Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/0hUu_vH1lBv6QFc5nFAL-gH1ojM.roa
File: 0hUu_vH1lBv6QFc5nFAL-gH1ojM.roa (raw, json)
Hash identifier: rAmk96nU1OtMqYPxiKMW2YOU3XdZ8KErUtSKiSyEBs8=
Subject key identifier: D2:15:2E:FE:F1:F5:94:1B:FA:40:57:39:9C:50:0B:FA:01:F5:A2:33
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0830
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0hUu_vH1lBv6QFc5nFAL-gH1ojM.roa
Signing time: Wed 14 Jun 2023 01:54:10 +0000
ROA not before: Wed 14 Jun 2023 01:54:10 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2096 (0x830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 01:54:10 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D2152EFEF1F5941BFA4057399C500BFA01F5A233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:ee:49:73:02:13:76:3a:22:09:10:f6:4a:
1f:5a:75:89:81:84:b8:78:88:31:02:bd:7a:37:6b:
13:ee:f9:8a:c2:f7:b4:67:82:28:fa:6f:c2:b8:e0:
f2:61:64:bf:33:10:42:ce:4e:f6:7c:49:e7:d7:f9:
d5:9c:b9:e6:c9:df:d4:ee:61:1a:6c:be:0b:f0:c7:
e8:dd:f5:ac:87:d0:90:32:f1:51:2f:9b:a2:b3:d6:
3e:be:e9:25:8c:74:c1:46:a5:8f:9f:8a:29:51:59:
b7:9a:f9:54:27:0b:ec:c1:e2:5e:11:74:0f:b3:a3:
eb:7e:4a:d6:54:e9:9c:b3:db:34:cd:6a:f1:b3:85:
0c:c1:61:1a:0f:21:45:4d:4a:05:3d:61:d4:c8:d4:
4c:55:ba:fb:f0:36:a8:b9:25:3a:ab:de:b7:fa:25:
ae:e7:6f:c9:f2:c3:13:5b:98:af:39:08:2d:31:68:
f8:49:7b:11:da:1a:b6:95:59:d1:53:7e:e3:a8:c2:
17:fb:5c:d1:a1:f6:d9:f2:a5:7e:a3:94:f3:ac:9f:
d5:50:6e:51:c3:38:28:6f:fc:56:59:54:fc:61:0c:
81:db:db:12:bb:6b:34:d7:4e:3b:06:a2:fc:30:f0:
5c:9e:c0:9b:d5:8b:e4:ea:b5:9e:97:7d:65:5c:96:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:15:2E:FE:F1:F5:94:1B:FA:40:57:39:9C:50:0B:FA:01:F5:A2:33
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0hUu_vH1lBv6QFc5nFAL-gH1ojM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:a7:cc:64:80:ea:94:02:44:dd:47:29:36:1e:4e:b0:5e:e1:
29:64:2f:ea:c8:1d:78:a3:58:87:e6:e9:21:f8:d5:1b:90:c0:
b0:9c:52:b3:90:30:52:5d:c8:27:bb:5f:5c:c1:e4:16:54:de:
e6:ef:6a:2e:ec:93:7b:14:d7:c7:ff:8c:88:c7:d6:71:18:0b:
8f:27:0e:31:87:70:0e:ab:14:ce:3f:3b:f0:7d:24:53:0f:71:
9d:52:b6:ba:06:c7:21:8c:03:fa:4b:47:89:af:ef:9e:75:09:
7a:56:b1:6d:b1:eb:d7:ca:db:cc:b2:06:03:90:1e:b3:e3:62:
28:52:2c:6d:ab:b3:ce:8f:bf:7e:72:13:ae:8b:86:83:74:7e:
0a:60:bd:5b:18:1b:68:78:52:58:75:2b:35:63:c6:f5:ea:08:
e7:54:1d:0c:5f:bc:a8:aa:82:8e:bb:05:d5:6f:71:88:92:0a:
85:12:94:d6:1e:9c:2c:43:4d:f1:18:34:c5:c0:0c:94:64:6a:
bb:c6:77:ab:a6:e3:60:b1:81:ce:fb:50:5a:93:51:76:45:6d:
4b:af:18:bd:53:4b:73:e0:23:65:e9:2a:d9:3d:80:7d:2f:00:
49:ee:c8:bd:64:c4:d5:4c:a0:14:95:34:ec:37:78:09:42:15:
72:4f:56:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org