Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/R5fzb3Tm6urOIpmDb-GV9aW7jsE.roa
File: R5fzb3Tm6urOIpmDb-GV9aW7jsE.roa (raw, json)
Hash identifier: gtW01SIyK7SEQ+svKUjwFHeA9Sxmxb6fZZlHzSth+fk=
Subject key identifier: 47:97:F3:6F:74:E6:EA:EA:CE:22:99:83:6F:E1:95:F5:A5:BB:8E:C1
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07D2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/R5fzb3Tm6urOIpmDb-GV9aW7jsE.roa
Signing time: Tue 13 Jun 2023 13:54:02 +0000
ROA not before: Tue 13 Jun 2023 13:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 13:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4797F36F74E6EAEACE2299836FE195F5A5BB8EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:ed:1a:67:b1:f5:be:4f:5e:a9:ec:56:cc:
86:38:d9:6a:03:9a:89:bd:97:61:cb:6d:3b:77:f8:
a1:69:97:38:2b:87:dc:b2:6b:17:c2:c9:b0:19:6c:
d7:a3:ce:ee:5b:12:d9:9c:89:16:a3:75:1f:56:c2:
6e:38:16:d3:c6:37:a3:f2:e9:9b:7a:ee:62:cd:c2:
e0:01:77:d0:26:85:75:cf:81:b1:be:f1:89:23:f9:
a9:65:9b:78:54:4f:9c:aa:f6:5f:b9:56:da:fe:c7:
8e:ca:25:d6:bc:7b:07:c0:c7:6b:19:f8:43:ac:5f:
cd:75:41:ab:ec:1b:21:92:e6:2f:c4:07:9e:26:85:
d2:a6:5d:41:0b:41:73:f7:23:07:57:13:33:f2:4c:
d1:d4:01:fd:7c:86:46:56:9d:7d:f4:13:23:2f:7b:
79:f8:e5:91:d9:e3:a4:16:6e:75:6d:78:ae:3c:b1:
c8:fc:1a:ae:b8:17:51:f1:c3:32:e0:11:32:24:e7:
15:11:9a:e8:69:f4:15:ba:9a:06:79:8c:a8:b4:fd:
d6:f4:fe:e9:0e:8e:8c:85:48:d7:fa:37:05:1b:6a:
08:18:79:57:4e:47:ba:bb:fa:79:0b:8d:f7:bc:28:
4c:7c:a3:a9:28:8b:d0:35:b2:fd:f0:4b:56:a3:0e:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:97:F3:6F:74:E6:EA:EA:CE:22:99:83:6F:E1:95:F5:A5:BB:8E:C1
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/R5fzb3Tm6urOIpmDb-GV9aW7jsE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
32:d5:37:ac:a7:62:d5:67:9d:f4:23:70:15:6f:3c:60:3b:ce:
06:cc:1a:1a:61:9c:71:dd:aa:13:77:7f:6e:bd:40:fd:93:04:
1d:ea:da:12:36:7d:d1:00:61:cf:bb:64:f1:63:5c:0c:ef:b7:
3c:62:b7:a9:03:8a:2a:70:d5:c0:9c:62:06:35:75:1c:8b:a9:
e0:bd:01:34:1f:67:01:f5:26:1c:42:52:c6:85:ce:6e:79:9a:
40:3c:ec:00:0e:67:dd:92:a5:7b:b8:1a:09:43:f8:7c:ce:0a:
57:07:b6:3e:7e:40:d7:34:26:9d:45:4e:05:b7:16:7c:2f:10:
0f:c7:60:6d:30:0b:30:53:2b:d1:26:55:28:2d:a6:4a:b8:bc:
d2:46:66:cb:16:8b:05:de:02:cd:9a:00:b1:2c:44:fe:4e:c4:
66:02:d8:bd:b9:ab:07:31:f0:15:3e:d2:61:38:dc:01:ca:f2:
66:e7:1c:2c:7c:5b:3f:df:87:4f:f3:2e:ef:d5:ce:4e:2a:02:
d7:4f:69:cb:bc:19:cd:63:62:c4:a6:9d:5b:a6:8e:5f:e0:e0:
af:79:70:a9:d8:b9:d6:49:44:37:20:fe:4e:7e:0e:c0:4a:75:
74:31:69:8a:93:a2:fa:ac:8a:01:ed:1a:78:b2:93:cd:e4:13:
19:af:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:21 2025 by rpki-client