Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/-guzLOSmQCCAKH7ETZjUeWeQOJ0.roa
File: -guzLOSmQCCAKH7ETZjUeWeQOJ0.roa (raw, json)
Hash identifier: fO5l1CUQjERZqLQlhdJeJLhMTYqq5+yl6VkDd886hdA=
Subject key identifier: FA:0B:B3:2C:E4:A6:40:20:80:28:7E:C4:4D:98:D4:79:67:90:38:9D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08B4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-guzLOSmQCCAKH7ETZjUeWeQOJ0.roa
Signing time: Wed 14 Jun 2023 18:24:08 +0000
ROA not before: Wed 14 Jun 2023 18:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 18:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=FA0BB32CE4A6402080287EC44D98D4796790389D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:66:cc:dc:f0:0f:71:4a:c4:99:9e:13:1c:
86:a6:79:dc:e4:70:3c:73:1d:da:03:04:1d:a8:68:
18:70:a4:f0:f8:04:ef:32:7b:7c:62:d6:0c:fd:d7:
32:17:64:7f:b7:ee:b6:0b:64:de:b3:19:09:95:70:
1c:09:85:93:23:1c:71:1c:fc:76:4f:b4:94:f6:a5:
34:3f:3f:2e:4c:94:32:36:c2:01:9e:66:53:00:b2:
82:19:65:af:2f:16:70:a0:b6:02:19:8b:44:0f:ab:
04:32:0f:ce:ad:f2:2b:1b:bd:2e:48:9d:dd:fa:ed:
59:d0:ab:eb:43:2f:7b:f2:24:ba:00:72:5d:06:5b:
cf:25:e0:d7:c2:fd:02:0a:ca:0e:71:26:e2:18:07:
45:9f:4b:ba:21:10:81:11:a6:24:ce:26:39:f4:e0:
07:a5:1e:8d:09:3c:2b:36:9e:c5:81:e3:c2:1f:41:
01:73:98:fe:f8:a0:fd:e1:ab:f1:ef:d6:c4:d7:6a:
89:96:32:a9:9f:c4:35:0f:68:88:65:7e:d4:32:ef:
fb:1a:e4:c0:ed:04:26:63:09:60:52:1c:78:05:da:
1d:79:c2:b6:bb:36:84:07:a7:da:cc:c6:2a:f2:4c:
73:25:b8:c0:a1:8b:0b:91:54:9b:44:22:f6:c1:7d:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0B:B3:2C:E4:A6:40:20:80:28:7E:C4:4D:98:D4:79:67:90:38:9D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-guzLOSmQCCAKH7ETZjUeWeQOJ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
48:de:1f:ce:6e:6a:67:c4:78:25:bc:de:3f:bd:88:0c:0c:aa:
d0:5f:59:f5:88:51:3d:de:4d:2e:0b:ae:2c:99:1f:ab:ab:a9:
ab:f9:29:5b:80:14:0e:2a:7a:29:c8:55:77:6a:ab:d1:45:21:
3a:6a:78:26:b4:d0:32:6c:2c:87:e5:cf:39:1d:8c:f3:28:6f:
72:24:32:ac:0d:fa:33:f9:d6:0d:7c:d1:7a:f9:80:75:49:ae:
82:bd:cc:a0:2f:39:0b:7a:2b:32:fc:a4:50:4f:ae:b1:0b:b1:
d7:f6:05:23:1f:9d:6d:d2:8c:64:b9:65:73:eb:0d:69:11:8e:
b9:76:7f:ca:ea:26:8f:fb:a2:cd:74:8d:d9:bd:21:89:ea:38:
81:7e:c4:53:42:5f:c0:42:65:79:cc:ad:5a:31:e7:77:a1:75:
be:5f:a4:3c:d2:0d:86:55:db:53:f3:d7:f3:e7:a1:a3:61:12:
bb:8d:8c:9e:95:d2:eb:5e:34:c0:2d:ce:65:fa:ba:b8:53:24:
cc:12:73:a0:20:4e:40:aa:5b:c1:8e:6f:7f:a1:55:a2:ca:e4:
3c:23:ca:7b:1a:51:22:74:2d:62:79:de:3b:b5:f1:02:42:85:
0c:0c:c6:e3:0d:c1:3f:81:41:43:99:42:d7:c5:46:27:c4:cf:
76:b3:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org