Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/CO9r7pwjyxbeIk-9yUV8WG9D0JY.roa
File: CO9r7pwjyxbeIk-9yUV8WG9D0JY.roa (raw, json)
Hash identifier: O7lDcyAMe6DdaNoIuNrVX4HTXZTYu/fen1sSkDeh5BA=
Subject key identifier: 08:EF:6B:EE:9C:23:CB:16:DE:22:4F:BD:C9:45:7C:58:6F:43:D0:96
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08D8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CO9r7pwjyxbeIk-9yUV8WG9D0JY.roa
Signing time: Wed 14 Jun 2023 22:54:07 +0000
ROA not before: Wed 14 Jun 2023 22:54:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 22:54:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=08EF6BEE9C23CB16DE224FBDC9457C586F43D096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:d8:01:d1:7d:f8:ba:a9:a3:3d:10:9e:31:
f4:85:45:f2:3e:ca:b3:76:d9:f4:10:71:35:25:13:
0c:6a:db:ed:fd:56:26:c6:72:11:1a:1e:b0:e5:61:
5e:d4:e8:f0:5b:b9:3e:fe:4c:5e:9f:e3:bd:03:8f:
41:aa:14:3b:71:20:49:af:6e:70:22:e1:44:18:fd:
d3:34:36:c4:69:5d:e0:04:4b:d8:21:d2:bf:33:8a:
46:33:c2:7c:73:32:3b:c8:1d:62:62:95:28:ce:22:
11:77:11:81:46:3d:37:62:06:32:d9:07:42:fb:60:
48:9b:9f:e1:c5:78:05:0f:83:d2:dc:6b:d6:ed:a9:
37:e8:b3:d7:0a:e9:c8:d1:40:15:27:27:c5:67:a8:
65:d9:25:2b:6e:f8:14:10:00:99:e7:c2:0b:68:db:
75:02:7f:09:f7:b0:95:6b:e2:c8:43:ba:44:89:0a:
04:1c:60:9e:ff:03:4c:2c:c2:11:d5:df:d9:a8:56:
3c:0d:09:a3:6a:e5:3e:77:48:19:b3:30:bb:a3:db:
0b:84:63:8e:0e:a4:69:c8:a7:b6:be:6c:3d:05:09:
07:fd:b9:4d:a1:6e:50:ea:c4:49:ff:c7:79:30:2a:
d1:42:1e:2c:89:4c:87:71:8e:41:80:69:a7:9f:b1:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EF:6B:EE:9C:23:CB:16:DE:22:4F:BD:C9:45:7C:58:6F:43:D0:96
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CO9r7pwjyxbeIk-9yUV8WG9D0JY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:ba:ad:b4:3c:b1:b4:79:cb:ea:fb:d3:65:b1:dd:33:c5:bf:
13:c9:b7:2c:46:8a:c0:c3:f1:18:c2:1c:f9:ce:f4:13:3f:a8:
4b:66:71:ce:19:cc:ae:2f:5c:34:f0:38:8e:bd:b7:b4:53:e0:
4b:f3:4a:14:b6:7d:c7:15:ab:80:9f:a4:a3:fc:18:0f:6c:1b:
d3:15:35:09:84:de:87:24:5e:d2:0f:a9:6f:72:a9:ef:3d:24:
6b:d0:20:b1:e4:52:a7:e5:7f:e9:a5:09:01:8a:2b:a3:ae:09:
e5:a7:a9:d5:1e:2b:78:21:9c:91:f1:82:3b:72:fb:3f:2f:c2:
c1:46:ba:ff:ac:42:cc:a8:9e:00:02:e5:53:a2:e3:26:05:06:
9a:dd:d6:eb:1f:76:02:4f:30:c9:d0:ae:d3:ee:87:03:19:32:
11:5a:79:66:df:8a:ab:64:2d:b4:12:b9:71:8f:52:b8:09:b8:
0e:64:c5:4c:6b:42:78:21:fb:21:ba:75:75:ac:fb:61:b5:e1:
ec:fb:79:a6:d2:49:27:d1:05:1f:2f:5e:00:fa:d5:e0:21:a6:
ed:f3:0a:70:af:d3:87:26:16:0d:d0:3b:82:e7:e3:e5:b0:54:
2a:5d:d4:f9:ae:2a:e3:96:64:89:75:0a:a3:0a:43:0c:5d:71:
b2:11:6e:43
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MjU0MDdaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDA4RUY2QkVFOUMyM0NC
MTZERTIyNEZCREM5NDU3QzU4NkY0M0QwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCS49gB0X34uqmjPRCeMfSFRfI+yrN22fQQcTUlEwxq2+39VibG
chEaHrDlYV7U6PBbuT7+TF6f470Dj0GqFDtxIEmvbnAi4UQY/dM0NsRpXeAES9gh
0r8zikYzwnxzMjvIHWJilSjOIhF3EYFGPTdiBjLZB0L7YEibn+HFeAUPg9Lca9bt
qTfos9cK6cjRQBUnJ8VnqGXZJStu+BQQAJnnwgto23UCfwn3sJVr4shDukSJCgQc
YJ7/A0wswhHV39moVjwNCaNq5T53SBmzMLuj2wuEY44OpGnIp7a+bD0FCQf9uU2h
blDqxEn/x3kwKtFCHiyJTIdxjkGAaaefsTzRAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUCO9r7pwjyxbeIk+9yUV8WG9D0JYwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvQ085cjdwd2p5eGJl
SWstOXlVVjhXRzlEMEpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAe7qttDyxtHnL6vvTZbHdM8W/E8m3
LEaKwMPxGMIc+c70Ez+oS2ZxzhnMri9cNPA4jr23tFPgS/NKFLZ9xxWrgJ+ko/wY
D2wb0xU1CYTehyRe0g+pb3Kp7z0ka9AgseRSp+V/6aUJAYoro64J5aep1R4reCGc
kfGCO3L7Py/CwUa6/6xCzKieAALlU6LjJgUGmt3W6x92Ak8wydCu0+6HAxkyEVp5
Zt+Kq2QttBK5cY9SuAm4DmTFTGtCeCH7Ibp1daz7YbXh7Pt5ptJJJ9EFHy9eAPrV
4CGm7fMKcK/ThyYWDdA7gufj5bBUKl3U+a4q45ZkiXUKowpDDF1xshFuQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org