Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/t22Amay-nstaZRRgEvxQKgtG-Ys.roa
File: t22Amay-nstaZRRgEvxQKgtG-Ys.roa (raw, json)
Hash identifier: 8VUYUE1Cn3b61jAyv4f+dSqCRjLT5ViWhzaTF2vZd5Y=
Subject key identifier: B7:6D:80:99:AC:BE:9E:CB:5A:65:14:60:12:FC:50:2A:0B:46:F9:8B
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 092B
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/t22Amay-nstaZRRgEvxQKgtG-Ys.roa
Signing time: Thu 15 Jun 2023 06:24:19 +0000
ROA not before: Thu 15 Jun 2023 06:24:19 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2347 (0x92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 06:24:19 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B76D8099ACBE9ECB5A65146012FC502A0B46F98B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:99:ed:53:1b:b7:dd:20:44:77:38:6f:a5:
09:fb:46:75:08:76:0c:45:05:f3:e9:bc:0f:66:b4:
fc:43:0d:27:e2:d0:c3:41:51:f5:d2:d5:b4:f5:48:
09:08:22:e6:f6:0a:a8:7e:70:a7:33:52:77:3b:5a:
b3:f5:3b:cf:31:d6:7d:a5:8e:72:03:ee:21:9a:d5:
67:1a:b9:9c:f1:77:73:6b:7e:ba:46:b7:76:3f:50:
6f:d4:bd:c1:ae:df:73:da:06:a2:8e:19:41:f1:b2:
0f:58:26:51:1a:59:46:cf:85:61:8f:6e:8c:c7:4e:
4f:de:fd:27:c8:fd:bf:03:81:36:64:82:fb:b1:f7:
87:22:d7:87:d9:a9:0e:88:7e:fa:03:d9:7a:c7:44:
ef:73:af:d2:94:d6:85:ae:ad:62:c7:2a:45:75:d4:
55:a5:fd:58:f2:d1:e5:c0:e9:b2:80:f7:c2:60:56:
b1:03:3c:e3:90:e5:93:bc:e6:28:8e:b9:76:b9:13:
8b:2e:95:ca:64:e3:8c:db:db:05:d6:20:52:15:de:
6c:d6:7f:20:af:1f:d8:d9:d8:d2:87:65:95:09:46:
0a:12:ec:0e:d0:5f:8a:98:a1:b2:39:4a:dc:1a:9a:
44:64:4c:d2:6f:2a:31:4f:15:f4:dd:de:fc:66:1b:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:80:99:AC:BE:9E:CB:5A:65:14:60:12:FC:50:2A:0B:46:F9:8B
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/t22Amay-nstaZRRgEvxQKgtG-Ys.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
59:0d:4b:3e:0d:dc:30:dd:35:e7:66:78:2f:cc:4a:40:93:fb:
ca:a1:91:4c:fb:49:ef:26:a7:82:d2:fc:d2:e1:8f:6b:18:46:
ad:d7:b3:14:1c:62:87:3a:8f:60:83:1b:6b:62:81:05:c0:9d:
8c:b3:7f:66:83:cd:6e:59:fd:5f:e7:96:3d:59:79:3e:07:a2:
5e:54:84:ff:3e:84:4f:f5:1e:75:90:c6:e1:c7:a7:59:4d:46:
ee:b7:48:58:71:74:f8:29:07:fe:f1:d8:f4:9e:12:3e:ab:40:
8c:6e:9e:96:d6:12:60:fe:b7:16:83:c1:4b:27:75:d3:32:05:
f2:0c:eb:3d:61:c8:d1:70:04:c0:b8:a8:bf:64:70:04:62:73:
fc:af:04:4e:16:69:de:17:14:39:d9:43:f7:85:81:44:9b:9d:
d4:ca:c1:c2:9e:0d:67:14:de:3a:8f:34:cc:9a:a2:f7:dc:87:
66:6c:cc:ce:cc:bc:d8:23:d9:ed:e9:62:1a:27:cc:fe:a7:86:
1c:ac:76:99:e1:6b:1b:ec:89:20:a5:25:b2:5d:70:5c:f2:cd:
1c:95:43:70:3b:9f:96:bb:44:ac:f0:9b:b5:6e:36:8e:2b:55:
96:b0:d8:d4:89:67:49:fe:cb:51:b8:38:78:16:f8:b3:14:03:
05:ea:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org