Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/1EC1ZH4-_R0mgCsW2CiSlRbcp8M.roa
File: 1EC1ZH4-_R0mgCsW2CiSlRbcp8M.roa (raw, json)
Hash identifier: T0b7bzpW59CDsuHcEEu3yYAbhKBpBcJpqAKqoGfDzH0=
Subject key identifier: D4:40:B5:64:7E:3E:FD:1D:26:80:2B:16:D8:28:92:95:16:DC:A7:C3
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 085C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/1EC1ZH4-_R0mgCsW2CiSlRbcp8M.roa
Signing time: Wed 14 Jun 2023 07:24:02 +0000
ROA not before: Wed 14 Jun 2023 07:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 07:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D440B5647E3EFD1D26802B16D828929516DCA7C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:66:dd:ac:53:ba:1f:e9:5a:8d:22:46:e5:54:
b3:34:c5:c6:e5:ae:b3:73:7b:57:1d:88:e3:7e:d5:
43:df:a4:d5:4f:61:a0:aa:05:c7:11:75:9d:e3:4f:
f8:3c:7e:4f:c9:13:3a:35:17:3c:e7:9c:c8:b7:da:
31:f3:e0:e0:1c:a9:13:0b:f4:ed:0e:ba:a9:28:e8:
8f:33:6c:b4:35:ca:3e:de:96:db:63:91:94:f8:31:
19:e1:df:e4:da:cb:fc:b7:61:6f:49:7b:f9:1e:a2:
c6:22:3b:d0:24:eb:af:db:38:70:af:fb:6a:29:9c:
d5:64:f7:6f:de:b9:ce:db:f2:ef:91:2d:95:0f:48:
3c:db:e0:d7:6f:d1:a5:91:92:29:5a:02:bf:19:7b:
d1:a9:ef:e7:f0:71:c3:27:fb:bd:79:95:d0:cd:e3:
83:58:73:1a:02:09:c7:27:5a:ed:74:c9:06:b7:fb:
e4:1b:bb:cc:7b:db:80:05:eb:c8:3c:d2:0c:b4:e1:
26:93:de:3b:0c:23:e4:c6:b3:65:65:1d:ce:1d:a6:
5c:bb:2e:99:b6:32:d3:d0:99:1e:58:57:55:77:5b:
c3:7b:10:99:e9:86:9b:6e:a0:fb:d2:e9:e3:b2:9f:
17:6d:eb:c9:7e:68:9e:fa:d7:c8:6e:04:57:af:ba:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:B5:64:7E:3E:FD:1D:26:80:2B:16:D8:28:92:95:16:DC:A7:C3
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/1EC1ZH4-_R0mgCsW2CiSlRbcp8M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:e1:86:43:91:5e:4b:47:25:83:0c:f5:43:28:1c:6a:67:f4:
df:a1:5f:32:a2:82:ad:3d:e3:c3:f6:bb:42:42:0e:2d:6b:6d:
1d:0f:bc:ca:7a:a4:11:a8:a3:09:90:fc:f8:64:5d:d9:37:0c:
ac:29:ca:80:0a:9e:1a:d7:01:66:e4:df:99:1d:48:a2:4b:3d:
01:e4:05:57:68:36:59:04:f4:cb:23:94:cc:ac:22:23:ba:7e:
8c:9d:32:23:26:7d:04:03:ba:d2:ef:0d:9b:a6:2f:79:bd:f8:
8f:20:58:24:16:38:be:15:33:9a:de:f0:0e:08:63:33:5f:45:
f0:9a:e7:57:47:cf:f9:69:87:74:96:5d:f4:61:e1:f3:5b:58:
a3:5d:a9:dd:dc:ad:69:0e:60:5f:03:cc:2e:a7:90:a9:17:f8:
d0:b3:e7:f3:24:96:60:45:1b:c1:0b:c9:81:a6:7e:76:aa:aa:
e7:34:3b:1b:7c:b9:e7:c3:d7:70:43:d9:75:1c:26:90:0f:6c:
fe:18:81:e8:64:24:d2:d1:6a:e5:9c:94:c7:e0:4a:71:ee:44:
d1:6e:59:d8:1c:b7:dc:e7:82:23:16:9b:26:80:79:81:66:15:
ba:ba:a1:4d:10:1b:72:c1:04:84:8d:3b:9a:06:97:d1:f8:24:
20:9b:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org