Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/BejE4XHVFIBDTIlKNTWBiQZE_lw.roa
File: BejE4XHVFIBDTIlKNTWBiQZE_lw.roa (raw, json)
Hash identifier: Ka7EfionSxTNrEMPkrPmyBA+M4cKnJbySvC8KEbsCng=
Subject key identifier: 05:E8:C4:E1:71:D5:14:80:43:4C:89:4A:35:35:81:89:06:44:FE:5C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07B4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/BejE4XHVFIBDTIlKNTWBiQZE_lw.roa
Signing time: Tue 13 Jun 2023 10:24:00 +0000
ROA not before: Tue 13 Jun 2023 10:24:00 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1972 (0x7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 10:24:00 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=05E8C4E171D51480434C894A353581890644FE5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:c2:f2:d6:53:76:c2:d3:47:ea:d3:df:38:
f4:d6:ee:a0:9e:a0:11:af:27:80:cb:c3:24:95:8f:
a0:3d:bc:7f:2a:75:ef:0a:60:02:62:d3:b9:12:c0:
a7:e5:82:47:04:72:6a:a2:fe:0c:86:01:8e:aa:61:
6a:be:14:72:d2:95:c9:35:56:36:69:0a:f3:c8:4c:
0f:4a:3f:07:0e:c4:9f:d5:68:e4:f6:3f:64:1d:98:
52:1c:7d:97:b6:d2:dd:91:92:aa:c8:14:5f:c2:61:
5e:74:7e:94:61:08:39:f7:92:85:35:96:d7:9a:84:
5e:80:78:d0:48:0d:12:31:fc:cd:a0:bb:06:12:3a:
81:b1:e9:2e:b6:ca:13:a0:b7:ba:ad:cc:7a:43:21:
55:a2:65:bf:94:bb:2a:96:16:e0:b8:af:3f:86:c1:
f1:7d:14:72:7a:80:ff:37:71:0e:13:99:fc:91:2a:
cc:7f:8a:4a:48:2b:9f:2b:66:08:c0:6a:4f:3b:43:
cb:7a:eb:c8:77:c0:f3:2c:ed:4f:fe:e8:89:02:f0:
e7:0a:1f:4f:4d:26:9a:3c:22:09:c9:91:1f:98:79:
39:f2:29:e8:17:d1:52:6e:fc:9c:ff:79:1f:86:f0:
f5:a1:ba:ea:0c:dc:6f:e4:0a:8c:8d:db:b9:88:40:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E8:C4:E1:71:D5:14:80:43:4C:89:4A:35:35:81:89:06:44:FE:5C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/BejE4XHVFIBDTIlKNTWBiQZE_lw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
20:71:72:a4:b9:5b:f9:fd:79:93:9d:ef:b6:bf:8f:f5:20:b4:
71:d1:6c:c9:1a:50:0f:71:62:9c:7f:41:d0:b1:44:09:b3:ae:
7d:2b:29:63:77:0e:d9:9f:6a:a3:be:e5:58:15:1b:00:c8:03:
1f:13:6f:68:f5:1b:87:9b:f8:b0:eb:6a:f1:30:bc:44:2d:c5:
14:a8:23:f8:cc:22:09:67:71:d8:c2:6e:b7:09:be:45:06:e4:
7e:06:10:36:cd:fb:9c:6b:0d:62:7f:95:4d:a0:e5:c4:db:4f:
ab:a7:74:f0:30:d3:2e:81:12:15:b1:c2:d3:69:f1:49:11:26:
d1:9a:f7:06:db:54:0b:b6:10:d5:8d:50:eb:b4:62:8d:2f:66:
fb:b5:87:8e:04:e1:68:eb:9b:ce:ee:5f:52:2a:68:41:5c:97:
d7:14:9a:a0:8f:70:57:c2:e4:53:26:f5:e0:63:b1:f9:dc:6e:
7d:76:fe:56:e5:fd:14:4a:07:7e:91:1c:2e:b2:b6:f9:dc:3e:
a5:37:8d:55:88:cf:80:7f:99:2a:52:68:54:58:d6:ee:83:08:
81:13:f2:08:22:9c:05:0e:3e:63:94:53:2b:f4:19:de:03:03:
aa:e6:54:32:ec:82:96:94:c2:d8:b3:d0:91:7e:4f:7c:ae:65:
40:b2:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org