Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/B4Zqvy_-bgUYimsuWWDg8-9uB-M.roa
File: B4Zqvy_-bgUYimsuWWDg8-9uB-M.roa (raw, json)
Hash identifier: Uc0+O3I57Aul6XdXA+8Rl9FX8GLq4bhkBNnbGJhkj64=
Subject key identifier: 07:86:6A:BF:2F:FE:6E:05:18:8A:6B:2E:59:60:E0:F3:EF:6E:07:E3
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08EC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B4Zqvy_-bgUYimsuWWDg8-9uB-M.roa
Signing time: Thu 15 Jun 2023 01:24:15 +0000
ROA not before: Thu 15 Jun 2023 01:24:15 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 01:24:15 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=07866ABF2FFE6E05188A6B2E5960E0F3EF6E07E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:1f:66:ba:58:76:c5:ba:db:a1:ab:52:5a:
35:2b:43:e8:41:d8:44:d7:06:ee:86:eb:99:f7:ad:
8f:38:95:0e:f8:9a:99:83:20:5f:f9:27:8a:b6:8f:
18:24:d1:b0:98:d1:97:94:e9:f3:2a:34:49:c0:3b:
d0:57:29:ab:dc:dc:61:97:94:9c:69:7b:51:07:e4:
03:3a:83:72:44:c7:68:37:ae:a4:ac:62:8b:bf:19:
8b:1c:23:a2:58:99:84:98:5b:e3:28:8e:d3:b7:42:
7e:3c:90:52:e6:52:93:a0:5a:bd:dd:fd:05:e3:81:
2b:e3:10:62:39:ac:e4:aa:d1:1f:3d:9e:af:96:a8:
0b:6f:96:ce:28:57:d5:53:fa:e9:73:6c:e6:1c:82:
e5:ff:d4:59:f9:8d:a8:01:33:7d:bc:b8:25:af:1c:
19:de:35:a7:92:65:ef:e7:f6:cd:a7:98:01:76:00:
65:c5:49:ed:23:b6:b3:3e:b7:cf:4a:d2:48:87:ad:
50:2c:24:0a:b3:18:f6:cd:e9:c9:b3:5f:d7:ef:be:
60:1e:f3:91:ff:a3:a1:df:da:7d:db:8c:78:13:87:
64:84:fe:f2:b5:61:7f:d6:7d:1b:31:a4:80:8e:19:
a3:24:f7:f8:99:da:1d:23:73:54:f1:e5:3c:8a:97:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:6A:BF:2F:FE:6E:05:18:8A:6B:2E:59:60:E0:F3:EF:6E:07:E3
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B4Zqvy_-bgUYimsuWWDg8-9uB-M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:83:e6:c2:da:0d:10:40:03:d0:24:43:18:96:ef:32:61:a5:
bd:b4:df:c3:fb:68:2e:e8:82:78:61:05:a0:40:16:90:1b:72:
35:44:85:2c:1a:e3:1d:05:bd:9d:b4:70:df:c9:ff:ef:56:e3:
e5:b1:08:e9:8b:23:0f:0e:6d:56:ef:5e:58:6c:a6:56:90:14:
de:64:bc:68:9f:fe:15:66:90:c8:9c:27:97:0b:f4:e9:1e:7e:
c2:27:66:ff:33:60:b1:a5:b7:6c:78:08:a7:96:d2:dd:4d:eb:
10:7e:62:52:a2:02:f5:be:e0:26:42:e7:69:54:82:5f:5a:d4:
73:be:2e:76:9b:56:a7:58:f3:c6:24:b1:11:db:70:3b:b6:88:
05:fc:f5:3f:9f:70:f7:bf:09:23:88:cc:ee:7c:08:4e:45:4f:
fa:70:6c:83:87:6b:77:af:bc:0a:1e:bd:92:ab:b2:cd:f4:cb:
39:27:c5:1a:43:83:d6:4f:ad:ec:92:09:5c:59:5a:58:eb:54:
5b:3a:27:9b:10:f2:8f:05:86:3e:c6:a6:ed:0b:87:d0:41:c1:
fc:8a:1e:5d:31:08:d7:6f:e1:6d:de:bd:e8:fd:be:60:05:72:
e8:2e:85:06:c8:c6:6d:fc:28:aa:b9:ed:80:80:e8:9f:64:ca:
c3:5d:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org