Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/187/cbntxoGSQMOBnhpM89k0Hh_MA4E.roa
File: cbntxoGSQMOBnhpM89k0Hh_MA4E.roa (raw, json)
Hash identifier: Z2GxglBlLrmHvNHdqMJ41h/QoRQVjbc19h/qsaTokm8=
Subject key identifier: 71:B9:ED:C6:81:92:40:C3:81:9E:1A:4C:F3:D9:34:1E:1F:CC:03:81
Certificate issuer: /CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Certificate serial: 0D83
Authority key identifier: 2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/cbntxoGSQMOBnhpM89k0Hh_MA4E.roa
Signing time: Wed 05 Jul 2023 01:25:06 +0000
ROA not before: Wed 05 Jul 2023 01:25:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 18118
IP address blocks: 219.72.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3459 (0xd83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Validity
Not Before: Jul 5 01:25:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=71B9EDC6819240C3819E1A4CF3D9341E1FCC0381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:75:13:50:37:f8:03:d7:cf:c8:4a:00:99:
05:cc:77:eb:9d:e6:e5:f9:9a:ba:56:a6:fa:e8:2a:
c8:b7:07:84:7b:ba:05:06:0e:56:88:98:88:e4:de:
69:67:06:31:83:e8:b3:6a:76:46:b5:64:1a:de:54:
8e:ea:d1:6e:d9:4f:fb:15:05:a3:3c:bd:a6:7e:4e:
85:65:e2:e1:9c:83:79:d6:5e:be:51:92:a7:92:cc:
26:5b:24:10:83:b4:a0:fc:d5:2e:01:c1:ee:72:d0:
64:84:a0:04:81:ba:11:30:c9:ca:46:c0:82:c9:2b:
c6:a8:88:72:0c:2c:54:6f:d6:99:83:8f:44:10:e0:
68:da:2e:23:9c:70:1b:28:ac:6a:b1:6d:c5:54:93:
71:04:4e:e2:9b:e6:24:91:7a:03:97:a7:2a:75:c9:
a9:21:12:00:de:49:90:30:05:d7:fb:14:cb:04:e7:
1c:1f:2d:ef:58:d0:2e:d6:ac:67:5f:6f:5d:a8:8c:
e5:fb:1f:b4:58:9a:43:24:6d:f6:d3:79:72:a5:4d:
f0:05:a4:5c:ef:b6:a4:0a:94:aa:7a:a2:a6:e8:5d:
94:78:a8:2b:a7:9c:4f:77:06:03:33:fb:08:34:94:
39:a5:fb:f1:5e:4d:99:41:98:09:4f:c2:ec:bc:2a:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:ED:C6:81:92:40:C3:81:9E:1A:4C:F3:D9:34:1E:1F:CC:03:81
X509v3 Authority Key Identifier:
keyid:2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/cbntxoGSQMOBnhpM89k0Hh_MA4E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.72.160.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f9:b5:a3:85:d4:6f:80:24:70:6d:41:57:15:49:7d:95:fe:
27:40:24:34:9e:70:15:a1:d9:e8:e0:96:95:8f:ba:70:80:21:
13:c7:eb:0e:0b:8f:ff:1f:37:9e:88:18:77:94:5f:3f:9a:0c:
f6:04:25:68:4f:a8:9b:50:b9:cb:c1:11:d2:c7:7e:93:ed:de:
99:fd:f1:a5:12:db:d9:c4:c5:b4:38:4b:e7:3b:3f:a2:6a:20:
b3:8f:5b:c1:e3:0d:bd:6b:25:c7:46:d6:e6:1a:4c:f4:84:25:
68:da:80:6c:62:fc:88:24:72:03:f7:81:35:66:3c:fb:54:7a:
69:2a:bd:84:d0:fb:ba:d4:fc:43:c7:77:06:c4:36:a6:eb:7e:
76:6a:50:b4:c1:bc:2a:ec:8d:a1:5c:5a:db:59:7f:ac:7c:55:
91:da:25:8f:ff:93:02:90:3c:09:92:ff:96:2d:e1:fe:a8:63:
cd:85:01:90:00:f2:05:53:fa:e1:db:92:69:80:1d:d2:7d:76:
ce:aa:27:7f:4f:e3:67:ca:2f:4f:91:03:7a:36:a4:58:a7:fa:
2b:0c:f8:3a:b2:b7:7f:4f:c9:03:c4:d7:4b:d1:e3:ea:d7:e3:
00:cc:97:e0:08:54:b6:04:99:34:cf:c6:16:dc:b5:0b:8e:dc:
7a:05:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org