Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/tCQunx2dAkH2Pljckh1MO3r7u0Q.roa
File: tCQunx2dAkH2Pljckh1MO3r7u0Q.roa (raw, json)
Hash identifier: O7wnaGDcSHB1OxA7nHIJERo5nVR7+zPf9CKItO1UZ0M=
Subject key identifier: B4:24:2E:9F:1D:9D:02:41:F6:3E:58:DC:92:1D:4C:3B:7A:FB:BB:44
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08F2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/tCQunx2dAkH2Pljckh1MO3r7u0Q.roa
Signing time: Thu 15 Jun 2023 01:54:12 +0000
ROA not before: Thu 15 Jun 2023 01:54:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 01:54:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B4242E9F1D9D0241F63E58DC921D4C3B7AFBBB44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:c3:af:ac:72:6b:58:a1:c5:df:6b:67:ba:
e0:7b:71:ff:33:00:49:a0:ca:a3:a3:b0:25:55:8f:
ba:51:9f:0f:3c:df:fe:e1:3d:f7:56:23:f6:9b:a3:
71:20:8f:91:2f:7e:5e:d2:4a:af:7f:24:9d:97:5f:
db:5c:86:ee:49:00:88:5b:27:35:7e:02:cc:f1:82:
e5:2c:58:b3:e4:15:a6:af:84:aa:4a:14:6f:4a:10:
14:09:dd:d4:20:86:b3:10:89:e2:d7:5d:46:f1:70:
de:97:10:75:4c:c0:97:a4:72:85:1e:84:bd:31:bf:
0f:0d:e5:72:82:f4:73:77:52:8b:f8:c5:71:fe:17:
de:fc:ef:ad:44:7e:32:01:26:e1:bf:6f:e8:1b:a8:
c8:28:33:80:b2:5a:2e:20:de:64:2c:c5:e2:02:6f:
fc:a5:a9:3f:1a:ac:87:c7:67:0d:e3:62:6d:d1:01:
7a:6c:00:25:89:29:79:7d:d4:74:70:8d:f0:6d:3b:
e7:e6:c5:d6:a7:d7:3a:ff:9c:6c:0f:d3:9a:ba:51:
18:a2:fb:eb:48:c9:73:e2:a6:2b:de:29:09:4c:60:
95:26:8e:da:e5:25:e4:83:f6:07:a2:e9:40:bb:ef:
dd:df:cd:0a:f3:46:1c:32:d1:a8:06:7f:64:ae:29:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:24:2E:9F:1D:9D:02:41:F6:3E:58:DC:92:1D:4C:3B:7A:FB:BB:44
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/tCQunx2dAkH2Pljckh1MO3r7u0Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
47:00:9d:06:72:f8:86:9a:55:c0:a9:63:49:c6:44:9d:bf:dc:
42:b0:99:94:85:e7:f4:81:6f:69:b1:29:98:84:3e:8d:21:ba:
90:28:42:3a:0c:45:d1:96:05:e0:a7:fe:af:76:62:b8:45:cd:
5f:80:f4:3d:a7:41:ad:88:5f:73:67:36:3b:61:3d:49:83:6f:
ef:b0:16:53:c6:25:c8:9c:97:3b:57:84:ba:e0:a3:76:b4:c2:
8d:2c:c1:6c:c1:ee:c3:ca:91:a6:de:2b:fd:50:2c:5b:b0:13:
f0:f1:c2:32:c0:c7:3c:d5:40:2a:0d:5b:7f:94:7f:f4:c8:58:
e7:03:0f:02:78:71:7e:80:ed:ee:96:58:ad:42:be:a2:2a:2e:
74:58:77:36:22:9d:c8:d4:83:83:f6:3c:b3:35:53:28:14:a6:
ca:84:66:95:4f:83:ae:4b:5e:39:62:61:b0:28:dd:03:0f:bd:
dd:08:9d:11:f5:07:31:c6:f0:d1:c9:73:0a:a2:39:ea:0e:51:
41:a6:d5:8a:39:ca:f5:49:da:d1:56:f0:01:d1:a0:04:18:a7:
d5:12:46:c5:64:96:ce:45:2b:72:9c:a0:43:40:0e:7e:43:81:
3b:af:78:24:d9:4b:ce:b1:10:75:66:40:8b:18:19:f3:3a:54:
ec:2c:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org