Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/2eZDV4F3j6PT97tTt-I21Zcf9AM.roa
File: 2eZDV4F3j6PT97tTt-I21Zcf9AM.roa (raw, json)
Hash identifier: 1qKBCabUct+xq9Ixms74NNJXAsvIzajS00tqvF13WX4=
Subject key identifier: D9:E6:43:57:81:77:8F:A3:D3:F7:BB:53:B7:E2:36:D5:97:1F:F4:03
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08C0
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/2eZDV4F3j6PT97tTt-I21Zcf9AM.roa
Signing time: Wed 14 Jun 2023 19:54:06 +0000
ROA not before: Wed 14 Jun 2023 19:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 19:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D9E6435781778FA3D3F7BB53B7E236D5971FF403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:30:d6:c9:1b:5b:00:22:af:82:f1:0b:e2:
95:a6:66:55:32:41:a6:85:8d:f5:37:61:1d:1e:2e:
62:13:c6:3a:c4:2f:87:f8:1d:ae:01:62:7a:9c:63:
95:c0:5e:5d:4c:4b:02:d8:57:1e:cf:34:28:2e:0d:
a4:a2:a0:77:a5:c2:fd:e4:ce:9b:6f:7f:a9:21:d0:
10:a6:3d:73:d8:c1:41:82:e1:6a:cb:c7:b3:3f:a2:
d4:5f:bd:2b:9e:8f:c9:8e:52:77:5e:20:0e:b9:4a:
00:da:b7:3d:aa:32:6e:59:48:64:69:d7:98:78:f4:
e1:c6:04:85:45:a9:31:20:31:45:b8:cf:ce:c9:93:
c3:90:82:12:0f:f8:63:ad:a2:db:70:e9:ea:a7:a3:
aa:df:37:00:05:42:a6:85:a7:72:d0:d0:c2:3b:0a:
f4:fc:f1:0d:ee:bb:ed:6e:ae:70:3e:36:5d:b6:6e:
fc:84:eb:3d:1e:e8:9d:bc:8b:3d:eb:4d:77:41:e4:
5e:76:9d:c3:ca:28:f2:da:43:45:e8:64:a7:de:0a:
23:84:18:6e:0c:71:bb:58:68:43:5e:fe:87:e2:28:
86:a6:68:4d:f5:3b:8d:95:fd:51:11:9c:3b:1b:7e:
ad:e3:5f:cc:76:4e:fc:fe:83:7f:86:97:93:c6:b4:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E6:43:57:81:77:8F:A3:D3:F7:BB:53:B7:E2:36:D5:97:1F:F4:03
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/2eZDV4F3j6PT97tTt-I21Zcf9AM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:b6:18:3b:2e:96:a9:4f:95:ea:24:09:7e:69:f4:a3:a1:20:
e1:64:43:b6:11:2b:ee:93:5c:fc:92:a2:ad:3d:b9:e7:ba:4a:
1c:51:0b:09:28:04:fc:e4:77:e2:56:72:46:d7:15:c7:12:9e:
33:b5:5a:56:ed:59:23:f4:ac:35:16:e6:82:f7:15:60:40:7e:
9b:ec:2a:9b:ca:f8:cd:40:41:ca:3d:61:a8:17:da:71:bd:8e:
90:73:3d:6e:df:3a:0f:be:3c:60:60:af:29:ef:33:9b:23:5a:
8f:22:da:8a:b0:0f:11:ca:7f:2d:df:7a:f8:9c:df:d8:2a:9a:
70:c9:4a:5a:c0:22:7d:1e:55:03:05:bc:55:b1:e3:4c:5a:90:
b5:67:92:cf:c7:a2:25:09:f5:6c:c7:99:88:80:bd:10:75:20:
11:6a:2e:cb:3f:3b:20:86:2f:0b:2f:ab:00:12:92:74:2b:d0:
24:e5:05:ab:30:34:9f:c7:8d:86:b4:c7:0a:89:35:df:7f:c7:
25:c0:0f:3d:11:bf:9a:0a:57:e0:95:c0:fa:16:80:9e:79:78:
26:1a:94:de:03:4c:ba:ee:e0:02:57:ad:aa:08:ea:7c:db:5e:
94:24:9f:19:04:3c:6a:35:f1:00:e5:68:ea:04:02:b0:67:d5:
12:ea:9b:62
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQx
OTU0MDZaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEQ5RTY0MzU3ODE3NzhG
QTNEM0Y3QkI1M0I3RTIzNkQ1OTcxRkY0MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDcjDWyRtbACKvgvEL4pWmZlUyQaaFjfU3YR0eLmITxjrEL4f4
Ha4BYnqcY5XAXl1MSwLYVx7PNCguDaSioHelwv3kzptvf6kh0BCmPXPYwUGC4WrL
x7M/otRfvSuej8mOUndeIA65SgDatz2qMm5ZSGRp15h49OHGBIVFqTEgMUW4z87J
k8OQghIP+GOtottw6eqno6rfNwAFQqaFp3LQ0MI7CvT88Q3uu+1urnA+Nl22bvyE
6z0e6J28iz3rTXdB5F52ncPKKPLaQ0XoZKfeCiOEGG4McbtYaENe/ofiKIamaE31
O42V/VERnDsbfq3jX8x2Tvz+g3+Gl5PGtMqRAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU2eZDV4F3j6PT97tTt+I21Zcf9AMwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvMmVaRFY0RjNqNlBU
OTd0VHQtSTIxWmNmOUFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAKrYYOy6WqU+V6iQJfmn0o6Eg4WRD
thEr7pNc/JKirT2557pKHFELCSgE/OR34lZyRtcVxxKeM7VaVu1ZI/SsNRbmgvcV
YEB+m+wqm8r4zUBByj1hqBfacb2OkHM9bt86D748YGCvKe8zmyNajyLairAPEcp/
Ld96+Jzf2CqacMlKWsAifR5VAwW8VbHjTFqQtWeSz8eiJQn1bMeZiIC9EHUgEWou
yz87IIYvCy+rABKSdCvQJOUFqzA0n8eNhrTHCok133/HJcAPPRG/mgpX4JXA+haA
nnl4JhqU3gNMuu7gAletqgjqfNtelCSfGQQ8ajXxAOVo6gQCsGfVEuqbYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org