Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/8ZOwxJ0ORny9ZxaL7FyN3bVYoNU.roa
File: 8ZOwxJ0ORny9ZxaL7FyN3bVYoNU.roa (raw, json)
Hash identifier: bL0lv2piKNmR8qguJDv2HosWCEZj1N7rcNX9DYASVD8=
Subject key identifier: F1:93:B0:C4:9D:0E:46:7C:BD:67:16:8B:EC:5C:8D:DD:B5:58:A0:D5
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0848
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/8ZOwxJ0ORny9ZxaL7FyN3bVYoNU.roa
Signing time: Wed 14 Jun 2023 04:54:03 +0000
ROA not before: Wed 14 Jun 2023 04:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 04:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=F193B0C49D0E467CBD67168BEC5C8DDDB558A0D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:a2:fa:3b:1b:c6:31:a7:c7:04:e3:af:92:
c8:b1:72:d0:08:35:09:1e:3d:55:bd:0f:8d:1b:a8:
ae:91:85:8e:bd:af:27:97:3e:0e:c5:61:27:60:ff:
e7:92:a7:3c:b9:fc:64:a6:15:d0:96:69:d5:2c:77:
9f:d2:92:d5:28:70:5d:81:ef:d8:cb:d0:9c:4a:8a:
dd:9b:7d:89:cb:d6:5b:8e:0c:c9:cd:65:86:f8:bd:
78:2d:37:71:c8:ee:2c:bf:65:4b:28:85:87:fa:87:
1f:4d:f4:61:a8:b4:30:a6:39:2e:f6:1e:8e:36:cc:
99:7f:94:a6:47:db:e0:c3:be:14:ac:20:4a:c2:ab:
14:96:53:44:8d:62:6f:97:a8:a5:32:f3:4f:c5:5e:
ae:10:95:06:67:12:ff:ca:63:05:bc:d8:81:95:1b:
22:88:b8:71:5f:00:e7:95:ea:b3:eb:5f:28:d7:2a:
97:74:6c:c0:40:05:b7:27:2c:ee:64:44:25:73:69:
11:e7:c9:e6:80:9a:f4:db:08:da:01:16:67:88:87:
45:bb:82:d7:51:55:d2:94:44:84:4a:a2:3d:44:3b:
59:4c:48:50:78:f0:0d:c9:a5:5b:9c:0b:9a:d7:2d:
1e:3c:01:3d:a4:e0:7c:41:5e:21:d4:2c:6c:54:69:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:93:B0:C4:9D:0E:46:7C:BD:67:16:8B:EC:5C:8D:DD:B5:58:A0:D5
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/8ZOwxJ0ORny9ZxaL7FyN3bVYoNU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
66:2f:ea:3e:3c:8a:9b:fc:5a:c3:10:ea:e4:75:52:cd:6e:c2:
31:f1:b7:fc:e7:b9:d6:8e:73:b1:bf:12:3b:ef:0e:27:f7:fb:
98:47:00:69:ac:79:66:3e:3c:57:19:31:62:95:d2:c7:be:30:
32:01:b5:23:d3:99:51:3b:d7:21:ff:4d:2a:3c:04:01:7e:46:
a7:16:66:51:fe:b3:0a:f9:ef:a3:1a:00:a2:e8:4a:f8:2d:37:
fb:d6:9e:bc:06:b3:75:3c:96:4d:3e:8f:2f:0f:94:e5:96:85:
60:6d:3a:56:50:f5:3f:61:ec:22:1e:ea:64:30:e3:3b:ae:3a:
54:a3:0b:f6:5f:21:08:56:5a:d3:eb:e1:40:c2:db:07:4b:60:
0b:e0:8c:f0:21:b6:25:79:ad:e4:79:9f:0e:ac:40:d2:0b:93:
1b:4d:ba:99:83:89:4e:bd:87:d9:58:c4:2a:7f:87:eb:9a:1c:
5e:65:45:47:c6:64:8f:12:95:39:7a:2c:4d:7c:6a:50:fb:5b:
2a:d7:29:92:88:af:cb:d8:c2:de:c1:07:74:4a:b8:e5:7f:4d:
ae:13:99:be:7e:c3:b3:4d:85:91:32:2c:a8:cc:90:14:ef:0a:
d9:08:a3:16:ff:91:ae:42:5f:4d:6c:7a:48:74:de:b2:1a:ee:
b7:70:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org