Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/xOoNWRh0q0xFkSPI00zAKPcVw8k.roa
File: xOoNWRh0q0xFkSPI00zAKPcVw8k.roa (raw, json)
Hash identifier: KzUOewe5LiJKUbyozGT4d8LAv9kz+xxNuww0cLX9JoE=
Subject key identifier: C4:EA:0D:59:18:74:AB:4C:45:91:23:C8:D3:4C:C0:28:F7:15:C3:C9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07CA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/xOoNWRh0q0xFkSPI00zAKPcVw8k.roa
Signing time: Tue 13 Jun 2023 12:54:01 +0000
ROA not before: Tue 13 Jun 2023 12:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1994 (0x7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 12:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C4EA0D591874AB4C459123C8D34CC028F715C3C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:73:fe:a7:10:63:80:36:4b:9c:d1:9a:95:
75:88:ec:d8:dd:f9:08:8b:4b:18:ca:39:64:2e:23:
d1:de:98:39:f4:d4:c7:29:d8:1c:82:3f:66:20:6a:
c1:c4:29:a6:71:ad:4b:a6:4d:cb:fe:97:94:5a:40:
08:3b:bd:af:31:10:09:b4:35:a2:ad:8b:1b:9d:36:
1f:f1:1a:06:69:29:2a:bf:80:51:24:3b:0b:c2:1b:
1f:e4:1e:86:57:3b:a7:f1:f7:6f:c6:b8:29:07:cd:
90:c9:cd:e6:d0:03:0f:b7:0c:26:6c:90:ae:4b:e5:
7d:8c:1d:7b:6f:cd:62:ad:77:9a:cc:5c:e9:de:93:
4b:00:ee:fc:c1:2e:5a:ff:e1:ee:3e:30:a7:fa:d6:
88:29:b9:09:3f:3e:c9:0b:d9:41:41:ce:d9:18:aa:
32:8e:5f:de:9f:b5:cd:07:0f:d4:f1:fa:da:a5:56:
22:ae:c1:43:f0:f1:52:77:e7:15:b7:f2:9a:07:46:
d0:96:f2:73:05:d9:70:c9:40:af:c2:a8:c1:c1:2a:
f9:30:ca:a6:e0:ea:68:5c:f7:8f:17:f0:88:34:11:
95:22:b0:c7:49:f8:86:31:21:ed:ae:ce:0a:47:77:
e8:63:b2:ec:34:7d:6a:cd:d8:3a:ba:d2:fe:05:7c:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:0D:59:18:74:AB:4C:45:91:23:C8:D3:4C:C0:28:F7:15:C3:C9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/xOoNWRh0q0xFkSPI00zAKPcVw8k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:12:34:88:ee:f3:47:33:40:30:98:3e:bd:0e:26:60:8a:a6:
ad:06:fb:60:f2:1f:b0:32:58:88:dc:47:04:10:f8:cd:40:a5:
86:dc:19:52:b1:85:fe:1f:b2:b4:ec:20:6d:4e:2b:2b:ac:50:
15:77:87:39:55:69:0d:a5:0f:93:3c:95:82:3b:34:89:cb:93:
ff:0f:42:f8:5b:73:7b:ff:db:63:cf:77:b2:6d:94:7e:61:8d:
07:cf:0f:81:8f:fe:a5:50:34:66:78:c3:6d:72:60:28:8c:e6:
70:b8:8f:8b:31:5f:b4:b8:3b:12:6b:80:16:63:c1:d0:b7:95:
76:50:8f:e1:b5:38:a7:80:ae:63:f8:a9:b0:eb:cb:d5:a5:00:
79:4a:03:94:09:7d:19:be:8e:cd:8f:29:65:8c:8f:6d:2d:92:
53:10:af:38:f9:14:3d:0b:92:6f:34:82:3c:89:f0:9d:87:15:
fe:e7:0a:5c:b6:cb:f6:ba:26:03:00:c9:7c:22:61:40:4b:91:
95:a1:ca:73:42:58:6f:ea:ec:14:5e:ba:31:e6:8f:84:3f:98:
4c:a9:df:30:13:de:89:1a:db:73:1e:29:68:49:a6:b2:65:29:
eb:f5:65:cf:77:3e:ba:55:6d:25:4d:11:25:fc:03:35:d1:8d:
27:83:1c:4f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
MjU0MDFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEM0RUEwRDU5MTg3NEFC
NEM0NTkxMjNDOEQzNENDMDI4RjcxNUMzQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3DnP+pxBjgDZLnNGalXWI7Njd+QiLSxjKOWQuI9HemDn01Mcp
2ByCP2YgasHEKaZxrUumTcv+l5RaQAg7va8xEAm0NaKtixudNh/xGgZpKSq/gFEk
OwvCGx/kHoZXO6fx92/GuCkHzZDJzebQAw+3DCZskK5L5X2MHXtvzWKtd5rMXOne
k0sA7vzBLlr/4e4+MKf61ogpuQk/PskL2UFBztkYqjKOX96ftc0HD9Tx+tqlViKu
wUPw8VJ35xW38poHRtCW8nMF2XDJQK/CqMHBKvkwyqbg6mhc948X8Ig0EZUisMdJ
+IYxIe2uzgpHd+hjsuw0fWrN2Dq60v4FfMn9AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUxOoNWRh0q0xFkSPI00zAKPcVw8kwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEveE9vTldSaDBxMHhG
a1NQSTAwekFLUGNWdzhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEATxI0iO7zRzNAMJg+vQ4mYIqmrQb7
YPIfsDJYiNxHBBD4zUClhtwZUrGF/h+ytOwgbU4rK6xQFXeHOVVpDaUPkzyVgjs0
icuT/w9C+Ftze//bY893sm2UfmGNB88PgY/+pVA0ZnjDbXJgKIzmcLiPizFftLg7
EmuAFmPB0LeVdlCP4bU4p4CuY/ipsOvL1aUAeUoDlAl9Gb6OzY8pZYyPbS2SUxCv
OPkUPQuSbzSCPInwnYcV/ucKXLbL9romAwDJfCJhQEuRlaHKc0JYb+rsFF66MeaP
hD+YTKnfMBPeiRrbcx4paEmmsmUp6/Vlz3c+ulVtJU0RJfwDNdGNJ4McTw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org