Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/yjuM-GJ1jFI0xFtX-o5DS-g-cE4.roa
File: yjuM-GJ1jFI0xFtX-o5DS-g-cE4.roa (raw, json)
Hash identifier: V7YpRrHhJwmDnqZwSw/eNBiqRYElrMsqeG8PeZqDkIE=
Subject key identifier: CA:3B:8C:F8:62:75:8C:52:34:C4:5B:57:FA:8E:43:4B:E8:3E:70:4E
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0852
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/yjuM-GJ1jFI0xFtX-o5DS-g-cE4.roa
Signing time: Wed 14 Jun 2023 05:54:04 +0000
ROA not before: Wed 14 Jun 2023 05:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2130 (0x852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 05:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=CA3B8CF862758C5234C45B57FA8E434BE83E704E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:8d:39:94:68:2b:6f:8e:bd:c9:21:61:80:
e5:85:ac:c9:4f:8d:45:7c:8f:70:16:65:b1:ca:68:
fa:48:dd:d5:4d:35:6b:c3:a8:90:bd:4d:85:3c:50:
95:c5:4b:39:0f:61:89:22:2c:94:68:5f:36:ec:19:
56:05:d4:c3:5a:b5:ce:6b:1b:54:8f:ce:6f:10:c5:
a8:ce:81:2b:56:9c:4c:f6:82:cb:ce:8e:1a:05:5e:
4a:4b:a8:30:4d:33:7d:19:5e:7e:6e:bf:0e:54:79:
eb:7a:71:5f:9a:88:e9:9d:1b:6b:12:4b:b4:67:df:
0e:7c:ee:e4:5a:7b:d0:fd:56:b4:9c:81:7e:59:9a:
bb:04:76:da:7b:c8:a1:3d:aa:51:7b:8a:67:f8:49:
59:fb:29:32:a4:b5:da:d0:20:9c:2e:e2:80:7f:0a:
7c:fa:05:f3:44:0e:d6:cc:46:65:06:04:f4:be:c1:
3b:7c:84:c7:81:9d:21:f7:db:b7:2e:51:26:d8:62:
78:d3:86:dc:ac:3b:e2:f8:93:e5:36:03:83:0c:f6:
13:6b:b7:7f:8e:76:f2:57:51:4f:ed:8b:3f:1b:21:
b2:1e:7f:a1:0c:c1:29:ce:99:49:4f:cb:e5:32:cd:
44:80:6e:c1:09:72:c2:86:f1:ab:77:dc:8a:9f:36:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:8C:F8:62:75:8C:52:34:C4:5B:57:FA:8E:43:4B:E8:3E:70:4E
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/yjuM-GJ1jFI0xFtX-o5DS-g-cE4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:68:ec:e7:f7:2f:8e:38:9f:f1:6c:5a:ce:63:57:c2:68:94:
e8:dc:8a:86:60:85:2f:19:7f:7f:22:28:d1:b1:ad:9f:c7:78:
8e:8a:37:16:67:64:f1:33:1a:ad:96:94:95:22:1e:79:6d:f2:
6c:8d:26:79:ee:05:d2:c0:35:3f:4b:35:d8:d4:4b:9b:5c:13:
4a:15:57:db:2f:d6:15:7b:b5:36:36:3a:ba:b9:ad:8a:b0:5b:
18:be:0c:ea:4e:77:ea:4e:63:5c:93:82:4a:7f:75:9e:89:87:
c4:93:75:c8:1b:6b:a4:5a:ca:f2:69:17:94:c5:ef:68:4f:e2:
4c:67:b1:82:ab:32:e3:bd:80:e3:b2:f8:d7:fc:a6:3a:4a:c2:
31:07:9b:aa:6b:60:65:c1:0e:54:32:c0:64:86:36:37:4d:72:
f8:9b:a8:c0:97:d5:56:df:4e:87:6a:51:d7:65:ee:f0:ee:d8:
14:2f:ff:cb:0a:36:76:57:6d:c3:0b:0a:8a:4a:7b:1f:f2:c7:
b7:28:d8:4c:6e:b0:40:23:be:ed:59:fa:05:5d:d5:57:65:d5:
26:15:c6:be:a8:d2:84:ba:1d:fe:6f:72:63:8d:90:5b:1b:a4:
a9:d1:d4:33:d9:06:06:a6:b0:f6:c9:3a:88:44:85:27:a2:cd:
0d:df:5c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org