Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/1XQ_8bhYOuYVP_kGotOcG34Co40.roa
File: 1XQ_8bhYOuYVP_kGotOcG34Co40.roa (raw, json)
Hash identifier: f9JNKg5GL/grx0oOjIhNC1oP9J+OEybl6MQL0oHeWGM=
Subject key identifier: D5:74:3F:F1:B8:58:3A:E6:15:3F:F9:06:A2:D3:9C:1B:7E:02:A3:8D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07E4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/1XQ_8bhYOuYVP_kGotOcG34Co40.roa
Signing time: Tue 13 Jun 2023 16:24:01 +0000
ROA not before: Tue 13 Jun 2023 16:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 16:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D5743FF1B8583AE6153FF906A2D39C1B7E02A38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:92:06:ae:79:07:7a:fd:a0:0f:69:23:0f:
45:9b:31:5b:34:f4:59:f9:b4:d8:a0:b2:2a:1b:07:
15:7d:b4:bf:ab:18:64:e8:f4:6c:c3:2b:bb:df:16:
84:41:ef:a2:d5:33:62:1b:76:c2:2a:1e:92:28:7e:
00:7e:18:b7:1a:cf:ba:ec:25:e5:8e:dc:dc:e0:b2:
ed:75:9e:e4:4e:af:b4:78:f3:be:68:0b:61:a3:c5:
d9:47:ab:79:2c:bd:c8:5e:3d:1f:7d:4e:23:b0:55:
47:bc:46:8f:26:cf:6d:f7:f3:0c:b0:6c:e2:28:19:
3e:d9:79:8a:cd:89:ef:52:a7:fd:b0:50:10:eb:99:
ab:48:13:89:28:cc:f0:23:2b:2d:a3:38:01:0d:96:
57:1e:57:5c:8f:a0:30:13:27:66:fa:50:a2:1c:83:
f7:79:87:17:0e:41:db:8a:23:28:61:6b:49:5f:20:
95:9b:2d:cc:05:14:89:cd:e9:c0:de:fe:05:0b:99:
87:45:51:92:3b:f9:dc:ec:eb:3f:29:ff:b3:08:85:
32:93:3b:71:b5:73:1b:b5:71:b8:2c:f9:19:91:83:
d5:25:99:bd:01:f9:af:30:c2:7b:d6:e1:39:77:80:
4c:9c:02:4d:a6:9c:91:ef:f9:0a:66:e9:8a:77:94:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:74:3F:F1:B8:58:3A:E6:15:3F:F9:06:A2:D3:9C:1B:7E:02:A3:8D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/1XQ_8bhYOuYVP_kGotOcG34Co40.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:3d:91:62:90:48:12:a2:33:f2:c7:2f:18:d5:ca:ac:91:58:
43:80:53:8f:09:b1:a7:fe:d7:27:fb:95:74:ea:02:65:bb:63:
f2:49:c8:40:5c:1a:14:68:57:1f:e1:e2:d2:6d:68:f7:c1:e8:
97:60:9c:e9:82:81:cd:cc:6b:80:86:9e:40:5e:ed:f6:07:c4:
90:15:3f:f3:80:76:58:ef:97:2a:6b:3b:4b:d4:76:ec:28:e3:
e0:d2:aa:84:75:39:9d:a2:c2:44:91:37:b5:b8:32:b2:b1:01:
b2:c9:72:4f:90:a4:d7:e8:98:33:6a:50:82:1d:ec:fa:69:d6:
3f:49:0c:59:54:9b:7a:02:2f:1f:c6:c9:22:0c:4e:26:e2:7a:
56:84:ee:28:81:34:74:e8:b5:20:fb:cb:35:14:a4:9e:69:3b:
dd:b1:e9:f1:37:e8:b2:73:e1:9d:4c:63:7b:a0:15:d6:72:71:
9b:1f:4d:20:75:2d:ab:d6:d3:7c:5f:34:b9:f4:38:71:3d:d6:
b6:cd:a5:7a:d1:4c:e0:58:5a:22:62:98:b7:0c:4e:16:64:32:
f2:cd:cb:26:fd:6d:de:21:ff:5b:b8:b3:0f:c5:7b:91:ca:2d:
4d:a0:cf:04:ef:d6:de:35:48:3b:aa:43:7a:a9:c3:dd:22:33:
1a:ac:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org