Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ypFC_5veZFRLmBWuJcG3ErUqKSk.roa
File: ypFC_5veZFRLmBWuJcG3ErUqKSk.roa (raw, json)
Hash identifier: A31OboPaN9OpNb6dUFAMtNeC93lMqBHU2WBHPV9xmbQ=
Subject key identifier: CA:91:42:FF:9B:DE:64:54:4B:98:15:AE:25:C1:B7:12:B5:2A:29:29
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 082A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ypFC_5veZFRLmBWuJcG3ErUqKSk.roa
Signing time: Wed 14 Jun 2023 00:54:02 +0000
ROA not before: Wed 14 Jun 2023 00:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090 (0x82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 00:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=CA9142FF9BDE64544B9815AE25C1B712B52A2929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:01:39:3f:a8:5c:86:db:1c:bf:05:78:7e:
d4:c9:66:ff:ab:7b:c3:09:db:3c:ce:dd:e1:0c:e2:
00:d0:18:13:90:e1:a8:a5:d2:da:76:c9:a4:81:d8:
4f:7c:1b:86:50:44:af:1f:18:1f:2b:c6:b5:ea:5e:
4c:fd:83:ae:7a:ce:e9:be:52:5f:78:8d:7d:8e:22:
91:eb:7b:3e:24:1e:ed:a4:f2:5d:36:24:66:04:97:
7c:a7:7f:9a:e3:ae:a5:b1:1f:d7:58:f6:dd:f4:fb:
67:9a:f5:f4:98:88:81:22:25:02:44:de:ba:8f:1a:
91:90:47:83:c3:c6:b0:54:b4:45:11:27:f9:3a:79:
c1:9b:cd:e5:b9:fd:d9:af:9e:5c:dc:51:6b:89:8b:
ab:85:cd:e4:c7:81:b8:f1:1a:a6:3d:58:a6:42:71:
4a:66:b4:41:d9:c4:21:3c:89:29:6e:ff:4e:72:a1:
b1:71:25:ff:94:98:ec:9b:90:f7:b2:59:d4:89:69:
95:b8:b5:f2:fc:48:28:f6:44:1c:25:26:84:61:f0:
b6:2f:9d:9d:82:4c:f0:3b:c9:d4:fd:5b:41:1a:ae:
0f:c9:e8:f9:43:4d:43:88:96:81:5c:c2:90:1b:83:
6a:12:f0:e3:ef:c1:99:16:35:f0:66:e8:32:8e:59:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:42:FF:9B:DE:64:54:4B:98:15:AE:25:C1:B7:12:B5:2A:29:29
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ypFC_5veZFRLmBWuJcG3ErUqKSk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
22:ce:a9:02:cc:5b:dc:d8:be:9f:62:a7:af:b7:5a:5d:9a:6b:
6d:ec:89:99:5a:6b:f7:21:b4:50:17:52:ef:de:ef:60:53:44:
c3:c8:db:e7:14:3e:d4:35:31:55:38:a9:4a:00:1a:41:94:ea:
ed:0c:58:4f:7f:a7:92:a1:af:35:cd:c2:85:84:49:c1:c1:f6:
6d:68:c2:fc:81:60:cd:6b:22:c0:7d:fc:cb:94:bd:71:c7:cc:
2d:09:c7:d8:16:0d:f7:1e:cb:41:c3:ee:b7:fb:b1:ac:1a:4d:
53:e2:58:d3:b3:88:2b:99:80:06:1b:06:0e:2a:4b:27:c8:03:
9d:2a:bd:bd:03:34:62:82:d3:bc:a2:d9:d3:a6:c5:8e:03:eb:
6d:46:26:30:a8:8b:b2:2e:3c:80:29:1b:0d:d5:6a:90:0e:6c:
4a:a3:a1:2a:04:96:0b:83:14:13:87:06:e4:20:7d:13:9a:a1:
af:09:fb:75:35:d8:53:c4:67:ac:d2:b1:41:7f:bc:45:4e:b1:
a6:bc:c5:c7:2f:78:73:f3:6b:33:09:5b:8f:f7:7b:8e:41:ab:
77:3a:27:11:e6:ee:47:50:56:b6:24:0d:c3:d9:f0:98:40:80:
cc:1e:ac:dd:76:1c:86:d1:11:23:50:b8:28:11:ef:99:a2:fd:
81:4d:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org