Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/4OrWldoLSfqg20k2Yih1M1vJ-r0.roa
File: 4OrWldoLSfqg20k2Yih1M1vJ-r0.roa (raw, json)
Hash identifier: v1LN1Aj1icKUWX1i4YMVpMjhcnW8lkVJyTOM301VxZ4=
Subject key identifier: E0:EA:D6:95:DA:0B:49:FA:A0:DB:49:36:62:28:75:33:5B:C9:FA:BD
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07E0
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/4OrWldoLSfqg20k2Yih1M1vJ-r0.roa
Signing time: Tue 13 Jun 2023 15:54:12 +0000
ROA not before: Tue 13 Jun 2023 15:54:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2016 (0x7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 15:54:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E0EAD695DA0B49FAA0DB4936622875335BC9FABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:ab:0f:f7:85:05:bd:07:78:15:e0:ec:5b:
59:10:2a:97:b1:66:d2:83:64:70:08:0e:3e:2b:56:
54:4c:83:3e:30:55:b2:0d:ef:f0:36:18:76:e0:72:
f3:82:eb:8a:5a:b3:fc:33:0b:2f:1f:c2:9c:19:bd:
9f:9f:26:67:7a:c9:d4:fd:52:bd:71:b2:72:e5:be:
46:82:06:75:c4:1d:f5:0b:36:20:52:fd:85:6a:c2:
42:18:14:bb:82:d8:1c:4b:80:36:01:f3:0d:36:e4:
0b:3e:29:1e:5e:9c:7a:45:35:8b:21:2f:53:e8:cd:
24:cf:c0:7c:34:60:bf:a8:c4:aa:ff:8a:3d:2e:89:
c3:cf:19:e7:57:c6:9a:3c:a7:8b:33:f7:65:e7:b0:
d0:34:1d:a6:aa:71:de:9f:37:cf:50:31:0f:a0:29:
c6:18:9e:33:8f:62:78:ed:e9:9a:01:87:d4:b4:72:
1c:9b:96:d5:ec:50:62:88:6c:34:df:ec:f5:62:59:
88:f7:41:7f:15:56:0f:dd:7c:cf:7a:b1:c9:23:55:
7e:79:f1:f1:5e:d2:d8:20:6c:54:36:8e:da:eb:da:
e0:bf:8a:65:b8:a8:50:b5:7d:a3:48:49:12:f3:19:
bc:8e:50:b7:8d:3b:21:c3:f0:2f:c0:ca:ed:48:5f:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:D6:95:DA:0B:49:FA:A0:DB:49:36:62:28:75:33:5B:C9:FA:BD
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/4OrWldoLSfqg20k2Yih1M1vJ-r0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:24:28:27:9f:aa:92:32:7c:4e:87:69:2d:5b:dc:41:a8:6f:
cf:ea:d2:d4:42:88:4f:14:30:52:eb:e6:ce:71:69:41:bd:e1:
eb:c8:c2:29:f0:c6:84:04:71:b4:1e:7d:e5:21:3b:73:1a:37:
a4:7c:79:20:e0:30:dc:26:af:d5:21:55:17:16:9b:fe:db:65:
14:1b:d4:ca:e4:e0:0a:39:c6:1b:31:f7:09:a0:1b:31:5b:8c:
9b:d4:04:cf:dd:64:a3:ca:5e:e4:3c:97:25:2a:95:0d:eb:10:
30:aa:a2:49:fa:c3:26:9f:1f:73:98:75:32:6d:16:be:5d:21:
90:0f:b2:77:21:d0:fb:7d:11:fb:ab:12:2d:66:f9:50:2a:da:
93:9a:26:52:f7:a8:11:71:b3:21:0b:00:59:cd:de:a7:e3:2f:
07:ab:ed:52:77:1c:6f:49:7c:3b:e6:f3:93:0b:22:1e:85:bf:
ad:ce:aa:e3:d7:a8:d8:55:b0:84:a3:eb:26:50:26:3f:26:dc:
4b:27:bc:ea:b3:ae:60:96:a4:23:a6:a5:89:11:b6:b4:65:91:
d9:b4:03:4b:3a:52:6c:9f:91:4b:c5:4d:a9:3f:a7:ce:b8:63:
a2:c1:ef:f0:6f:f3:bf:b3:2f:e1:9e:e1:b1:cf:5a:4e:95:fa:
a1:4e:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org