Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/8_Dq1fkdWU55srwj2glRDc5__LI.roa
File: 8_Dq1fkdWU55srwj2glRDc5__LI.roa (raw, json)
Hash identifier: f3gIo1poOTzBv7sY1Ns2CoBIFfCzKt7MA5RYDVDsyiQ=
Subject key identifier: F3:F0:EA:D5:F9:1D:59:4E:79:B2:BC:23:DA:09:51:0D:CE:7F:FC:B2
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 084C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/8_Dq1fkdWU55srwj2glRDc5__LI.roa
Signing time: Wed 14 Jun 2023 05:24:11 +0000
ROA not before: Wed 14 Jun 2023 05:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 05:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=F3F0EAD5F91D594E79B2BC23DA09510DCE7FFCB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:a3:4d:2d:66:1f:bd:75:75:8b:75:01:37:
c3:3d:43:38:55:69:46:66:ca:21:ad:91:65:4b:80:
9e:ec:83:33:b2:46:05:a8:81:e8:fe:a4:de:b2:26:
8c:c0:1e:1e:56:2a:42:f5:79:03:4e:ec:5f:f5:cc:
33:ec:f8:a8:d1:72:65:63:2f:67:8b:93:76:52:dc:
d1:ca:80:4d:33:2b:9f:42:ba:ef:e3:e0:37:83:9a:
21:e8:d0:83:13:e7:92:10:d1:d6:8f:61:2a:54:7d:
40:87:26:e5:36:f6:41:17:20:39:ff:58:d1:3f:29:
da:51:22:2b:60:ce:71:84:fb:75:13:aa:f0:73:24:
55:83:ff:bb:25:27:5b:97:90:bd:cc:ab:81:fb:2a:
be:4c:af:8d:b6:d9:17:0b:0b:82:da:8f:8f:5b:0c:
8b:fb:11:9b:5f:05:89:bb:c7:aa:dc:91:2d:b0:3f:
1f:8e:11:f5:ed:3f:76:1a:51:be:35:8d:59:38:ca:
4b:02:ae:20:18:20:51:b4:b9:25:c8:f6:7f:13:66:
68:93:a8:6d:33:30:53:6f:a6:55:25:05:46:ff:56:
50:84:17:b9:aa:46:6a:ba:bd:03:7b:f3:0f:13:b7:
79:dc:91:a1:22:8d:57:74:9b:65:5d:14:c8:6f:1f:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F0:EA:D5:F9:1D:59:4E:79:B2:BC:23:DA:09:51:0D:CE:7F:FC:B2
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/8_Dq1fkdWU55srwj2glRDc5__LI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
31:c4:fc:66:24:3a:9c:57:88:72:e5:81:f3:96:e2:ef:c8:47:
a7:5e:99:4b:51:41:76:f9:c2:51:3a:e6:54:e9:e7:fa:2e:31:
94:ce:a7:23:3c:a3:be:53:d7:1b:36:38:0f:0e:a5:58:a1:94:
d5:12:10:e8:6f:66:90:f0:10:fb:5a:82:2c:56:73:ed:b6:28:
6f:f2:94:0c:6f:69:d2:37:de:58:7e:67:bc:23:78:b9:ea:50:
c2:19:58:2b:2b:2c:6e:39:0b:11:45:10:cf:8e:6c:f2:42:d9:
23:7b:e3:98:91:9a:1c:9d:3b:01:b8:e7:8a:e3:6e:3e:8d:fb:
67:d7:cf:ff:58:2e:10:e7:d7:0b:43:e7:58:f2:23:e7:ab:8c:
4b:84:bf:fc:e3:08:8d:a3:cf:e2:ce:48:80:c8:bf:09:72:06:
76:4c:98:2b:d7:a2:f5:e6:b2:5e:93:c0:16:01:92:13:4d:1e:
a2:78:4d:5b:05:20:42:d9:77:e9:3c:e0:b9:46:83:cd:63:d8:
35:a5:48:d8:08:99:47:bf:00:0d:f1:d8:bd:62:a3:50:21:7b:
0d:f0:50:44:c9:8a:7e:bc:f5:eb:81:ae:bc:f0:1e:19:db:bf:
31:a6:06:8e:81:c6:eb:41:a0:3d:a6:3d:2b:de:03:87:b1:02:
af:d5:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org