Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/2PesaS-mvh91fpvPEHvI7tsYJJY.roa
File: 2PesaS-mvh91fpvPEHvI7tsYJJY.roa (raw, json)
Hash identifier: GBZfsTNgi8EAqFosWxxi1ipSRQjybU9xBtCqZHdAv60=
Subject key identifier: D8:F7:AC:69:2F:A6:BE:1F:75:7E:9B:CF:10:7B:C8:EE:DB:18:24:96
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0864
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/2PesaS-mvh91fpvPEHvI7tsYJJY.roa
Signing time: Wed 14 Jun 2023 08:24:03 +0000
ROA not before: Wed 14 Jun 2023 08:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 08:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D8F7AC692FA6BE1F757E9BCF107BC8EEDB182496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:9a:82:7e:68:e8:87:d9:a6:6a:50:9d:72:
61:49:47:55:8b:66:7a:cd:2b:e4:35:fe:10:3b:96:
7e:9d:7f:96:e8:6d:2d:5a:db:2e:4e:b9:7b:08:f8:
74:10:a2:c4:c3:7a:2b:1e:65:dc:ed:fd:07:08:f6:
8d:28:bd:e4:8d:52:ff:a0:e4:5e:c2:de:d8:8f:21:
9c:bb:b3:d8:60:01:8c:31:a9:84:b7:ad:8b:d8:9d:
1f:47:29:7c:84:9a:da:f2:a6:16:71:90:2c:ae:8b:
a4:32:ce:1d:15:6c:9a:4b:5d:aa:c2:a1:02:70:b3:
b7:11:54:77:a4:d7:52:a2:67:f7:72:86:35:2d:71:
b7:00:83:cf:17:d2:33:34:5f:c0:08:ba:2e:c9:61:
d2:ee:51:4c:a3:af:5d:86:ff:fe:cd:7a:d2:03:29:
bb:71:8a:25:5e:6d:b5:11:18:d0:c7:82:23:7e:1f:
28:97:64:f9:80:89:cd:db:e2:c4:42:f8:ba:56:1d:
e2:36:6a:52:f9:bc:cc:d2:82:b2:c1:7a:e0:eb:9f:
d3:ef:9f:0d:da:59:3e:c3:3b:8d:29:c2:dc:ac:f7:
66:08:fc:f6:11:87:56:fd:b5:21:3c:80:fb:bb:c4:
c0:f8:f4:35:ff:b0:c1:6b:94:d2:8d:74:22:43:ef:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:AC:69:2F:A6:BE:1F:75:7E:9B:CF:10:7B:C8:EE:DB:18:24:96
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/2PesaS-mvh91fpvPEHvI7tsYJJY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
30:2c:85:af:e6:92:d1:f4:e6:c6:eb:2c:5c:d9:6a:cd:36:57:
f1:ce:5d:cf:f1:8c:27:d7:ae:b5:6b:7b:b4:da:83:b6:ec:3b:
9b:f3:d5:b8:cc:16:3e:fe:5e:7a:08:17:89:6d:1d:59:5d:6a:
bd:cc:6e:49:b3:c3:d9:b9:87:2d:b3:dc:48:ee:61:a0:89:ea:
b9:1c:c3:d3:7e:06:55:d8:fc:74:8f:81:46:51:47:a6:46:07:
4d:cf:db:5f:77:16:29:22:d0:e4:78:ca:51:34:89:3d:51:d0:
78:b3:b0:6a:80:3b:7c:a8:ae:b0:13:fb:d6:f2:65:0c:07:1c:
45:61:7d:c6:7b:be:89:24:0f:f1:7b:44:17:b0:13:a0:85:51:
90:0e:b7:55:5e:40:d8:1a:12:bf:10:e7:85:2d:e8:23:52:4d:
6a:7e:c1:9b:c9:19:56:cf:7d:cf:5d:4c:d0:3f:32:45:bb:86:
2d:fe:f8:81:62:c2:52:1d:dd:fb:18:84:e4:dc:1b:a7:1f:3d:
57:05:aa:cc:49:a5:6e:cf:96:22:a9:37:48:94:17:5e:7a:24:
b9:37:ad:26:b2:be:ae:f0:60:29:51:52:09:32:72:05:7b:21:
ce:b8:a6:50:39:09:94:7d:81:6b:12:83:8c:1d:ea:0e:cd:b1:
b4:0f:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org