Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/xeEtBHaEV_EB9UJGdzWke5i2tXU.roa
File: xeEtBHaEV_EB9UJGdzWke5i2tXU.roa (raw, json)
Hash identifier: t1SFlAJoSIgsBSKOUbrA4ZYNGZxXZp/jBD0sbnQiL54=
Subject key identifier: C5:E1:2D:04:76:84:57:F1:01:F5:42:46:77:35:A4:7B:98:B6:B5:75
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 088E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/xeEtBHaEV_EB9UJGdzWke5i2tXU.roa
Signing time: Wed 14 Jun 2023 13:24:05 +0000
ROA not before: Wed 14 Jun 2023 13:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 13:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C5E12D04768457F101F542467735A47B98B6B575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:db:5d:c2:54:13:25:9a:fc:73:c5:1b:e5:
c3:45:2c:29:52:32:89:f8:a9:61:97:3c:b4:8c:d2:
40:88:27:7a:15:53:fe:3d:f5:58:19:4f:c7:e9:eb:
a8:fa:9d:15:4a:2b:9f:2a:87:c8:76:b4:ed:f7:da:
18:ae:9f:12:c2:0d:2d:80:50:a1:c1:b8:6e:4b:3d:
6c:58:4b:55:95:4b:f3:ce:49:3c:6f:b3:94:92:b1:
19:47:9b:5f:23:80:f8:08:42:68:d1:9f:f1:13:3e:
a0:f6:21:02:4e:92:a5:ef:84:20:13:b1:dd:13:73:
be:ee:18:46:d9:35:1b:0b:8b:77:4c:5a:87:a3:03:
a5:7e:eb:d1:b5:5b:29:27:9a:d6:c7:d7:4c:f7:8e:
7b:38:3c:36:8e:b7:5e:22:8a:9e:91:8b:57:0b:5f:
a2:b8:3f:b4:26:7c:2f:00:ad:a1:3c:95:a2:1a:da:
cf:08:e3:ff:1c:c3:28:1a:69:0e:ce:60:2c:31:23:
83:b7:ef:ca:c5:91:fb:0e:ea:51:9d:ed:37:f0:53:
50:2c:9b:b6:68:fd:d5:d7:bc:9e:d9:bd:36:10:c2:
f6:95:20:2b:df:ab:d2:f7:49:2a:1a:ac:e3:5d:83:
bc:7e:0a:c9:f8:9b:49:f3:59:24:e9:0f:4f:b9:9a:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E1:2D:04:76:84:57:F1:01:F5:42:46:77:35:A4:7B:98:B6:B5:75
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/xeEtBHaEV_EB9UJGdzWke5i2tXU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:dd:59:12:a3:a7:ed:e3:dd:cb:99:04:ce:13:87:68:a8:a0:
ee:45:ea:83:dd:64:e7:de:64:42:49:aa:48:05:b3:b1:81:d6:
b0:a1:36:21:8a:f9:35:46:0b:ff:b6:0f:73:ab:07:db:4d:e6:
b3:44:7d:2c:0b:d9:74:eb:ad:14:24:c4:f1:57:5e:7c:a6:1d:
a5:76:ed:ea:75:06:6a:f3:9c:41:8d:24:a1:87:72:83:05:76:
05:55:e0:c7:3a:73:ae:0f:80:34:cc:7c:ec:a9:8f:96:50:e9:
8c:23:0e:d4:64:38:a7:ec:bd:60:23:71:49:a6:61:af:3a:82:
d9:48:2c:f1:74:d1:3c:6a:aa:43:07:ad:41:bf:75:9e:66:9c:
8c:62:d1:73:68:ba:68:ca:9e:66:e2:00:22:0c:f0:12:ee:cc:
38:7d:07:54:f1:54:39:b7:9e:12:f5:ca:e4:10:36:d7:44:08:
2d:13:3b:32:92:99:83:dc:01:e2:56:96:ee:3f:d2:7e:dd:6c:
3f:12:fb:6d:e5:f4:95:03:4d:9e:ad:2f:a9:76:1c:43:76:da:
a0:ce:6f:43:f6:18:33:20:e9:ec:34:e2:95:a4:40:7c:4b:15:
4c:f2:82:ba:81:53:06:65:80:80:fd:02:ca:89:9d:cf:54:a8:
5a:bc:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org