Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/0YvZw7yndrxi5h2HbWdm0xxhZI0.roa
File: 0YvZw7yndrxi5h2HbWdm0xxhZI0.roa (raw, json)
Hash identifier: zYzJ1/9q8VAwrrzgIToXx0qYLYeh9bPt43d19j7US9E=
Subject key identifier: D1:8B:D9:C3:BC:A7:76:BC:62:E6:1D:87:6D:67:66:D3:1C:61:64:8D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08AC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0YvZw7yndrxi5h2HbWdm0xxhZI0.roa
Signing time: Wed 14 Jun 2023 17:24:05 +0000
ROA not before: Wed 14 Jun 2023 17:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 17:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D18BD9C3BCA776BC62E61D876D6766D31C61648D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:2c:48:2d:bf:eb:25:96:c2:0d:ca:1b:36:
c4:3e:8c:2c:8e:ef:55:1a:11:98:f7:97:ea:e6:a8:
ba:66:f4:14:d7:40:8c:14:bd:43:8b:26:83:af:a5:
96:2c:99:d4:63:05:5d:6c:ec:0d:2a:67:81:e2:d2:
2f:03:21:53:46:1a:70:29:1d:07:cc:54:5d:15:a5:
99:46:34:6e:08:20:8a:b3:e6:ce:e3:0f:2b:2d:e8:
48:63:5b:8d:f5:2e:59:b8:99:14:14:10:a7:cf:5b:
d0:f3:75:e5:84:d3:66:b4:64:61:bc:85:1e:14:f1:
51:50:da:11:bf:bc:71:86:5a:0f:e0:7b:60:27:0c:
83:b1:38:ec:2b:14:9a:52:65:be:c7:a9:63:11:55:
d2:bc:6a:91:e7:b1:d7:39:c5:dd:02:71:b2:73:6c:
54:04:dd:73:6e:32:65:f0:a1:bf:9b:83:aa:59:a8:
2e:82:86:46:eb:70:8e:44:2b:4c:65:24:2a:fc:a4:
f1:6b:0d:62:72:a6:48:fa:de:00:7b:ee:ea:71:c1:
7f:ac:71:26:44:c9:92:ae:2f:c0:78:7d:b6:d4:e0:
56:89:12:74:33:fd:75:1e:86:78:94:28:7e:98:78:
91:b9:43:ea:16:4c:a6:7e:16:88:03:e7:ab:2b:64:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8B:D9:C3:BC:A7:76:BC:62:E6:1D:87:6D:67:66:D3:1C:61:64:8D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0YvZw7yndrxi5h2HbWdm0xxhZI0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
59:dc:ba:40:66:01:95:92:55:07:6b:92:a2:59:46:bf:3d:41:
c4:aa:48:62:d8:16:5d:e1:24:6a:5e:d2:02:7a:66:d9:5e:8f:
f9:cc:fa:3c:d1:ab:86:0c:de:c7:ec:bf:c9:43:18:07:dd:00:
b4:fc:9a:36:57:46:88:ac:ff:3e:c9:c7:2e:ee:8e:9f:4b:35:
5e:2c:9f:70:ac:5c:f6:70:a2:c9:0f:1d:e5:83:69:ab:84:4e:
38:ec:f6:0e:bf:35:11:4d:85:72:c8:2f:8c:9b:fd:c6:c5:80:
49:e6:9c:46:01:a4:b9:d8:c2:f7:ee:fe:a2:22:26:1d:ab:c6:
ef:7e:6d:75:ff:3f:91:a3:ae:cc:97:87:03:e8:ad:ab:aa:52:
63:31:40:81:14:4f:2e:92:85:9b:6f:9b:e7:1a:8b:9e:08:7e:
2c:bd:6e:6e:50:e6:ba:b6:db:e6:d4:55:e4:1b:5f:dd:0b:dc:
eb:16:1c:c0:66:be:bb:7b:f4:ca:b9:d0:d8:c3:0c:02:b2:94:
ad:3c:53:80:51:bd:fd:91:c7:d0:eb:c7:9d:cd:65:82:e3:a0:
e2:ed:dd:e9:64:18:61:e5:a0:84:1e:a2:66:82:8a:1c:68:e1:
ef:3e:0a:fa:fc:55:94:70:cb:5e:1a:fa:99:a0:2d:a1:cd:48:
d5:23:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org