Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/wYQgKp0-0M-ZNoCUaAz3vxniD1U.roa
File: wYQgKp0-0M-ZNoCUaAz3vxniD1U.roa (raw, json)
Hash identifier: OuqAIoRzFV9GubasjRgkY4TUwVPb4Y8URxhkyIuvja0=
Subject key identifier: C1:84:20:2A:9D:3E:D0:CF:99:36:80:94:68:0C:F7:BF:19:E2:0F:55
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0826
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wYQgKp0-0M-ZNoCUaAz3vxniD1U.roa
Signing time: Wed 14 Jun 2023 00:24:10 +0000
ROA not before: Wed 14 Jun 2023 00:24:10 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2086 (0x826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 00:24:10 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C184202A9D3ED0CF99368094680CF7BF19E20F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:b8:6a:b8:ad:24:2a:b9:d2:1f:f8:2d:e9:
e4:7c:f1:a6:1b:01:78:8b:c0:bf:99:42:68:c4:49:
87:88:8d:83:da:bd:17:be:60:66:b5:b9:62:bf:94:
f7:4f:56:aa:f9:12:18:9c:45:bd:e7:63:59:94:ee:
35:12:57:a1:e0:10:e1:8e:33:5b:ae:b2:ea:fe:99:
9d:2e:0b:77:5a:3c:19:8d:9a:0e:38:e5:f3:53:fc:
76:47:1e:f3:36:3a:99:7a:6c:9a:96:3c:3d:57:e9:
a0:80:6b:d7:eb:d5:1e:73:07:36:08:3c:66:08:dc:
c2:b2:76:69:f4:0c:bd:4a:79:ee:a3:8a:c7:96:86:
9b:34:3c:79:ed:89:24:52:06:5c:49:d9:70:f0:4f:
66:ed:49:86:6f:96:fc:ae:63:e8:08:ef:f3:64:d6:
da:9d:08:aa:04:6d:66:c4:42:34:4e:ee:71:11:9c:
14:65:72:f0:3d:8b:71:27:ab:f6:73:2e:db:c5:af:
de:2b:a7:58:98:ea:0f:5c:f0:3d:1d:41:7f:77:d7:
56:18:ad:f5:54:c1:3d:24:87:bf:3d:40:cb:36:a8:
bf:ec:98:83:16:e1:e9:86:36:c1:39:ba:70:a1:74:
ba:ec:73:02:04:ca:11:00:90:c1:29:f4:78:30:b1:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:84:20:2A:9D:3E:D0:CF:99:36:80:94:68:0C:F7:BF:19:E2:0F:55
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wYQgKp0-0M-ZNoCUaAz3vxniD1U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
53:8c:aa:c1:3f:5c:6e:83:6a:b0:ef:2d:c4:26:b9:d1:f0:0f:
98:7e:0d:41:a0:67:6c:33:6d:a6:cf:55:4f:72:28:8d:36:50:
e6:db:01:33:91:01:05:66:00:ac:ff:83:a4:9f:97:ba:be:0a:
24:74:8a:2e:ad:33:5f:2c:d3:45:26:1f:83:8c:3f:e3:ed:80:
9f:90:03:7b:45:a7:27:40:87:8e:6a:e6:ed:e6:c3:64:01:3b:
57:2d:75:f6:96:18:d4:59:f4:7e:12:f6:83:df:d5:cd:16:ab:
c9:2c:d9:c1:56:5a:e3:6b:89:cd:f9:37:49:47:74:7c:a2:58:
ec:ef:63:82:8a:85:fa:51:4f:e5:9f:37:5d:2b:99:87:1c:0c:
0d:e1:6c:52:6a:d2:db:a2:65:3e:e9:06:4f:0b:4d:ee:c5:2d:
fc:b0:bf:72:fd:eb:57:01:94:4f:2d:99:a6:33:98:c0:a8:c0:
f6:8c:a5:a3:38:87:35:bd:c5:30:af:cf:b4:6b:78:24:1c:fc:
e8:d2:cd:60:3c:43:5c:45:a2:3f:02:1d:bb:fa:e8:3d:21:39:
50:c9:fe:57:90:f9:fb:ca:1f:5e:8d:7b:8b:84:57:8f:77:b0:
a1:1c:a3:3a:64:cf:f8:26:c0:5f:4d:ec:db:df:03:6e:3b:c0:
c0:f1:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org