Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/5JobX7zccrwgeq_YNOsf4hPYh4Y.roa
File: 5JobX7zccrwgeq_YNOsf4hPYh4Y.roa (raw, json)
Hash identifier: 2uqXndjgOMkssy4RKcSbVMv3c9oY73emeU64gRY+9DQ=
Subject key identifier: E4:9A:1B:5F:BC:DC:72:BC:20:7A:AF:D8:34:EB:1F:E2:13:D8:87:86
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0814
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5JobX7zccrwgeq_YNOsf4hPYh4Y.roa
Signing time: Tue 13 Jun 2023 22:24:01 +0000
ROA not before: Tue 13 Jun 2023 22:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 22:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E49A1B5FBCDC72BC207AAFD834EB1FE213D88786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:eb:6e:6f:95:3f:ca:cc:c2:0b:09:95:38:
43:18:f5:32:96:be:da:d8:e3:33:0d:49:e7:27:5a:
3b:d6:de:5e:da:87:53:2f:90:2d:83:db:18:da:07:
70:09:f4:f7:aa:82:b7:70:2c:b0:c8:34:34:c1:b1:
24:58:27:74:fc:9e:e7:32:a7:5d:e2:ef:00:09:03:
f3:44:58:5e:4f:eb:9e:97:13:3a:23:d4:83:6a:a9:
5c:f8:aa:27:80:81:23:ed:6d:a0:49:a6:ca:cd:b3:
9a:27:cd:d4:b8:16:13:e3:be:e6:63:74:d7:d4:a6:
2f:bc:20:69:1f:f0:36:77:d7:2f:7f:bb:82:fa:0e:
e4:8f:d6:2b:c0:bf:a8:09:b9:7b:76:c2:03:37:08:
1b:7c:dc:e6:d5:b9:54:50:d0:72:2c:1c:13:cf:14:
56:a4:44:b1:10:ab:f8:bb:c6:ae:f0:22:ca:49:30:
f9:d6:63:2e:01:81:b8:dd:79:61:7b:d3:13:55:67:
65:ba:ac:c4:3c:86:3c:61:36:b3:cf:c1:36:15:52:
8f:3b:b4:a4:bf:c1:cc:d9:ba:aa:f7:8f:a6:33:84:
05:35:85:fb:c6:b6:97:ed:55:e8:17:3a:55:28:f3:
b5:32:25:bf:f7:95:0d:7f:3d:8e:9f:b6:a2:20:fc:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:1B:5F:BC:DC:72:BC:20:7A:AF:D8:34:EB:1F:E2:13:D8:87:86
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5JobX7zccrwgeq_YNOsf4hPYh4Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:a2:ab:b1:e7:0b:5f:25:a1:ef:b2:83:c4:e4:2c:dc:ea:31:
70:01:c3:62:3b:0e:57:8c:80:b7:f1:ab:36:b7:0d:66:62:f5:
88:ff:52:09:08:c5:ca:69:96:cc:63:10:fc:d8:67:0d:56:75:
b3:7a:6c:a0:a9:7b:26:90:a5:63:5f:8b:95:f2:44:0e:b7:e8:
4d:d8:df:c0:88:de:4c:eb:a0:3c:4f:3d:8b:e8:a1:2f:0d:be:
c6:4b:ee:b3:59:7e:5c:de:ac:1c:31:e8:a2:7e:f6:5d:68:90:
e3:7a:97:f9:bb:6a:e4:e1:40:5b:8a:61:83:86:73:e4:52:e0:
76:48:e3:6d:4a:78:c4:64:64:b3:11:84:39:bb:d0:45:5d:61:
e3:8c:a8:b7:ba:a2:a7:1a:c1:b2:76:fd:00:02:da:e1:d3:07:
72:ab:44:da:28:28:c8:97:0c:61:c2:be:fa:58:26:d2:c2:ab:
b6:2a:87:51:4f:f2:51:df:96:10:ad:e6:b7:f4:96:71:2c:f1:
c8:53:1e:08:45:fc:94:d8:d7:86:ed:2d:88:3b:d8:fd:c9:94:
d8:14:f2:17:62:98:55:74:44:05:39:d6:21:89:6a:fd:c8:96:
f5:fa:a8:f7:6c:30:85:0b:35:3d:75:76:da:be:7e:02:ad:11:
27:57:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org