Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/CDU18PCVPI7d8F76q_YMe4KKgRw.roa
File: CDU18PCVPI7d8F76q_YMe4KKgRw.roa (raw, json)
Hash identifier: OCnz30VCnrCCxYcWS5X0gDYEnpoiSpCexqPfaqzyE3w=
Subject key identifier: 08:35:35:F0:F0:95:3C:8E:DD:F0:5E:FA:AB:F6:0C:7B:82:8A:81:1C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0868
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CDU18PCVPI7d8F76q_YMe4KKgRw.roa
Signing time: Wed 14 Jun 2023 08:54:06 +0000
ROA not before: Wed 14 Jun 2023 08:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2152 (0x868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 08:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=083535F0F0953C8EDDF05EFAABF60C7B828A811C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:0a:a7:ce:60:b2:da:ae:ec:64:3f:33:e8:
a8:5c:10:1d:af:f7:6c:f6:19:db:c1:b0:47:7f:8c:
75:40:39:75:e4:44:de:f8:f4:5d:2c:de:2e:d0:11:
af:ac:d2:22:8b:c9:5d:19:11:25:8a:b7:c1:af:97:
92:86:27:ab:97:08:4f:af:a2:b3:2e:86:56:bc:80:
c7:52:ba:dd:28:e6:c6:d5:a9:ca:bd:6f:a1:79:18:
c7:d7:b8:79:2a:03:c3:95:c0:b7:50:bd:f7:38:77:
4c:50:d3:25:39:94:7a:de:b5:7a:fd:84:3e:1e:2d:
5b:07:79:34:db:f4:3c:92:2b:6d:3d:0d:ad:80:e3:
5a:c9:05:53:32:3d:bd:42:ef:da:42:a8:07:de:6f:
e9:b9:18:fd:de:a4:6e:c1:97:af:b4:75:b2:c4:b2:
c4:e0:f5:f7:ba:74:80:29:f1:86:10:f5:62:1b:7d:
a2:41:5d:62:e5:7a:db:e1:5b:82:2c:cd:0d:09:25:
c2:e8:9a:51:0e:6e:6e:1b:01:72:99:7a:f3:e3:fb:
80:59:a8:12:8d:f3:25:3b:79:36:5b:70:d7:43:ab:
8c:19:d8:49:aa:40:2f:94:2a:23:a4:df:15:b4:25:
66:ac:c9:b4:a6:a6:7e:5b:73:fd:73:53:61:cc:34:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:35:F0:F0:95:3C:8E:DD:F0:5E:FA:AB:F6:0C:7B:82:8A:81:1C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CDU18PCVPI7d8F76q_YMe4KKgRw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
47:25:c8:d7:2c:5f:66:a4:f7:cd:17:85:b4:8f:c6:9f:5c:c5:
30:9e:8d:c5:a1:29:16:b2:32:f4:a4:4c:a6:a3:70:cf:20:ae:
15:b9:b2:7b:98:51:b2:ec:58:4c:d4:c3:6f:0e:85:47:79:a3:
5f:ea:d3:bd:fe:7a:4e:31:34:4a:1c:3a:1b:9b:ef:3f:a3:6f:
d7:4e:9c:59:1e:cc:56:bd:51:b1:cb:4a:f3:6b:aa:82:df:b6:
a6:0e:76:30:e6:a5:4a:c8:ff:d6:b8:05:fe:4d:98:c6:b9:34:
8b:37:d1:7f:cb:ac:8b:7b:89:44:d5:e1:fa:64:98:94:7d:4e:
cf:01:23:4b:b0:d7:18:1f:3c:83:7c:64:59:cd:cd:c2:0b:08:
13:32:b9:54:a3:2c:61:db:8e:23:87:e4:30:8d:11:bc:b5:b6:
d6:14:fe:ff:07:9b:70:77:3a:57:bb:56:a0:27:39:75:12:41:
86:c8:79:ed:57:18:2b:aa:92:9d:3d:ba:56:ba:77:b2:f4:e0:
06:e0:a4:42:06:15:b9:e1:74:16:50:45:0b:58:46:01:f8:28:
1a:7f:49:e9:46:2b:28:d2:4d:26:c3:33:40:e8:09:0a:d9:8c:
7e:8b:05:47:1e:11:c3:ba:90:e9:f1:3a:db:6d:7d:5b:8a:6a:
03:70:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org