Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/wTiC7C557E4OwuLSPPVXYtbIol8.roa
File: wTiC7C557E4OwuLSPPVXYtbIol8.roa (raw, json)
Hash identifier: BbjZvBYKWNaojJt0cyRfRWdURj6Ac6iv+vvuUadtdM8=
Subject key identifier: C1:38:82:EC:2E:79:EC:4E:0E:C2:E2:D2:3C:F5:57:62:D6:C8:A2:5F
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08FA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wTiC7C557E4OwuLSPPVXYtbIol8.roa
Signing time: Thu 15 Jun 2023 02:54:06 +0000
ROA not before: Thu 15 Jun 2023 02:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2298 (0x8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 02:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C13882EC2E79EC4E0EC2E2D23CF55762D6C8A25F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:8f:d5:12:f4:73:c0:b4:e3:4d:ea:d8:68:
77:4e:cd:7a:0d:51:ff:2f:78:66:ac:7a:17:c5:c0:
60:e4:74:32:d4:36:cf:38:0f:14:5b:be:04:23:15:
79:f5:5b:d2:ea:d0:43:c4:bf:34:1c:1f:1a:f5:9d:
69:68:42:41:d8:44:b8:29:64:1e:6d:53:93:9d:00:
8d:c3:42:67:0e:6f:8d:13:80:90:90:0c:b7:8c:37:
2d:a3:98:29:3f:46:41:84:4b:ed:14:cb:16:5c:81:
2c:1e:aa:4a:e3:9f:f9:a5:87:f9:55:64:95:bd:07:
d6:e1:8e:9c:37:8d:21:03:4f:93:9d:b8:60:f9:99:
e0:36:26:e5:e3:03:34:2f:3c:76:b7:4b:c1:3e:8b:
61:f7:99:85:9e:9f:84:ef:ae:97:89:5a:47:85:dd:
de:62:ef:d9:5a:01:9a:53:a4:77:ff:5b:17:3a:4c:
0c:57:2d:49:81:a1:78:18:01:03:16:d2:e8:03:7f:
68:c2:25:56:cb:e7:02:06:00:93:02:a1:4e:50:40:
94:56:fe:eb:26:78:5a:88:40:a0:b9:e1:29:a5:4b:
5e:74:7f:fb:9a:b6:b6:00:57:dd:85:83:af:e9:31:
d8:d0:ac:c7:63:1f:e1:9d:2a:7e:46:4d:c9:30:a6:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:82:EC:2E:79:EC:4E:0E:C2:E2:D2:3C:F5:57:62:D6:C8:A2:5F
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wTiC7C557E4OwuLSPPVXYtbIol8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
af:29:d0:74:85:8b:ee:07:8a:98:b0:b6:9c:6e:eb:42:ac:62:
9f:7e:14:dc:64:53:aa:e4:d1:a1:ba:77:fc:36:c9:ff:9c:d1:
9a:11:72:be:b9:57:53:95:51:7f:2f:b7:cb:df:59:8d:45:f2:
e7:c4:bb:ce:46:d3:40:8c:f0:44:c8:69:14:93:d5:e0:a0:cf:
1f:ca:3b:5b:af:08:1a:90:7c:68:bd:a8:11:f5:07:d2:44:8a:
49:0a:6a:81:62:0a:80:c4:e9:48:65:e2:08:2e:7c:b3:d9:bc:
50:a9:e7:75:c3:e2:ec:cd:46:2b:a0:69:e8:86:0b:10:ff:3c:
87:3a:8a:b6:ca:09:e8:8e:4c:6c:a5:91:03:e5:67:1a:b7:82:
68:d5:3b:6e:40:f9:94:50:39:8c:1b:7a:c4:d6:a3:ab:5d:a7:
4d:00:c0:a8:be:2d:70:ab:e7:19:69:c3:b0:d8:ac:ff:25:89:
7f:03:b1:47:18:92:87:ee:03:71:1e:b4:28:cc:5c:86:5d:ca:
75:f4:7d:67:35:7b:8f:35:90:5c:26:1c:d2:17:b8:b4:ad:43:
d9:81:64:79:dd:c1:b4:07:ca:c3:75:38:4e:07:84:af:90:c0:
f3:15:d0:29:44:4c:91:46:15:a9:68:12:3a:5a:eb:43:61:b6:
7e:8d:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org