Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/AQr6JnWGQWdq4_vX4rJjGhfxbF4.roa
File: AQr6JnWGQWdq4_vX4rJjGhfxbF4.roa (raw, json)
Hash identifier: 3Rpwx3iita6oXEhi1izIkoHJxX+WB+NF4djXbl495O8=
Subject key identifier: 01:0A:FA:26:75:86:41:67:6A:E3:FB:D7:E2:B2:63:1A:17:F1:6C:5E
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0908
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/AQr6JnWGQWdq4_vX4rJjGhfxbF4.roa
Signing time: Thu 15 Jun 2023 04:54:06 +0000
ROA not before: Thu 15 Jun 2023 04:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 04:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=010AFA26758641676AE3FBD7E2B2631A17F16C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:8a:2b:25:5f:37:23:14:69:78:65:11:a1:
45:78:d6:e9:62:c7:f3:d2:af:ac:d1:a8:e7:11:07:
ec:ca:e0:ba:ef:68:87:d9:b3:c1:6f:87:e3:b0:b8:
60:16:6a:c6:fa:f8:5e:00:c2:b9:65:21:6f:51:98:
e3:54:5a:33:78:c8:88:4b:36:97:ab:fe:b5:b3:38:
dc:97:d5:96:46:9d:8d:ed:61:a4:5a:c9:c8:a2:09:
88:38:a0:9d:c7:8a:85:49:94:5a:90:b6:55:36:78:
9c:12:b4:72:47:95:17:5a:f8:0f:ef:f4:43:7b:21:
5a:cc:87:9b:39:2a:d5:5f:97:80:af:a9:cc:2c:96:
ca:2f:da:19:0e:6d:11:08:d7:44:d0:68:0d:fe:5d:
60:47:40:7a:37:fd:47:43:40:8b:d9:0d:99:d8:9a:
e4:e0:8b:ca:49:20:f1:fc:98:2a:3a:25:b6:80:95:
b2:93:05:37:2e:06:5a:9d:ab:6c:64:a7:56:63:12:
99:55:73:f1:b7:5f:3a:94:d2:23:2c:5e:74:ed:38:
46:a0:ed:a6:c7:dd:cc:08:98:f1:d5:6e:cb:53:6a:
87:ba:f7:12:8a:69:de:27:89:f8:9b:4a:58:e2:7e:
3f:b6:9b:27:27:37:31:9a:ff:76:91:13:fa:cb:39:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:FA:26:75:86:41:67:6A:E3:FB:D7:E2:B2:63:1A:17:F1:6C:5E
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/AQr6JnWGQWdq4_vX4rJjGhfxbF4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:b2:e4:40:92:84:bd:e4:38:bf:11:40:18:04:c1:2f:40:68:
4d:5e:bf:c8:46:10:50:ba:b8:3a:f5:ab:50:99:bd:73:c3:55:
3e:fd:91:7e:a1:2f:82:78:1d:c6:88:d3:22:3d:41:96:91:76:
09:d6:ef:8b:47:73:1d:f6:2d:7c:a0:98:55:04:87:1e:f8:6e:
e9:67:b5:28:a3:39:9b:f9:54:62:7a:e8:4c:91:61:00:16:5e:
96:92:0e:e5:36:5e:be:55:a0:a9:56:2e:ad:96:95:f4:cc:0f:
21:21:3b:82:53:da:0c:12:9a:ca:db:a6:2f:63:79:2e:e5:6b:
47:1a:fd:de:d4:19:3c:59:6e:f0:7f:48:52:26:a9:71:93:b3:
71:4b:38:48:4c:93:a8:ba:50:9b:9e:cb:ee:16:56:f6:35:dd:
01:5d:4a:d4:b7:f4:a2:fa:80:9e:95:7a:8a:62:6f:7b:12:35:
d5:c3:6d:6e:79:45:7b:52:eb:b9:5b:79:64:5a:2f:14:d3:0a:
e6:9b:4c:3e:ff:66:82:6a:ee:89:89:e9:17:d2:df:87:d4:ea:
95:f6:d7:37:c2:b2:56:d9:63:43:6f:df:57:2d:97:0d:d9:aa:
36:c1:49:f9:d9:94:3a:96:00:a3:4b:a0:3b:a9:4d:ae:40:b2:
db:24:6b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org