Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/yDGhsc118wdtAPMc-pLv0KiAAiA.roa
File: yDGhsc118wdtAPMc-pLv0KiAAiA.roa (raw, json)
Hash identifier: 636qAnWolGrn2v/qhgOr+wUraeAWs/L4PRQoD75o2Mw=
Subject key identifier: C8:31:A1:B1:CD:75:F3:07:6D:00:F3:1C:FA:92:EF:D0:A8:80:02:20
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 087A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/yDGhsc118wdtAPMc-pLv0KiAAiA.roa
Signing time: Wed 14 Jun 2023 10:54:05 +0000
ROA not before: Wed 14 Jun 2023 10:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170 (0x87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 10:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C831A1B1CD75F3076D00F31CFA92EFD0A8800220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:35:6c:9e:d9:b4:09:23:44:c5:90:a0:07:
fa:71:cc:9f:39:6d:d4:ed:37:1e:fb:25:f1:43:b0:
26:00:cb:aa:f5:ba:d8:0a:b2:1b:35:8c:90:96:4c:
e2:2d:95:b6:4c:a1:35:12:b0:ad:29:76:69:57:27:
75:8d:72:ca:4b:2c:46:cf:54:68:d4:48:66:7f:74:
fd:e2:04:97:3a:e5:3f:2d:e5:0c:6c:b6:72:98:c1:
9c:96:12:42:10:24:24:63:9e:59:38:dd:a7:6e:0e:
e1:c3:dd:af:56:29:a3:5a:f1:89:fc:31:51:69:4e:
e0:d8:a1:73:ff:3c:38:5b:aa:43:0c:65:d5:a5:f7:
0d:4d:1e:6e:e0:82:c7:70:9d:bd:15:1f:cf:92:9e:
87:e0:37:46:06:96:4d:4c:5a:9e:fa:64:7f:d2:1c:
8f:8d:0c:b0:71:2b:8e:14:3e:3e:3a:37:84:f0:70:
40:07:1d:3c:79:4d:af:48:3e:e6:32:35:97:ea:9b:
8a:26:e6:ef:d3:24:fb:4f:9d:95:84:be:06:56:f1:
df:38:92:16:f0:68:9f:ad:80:1a:c2:f1:df:25:d8:
fa:0a:4d:71:ae:f4:49:6c:79:4a:ba:58:ee:74:79:
df:5f:86:f6:39:27:40:b7:0e:22:ec:83:7d:0d:29:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:A1:B1:CD:75:F3:07:6D:00:F3:1C:FA:92:EF:D0:A8:80:02:20
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/yDGhsc118wdtAPMc-pLv0KiAAiA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:8e:d7:ba:46:45:9b:d1:33:08:01:43:85:37:08:e0:72:d8:
5c:e7:a6:78:3b:95:b3:a8:91:e1:04:c1:72:82:74:e8:9e:32:
66:24:9d:43:9d:68:b3:3d:60:fd:13:03:fc:17:35:9c:2a:c4:
80:dd:e5:7b:fe:ad:68:95:11:5f:06:86:d3:1f:27:d6:5d:87:
e9:c9:5b:79:50:c4:47:4b:08:5f:eb:60:90:d9:da:b8:4f:db:
a0:94:ca:54:8e:77:5a:4a:dd:db:a8:bd:8c:bd:6e:0e:bb:1a:
d4:83:35:83:c8:c6:98:e7:bf:02:98:ec:57:66:1e:96:56:b2:
8b:7e:42:85:97:bc:94:0f:bf:06:33:3c:b3:01:22:56:ae:01:
02:ca:40:cc:ab:09:38:c1:ee:53:92:d9:ea:8a:0f:a8:8f:18:
ca:08:5f:43:b7:db:2a:22:a0:36:a2:fc:96:ef:67:fd:d0:cc:
b6:91:3b:1a:f2:87:a1:a6:94:07:dc:49:47:7c:e6:68:1c:23:
ef:e8:56:25:bd:99:a1:ad:8c:cd:a0:6c:d9:fb:76:83:28:f1:
e5:95:9d:e7:6f:a5:26:70:a3:dc:6f:6f:f5:d9:3e:d5:c0:c1:
68:d9:69:fe:0e:5a:e9:63:df:69:df:d9:dc:ff:52:c7:cc:bd:
9f:02:ed:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org