Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/1pepM-Vlrtk-cTQU1TMHkpMTgqg.roa
File: 1pepM-Vlrtk-cTQU1TMHkpMTgqg.roa (raw, json)
Hash identifier: 9WxrNR02Id47g92152M/mupWleKr7Sc4VX9K6UJboNY=
Subject key identifier: D6:97:A9:33:E5:65:AE:D9:3E:71:34:14:D5:33:07:92:93:13:82:A8
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08F0
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/1pepM-Vlrtk-cTQU1TMHkpMTgqg.roa
Signing time: Thu 15 Jun 2023 01:54:12 +0000
ROA not before: Thu 15 Jun 2023 01:54:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 01:54:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D697A933E565AED93E713414D5330792931382A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:1a:ea:58:6f:81:1f:cd:4d:81:e1:00:80:
5c:b2:f1:2e:cc:55:6f:7f:4a:25:49:cc:51:61:fb:
9b:45:4c:1f:16:fc:c1:cb:7a:ca:3a:b2:b2:85:5e:
3d:97:57:a5:c4:60:4b:75:fd:82:d1:7d:ef:88:4f:
4e:54:2c:08:13:65:4a:a8:35:5d:d8:e4:c4:be:5e:
c6:01:f7:91:cf:b3:4a:56:6c:81:58:e0:e1:de:14:
c4:b9:e8:8e:cd:3a:bd:95:3b:7c:72:f0:14:4a:b1:
cf:f6:60:d7:ef:9d:b3:a5:68:81:40:17:e2:dd:83:
c4:bd:93:dc:26:72:40:99:e4:e4:65:4a:52:04:28:
7f:6f:e6:a4:f8:8c:a6:95:01:4f:e8:bb:4f:f2:f0:
1f:66:bc:f0:e3:4b:1b:38:ca:0d:a3:74:0f:e9:f0:
66:a2:57:34:15:a9:68:dd:e6:40:91:57:62:24:c7:
76:8e:1e:52:5a:08:40:ba:f7:c7:3e:30:21:5a:bd:
c5:49:58:88:da:27:fc:e1:9d:6d:56:8c:76:a2:90:
eb:0f:c0:cd:89:7e:86:46:9e:2e:36:09:90:f3:ee:
65:a4:4b:ee:df:b4:a2:e8:f9:0f:19:f4:ba:34:b3:
36:d8:df:89:01:ba:06:1e:71:2f:8f:15:90:d5:cc:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:97:A9:33:E5:65:AE:D9:3E:71:34:14:D5:33:07:92:93:13:82:A8
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/1pepM-Vlrtk-cTQU1TMHkpMTgqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
20:b7:24:80:be:e6:3f:94:ad:ba:08:fb:45:06:f9:5c:79:b9:
40:57:40:39:2d:f7:9b:e8:7d:35:02:b9:7e:55:d4:6b:0b:06:
50:99:08:fe:a6:36:0b:43:94:05:31:7d:20:bc:8d:0c:9f:13:
ab:9f:de:84:1d:95:52:24:01:cb:bb:3d:d6:0d:ca:91:ca:0f:
18:1c:bc:a2:3f:97:85:e5:ae:4b:52:dd:a9:53:5f:42:78:f8:
51:58:ea:9e:a7:2b:db:29:c4:a0:5e:cb:d4:f0:8f:a8:af:15:
e4:5c:0b:23:f3:a1:b6:71:f0:b9:42:45:c3:3a:b8:81:ec:53:
e4:12:2b:3b:39:17:a3:b8:f2:54:d3:4e:7b:29:2d:03:b1:9e:
2b:aa:b7:1c:e2:79:5e:41:d9:54:77:25:fb:69:2c:2d:46:fd:
6e:f4:15:51:1f:72:d7:75:0f:77:23:9f:f8:4d:70:3c:16:15:
b7:fc:4d:40:e1:05:e1:f8:89:07:d3:ec:f9:52:f6:be:ac:e9:
cf:1c:0d:47:d4:52:cd:9b:1e:2b:61:47:ea:35:f2:41:d9:c8:
55:27:40:1f:3c:49:c9:bc:e2:4b:f5:27:f0:cf:68:61:8e:ae:
39:db:c2:f5:39:f7:ab:7f:5d:de:4a:b0:c5:68:3a:96:da:d7:
78:08:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org