:2E:AF:C8:F2:1A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/scpVLM5sd-fe1AroiEObLq_I8ho.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:94:2a:d8:e7:40:7b:55:9f:07:84:13:9f:ce:8b:80:a1:4a:
a1:9b:ee:9f:03:ad:03:3d:26:07:06:72:35:48:78:fe:0f:0c:
a1:c7:e5:70:ef:3f:06:66:ef:2b:42:2c:48:2f:dc:73:a4:c1:
3d:4f:3c:d4:1f:b2:b1:03:f7:c9:89:2a:25:3a:94:ed:e0:e0:
7d:60:16:9f:7a:aa:5a:1b:de:bf:99:53:b7:dc:49:ec:83:7e:
7c:3c:e6:2f:fd:84:73:03:39:53:fc:bc:17:ed:42:7e:3e:18:
0d:4d:f2:da:21:0a:1b:c7:06:55:78:b7:39:cb:3f:ba:dc:3a:
9a:80:ad:b2:f9:69:e3:00:e7:1e:ea:75:d3:94:50:37:66:b0:
7d:12:b2:bd:0d:46:27:d2:98:58:e0:52:3c:7b:df:34:79:6d:
4a:b0:5b:16:c1:44:29:59:ea:c6:84:ee:6e:7c:e0:ba:8f:48:
c2:32:0d:af:a0:92:39:19:b1:90:9b:b0:b5:16:53:09:71:6c:
33:6d:d6:2a:38:4b:e7:7a:89:f3:c9:37:ea:ac:a8:9a:b2:4c:
ac:ec:0e:2a:41:09:a5:8d:9f:7e:da:0e:a8:a0:96:df:b4:e9:
3a:d1:ee:39:66:ac:21:f7:2b:09:58:c7:ec:84:8c:02:f1:ff:
97:56:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org