Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/CF799qEXGYJzuuWZH9q-xuiyry4.roa
File: CF799qEXGYJzuuWZH9q-xuiyry4.roa (raw, json)
Hash identifier: c2rXvGxmA3ZSX6LTKOQb/t+aZlaPhU9oNBxSupAEes8=
Subject key identifier: 08:5E:FD:F6:A1:17:19:82:73:BA:E5:99:1F:DA:BE:C6:E8:B2:AF:2E
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 091F
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CF799qEXGYJzuuWZH9q-xuiyry4.roa
Signing time: Thu 15 Jun 2023 05:54:05 +0000
ROA not before: Thu 15 Jun 2023 05:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 05:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=085EFDF6A117198273BAE5991FDABEC6E8B2AF2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:07:72:5a:ad:4b:82:ce:e5:68:ae:f2:0c:
54:13:a9:24:5c:cd:3d:c0:a6:f8:bb:59:61:04:48:
23:80:00:e8:c3:99:7a:84:4d:7f:ae:b0:85:79:35:
71:95:2d:93:2c:30:0d:0c:73:2e:b5:f4:d7:3b:c8:
de:d4:ee:2a:17:a4:05:c8:a2:9f:8b:02:db:b7:4a:
b6:be:7d:6a:2d:0e:48:73:fd:01:d7:71:03:d5:4d:
9d:de:d3:81:74:72:9d:48:50:dc:76:db:18:ff:7f:
4c:e4:c1:02:b6:85:0b:fe:6b:80:9f:a9:4e:91:7e:
01:bd:f4:a0:70:a2:e7:01:35:c5:21:cd:c1:78:8c:
a2:c8:fc:23:97:5e:0e:e9:7b:60:0a:d5:a0:d6:51:
ae:d0:6d:ed:46:d5:7b:3b:dc:b9:44:69:3b:8f:06:
5b:84:4e:fa:41:b0:5c:b9:e3:a4:15:fd:ae:21:86:
2b:a9:17:ff:0e:63:96:8e:ac:69:ad:8a:c8:05:e3:
f9:26:31:14:fe:7c:2c:93:87:63:24:83:75:25:22:
88:b7:d6:00:e4:b3:49:c8:bb:45:04:6f:6e:c7:22:
ca:70:1f:98:4b:a5:5a:e9:52:1f:43:01:bb:7b:fe:
7f:cc:37:e5:6a:ca:b9:67:d0:68:2c:97:e4:7e:09:
ff:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5E:FD:F6:A1:17:19:82:73:BA:E5:99:1F:DA:BE:C6:E8:B2:AF:2E
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CF799qEXGYJzuuWZH9q-xuiyry4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
87:a4:1c:d6:3b:2b:97:0c:d6:ae:b6:78:fd:4a:e7:30:81:48:
f3:eb:8d:3c:cf:a2:e6:bc:d9:ef:ce:77:3d:74:92:e4:4a:52:
8e:75:4b:35:f7:e7:57:72:c5:c5:0d:ad:9e:4c:40:16:64:da:
ae:94:48:39:62:fd:94:85:65:46:2f:ae:2a:72:fb:7a:3d:29:
12:6f:d4:42:41:0d:10:ba:6b:b5:21:75:da:63:8d:5f:f9:e4:
35:2d:88:3e:2f:53:a2:80:6a:0c:29:f5:79:6b:51:51:25:79:
67:8b:9e:38:49:6d:5c:9f:ca:2f:1c:d4:b8:e3:cc:19:4a:af:
ed:fe:c8:2b:cc:44:17:43:b4:b8:f5:3e:d9:a1:59:7d:50:6d:
fa:e3:05:75:ed:43:06:30:05:a8:91:86:72:fe:a4:b0:5e:ad:
69:09:3f:3d:c6:ea:1e:d7:0b:41:55:4a:64:01:e1:79:eb:08:
64:aa:6c:a9:09:2d:8d:d3:30:19:a9:98:15:fe:03:75:a9:10:
61:68:73:45:d5:f7:e6:fd:12:7d:72:7a:b5:b9:a7:b8:51:61:
b3:7d:4d:3c:35:ec:14:e3:0f:1a:6a:a5:9f:8f:7a:90:66:9a:
5d:47:8b:2b:0b:ad:d1:b5:77:5c:e4:0d:e3:3d:2b:6d:1c:74:
ac:95:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:54 2025 by rpki-client