Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/8EcwA8VIv6ztP47FoSEpf3_0eyc.roa
File: 8EcwA8VIv6ztP47FoSEpf3_0eyc.roa (raw, json)
Hash identifier: GcysBQis/YWqqzN7qku91IVr9mPRvYIrOrQDVlfkiWU=
Subject key identifier: F0:47:30:03:C5:48:BF:AC:ED:3F:8E:C5:A1:21:29:7F:7F:F4:7B:27
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08CC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/8EcwA8VIv6ztP47FoSEpf3_0eyc.roa
Signing time: Wed 14 Jun 2023 21:24:11 +0000
ROA not before: Wed 14 Jun 2023 21:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2252 (0x8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 21:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=F0473003C548BFACED3F8EC5A121297F7FF47B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:89:b7:86:51:79:61:5e:eb:22:b9:94:9c:
ed:cf:a9:9d:84:e0:a1:a0:fe:cc:62:f2:f0:e4:f9:
62:be:56:0f:19:88:31:4b:f0:6b:81:21:6e:f1:b7:
b5:e1:37:e2:ea:8c:cf:b0:8a:42:fb:95:30:ea:eb:
15:43:d6:38:61:c8:4e:ec:3f:fe:93:33:45:f4:5b:
62:38:b7:09:32:a4:71:ac:77:75:53:02:9d:5a:ac:
ec:e3:e6:c2:9a:6b:bb:25:f7:c3:cf:7d:3e:43:cf:
3e:70:ba:cc:75:49:35:1b:e2:1d:eb:5d:cc:d2:fb:
83:ed:31:53:3c:c2:65:f3:63:f0:c0:6e:fd:df:58:
22:a2:75:6a:fa:4d:fc:6f:2c:a9:36:89:b2:3c:18:
38:c2:76:34:b8:1e:13:05:e9:bb:be:50:d6:60:7c:
1d:43:cf:3e:77:07:34:fb:64:d6:83:85:1c:85:d9:
bd:70:d3:be:7b:f3:95:2c:5a:99:a5:fd:09:52:1b:
9f:e2:3d:98:af:80:08:10:84:7b:c2:b8:a8:88:6b:
47:1d:0c:c2:d2:a0:90:4a:5c:a1:51:c7:f5:ca:b6:
44:7d:20:12:e1:7d:fb:e5:22:60:f5:49:7a:42:a4:
52:20:1a:5c:6e:f6:08:93:36:5b:65:dc:1c:e1:ba:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:47:30:03:C5:48:BF:AC:ED:3F:8E:C5:A1:21:29:7F:7F:F4:7B:27
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/8EcwA8VIv6ztP47FoSEpf3_0eyc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:33:41:75:d7:0b:48:32:d9:ea:51:f3:69:90:84:04:d4:fc:
b5:9e:bd:e0:85:d2:cf:d3:0b:dd:f0:95:87:64:d5:ca:be:ba:
7f:b7:60:1c:a8:35:0f:76:41:22:28:e4:5e:53:be:21:d3:e1:
ca:a3:29:1c:c1:52:78:4f:43:cd:a3:dd:fc:6a:b4:5c:39:c7:
ff:14:1c:14:fe:a1:c5:31:89:59:ae:a5:45:5d:f9:b7:0b:ab:
56:cb:55:c1:97:7e:49:75:5b:61:01:76:35:28:50:38:69:61:
20:ce:7c:3f:e7:56:92:db:2c:84:e6:23:84:7a:34:28:62:5a:
69:db:47:cb:bb:06:88:10:9e:af:7a:65:16:9f:49:f8:ce:56:
1d:c4:11:c5:c6:3a:ed:de:03:52:40:cd:cd:94:d6:7b:2f:01:
5a:61:5b:d6:a1:10:50:55:54:b6:99:28:1e:22:d3:0b:28:8b:
05:40:9a:4c:2c:15:46:2b:d9:33:4d:ec:8d:78:63:d8:07:76:
50:84:61:91:59:77:aa:51:63:07:ec:90:93:31:8e:bf:3a:61:
6f:3b:0a:b9:bd:05:a2:42:b0:98:77:1b:c9:a4:f7:cd:68:0a:
6c:9e:a9:15:83:f6:54:f6:55:dd:3f:be:3d:0b:c7:dc:ee:83:
2d:9f:a3:96
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MTI0MTFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEYwNDczMDAzQzU0OEJG
QUNFRDNGOEVDNUExMjEyOTdGN0ZGNDdCMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVLIm3hlF5YV7rIrmUnO3PqZ2E4KGg/sxi8vDk+WK+Vg8ZiDFL
8GuBIW7xt7XhN+LqjM+wikL7lTDq6xVD1jhhyE7sP/6TM0X0W2I4twkypHGsd3VT
Ap1arOzj5sKaa7sl98PPfT5Dzz5wusx1STUb4h3rXczS+4PtMVM8wmXzY/DAbv3f
WCKidWr6TfxvLKk2ibI8GDjCdjS4HhMF6bu+UNZgfB1Dzz53BzT7ZNaDhRyF2b1w
075785UsWpml/QlSG5/iPZivgAgQhHvCuKiIa0cdDMLSoJBKXKFRx/XKtkR9IBLh
ffvlImD1SXpCpFIgGlxu9giTNltl3BzhukA1AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU8EcwA8VIv6ztP47FoSEpf3/0eycwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvOEVjd0E4Vkl2Nnp0
UDQ3Rm9TRXBmM18wZXljLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAqzNBddcLSDLZ6lHzaZCEBNT8tZ69
4IXSz9ML3fCVh2TVyr66f7dgHKg1D3ZBIijkXlO+IdPhyqMpHMFSeE9DzaPd/Gq0
XDnH/xQcFP6hxTGJWa6lRV35twurVstVwZd+SXVbYQF2NShQOGlhIM58P+dWktss
hOYjhHo0KGJaadtHy7sGiBCer3plFp9J+M5WHcQRxcY67d4DUkDNzZTWey8BWmFb
1qEQUFVUtpkoHiLTCyiLBUCaTCwVRivZM03sjXhj2Ad2UIRhkVl3qlFjB+yQkzGO
vzphbzsKub0FokKwmHcbyaT3zWgKbJ6pFYP2VPZV3T++PQvH3O6DLZ+jlg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org