Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/CahsLiRxK3SpSN4IdzDioJzn_rw.roa
File: CahsLiRxK3SpSN4IdzDioJzn_rw.roa (raw, json)
Hash identifier: SVIQ7OKxFa/St+RqdUJxukJPG9grqtcMPnisAAMufeg=
Subject key identifier: 09:A8:6C:2E:24:71:2B:74:A9:48:DE:08:77:30:E2:A0:9C:E7:FE:BC
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07C8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CahsLiRxK3SpSN4IdzDioJzn_rw.roa
Signing time: Tue 13 Jun 2023 12:54:01 +0000
ROA not before: Tue 13 Jun 2023 12:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1992 (0x7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 12:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=09A86C2E24712B74A948DE087730E2A09CE7FEBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:1d:8e:92:ee:a6:83:1b:25:af:0b:f9:fc:
e7:1c:22:eb:58:da:05:f5:2b:b6:8b:08:ee:93:44:
cb:b4:fd:0d:90:78:80:c6:ea:37:fc:b8:6a:a7:ad:
22:66:4a:d8:0e:ef:96:07:5f:e2:c1:c5:e8:65:64:
5d:5b:9f:53:31:37:7f:bd:80:b5:7a:55:75:df:0f:
0c:00:28:2f:62:f6:e9:06:9f:91:4b:d4:a6:c8:a3:
09:d9:bc:39:09:2d:c7:81:04:cb:0b:4b:2e:30:82:
6e:6e:c4:0b:5a:f4:74:0c:c1:51:77:de:c8:ae:8f:
ac:df:14:31:60:a8:56:c2:f2:35:d4:b0:57:af:17:
00:26:79:22:74:09:8c:16:1b:78:bb:5a:c5:95:1a:
5c:dc:43:73:46:fc:18:42:60:c7:3f:33:9c:85:c2:
18:e9:26:d3:82:0f:9d:c7:ca:72:70:4d:d8:0b:da:
90:8f:35:4c:e9:4e:b1:0e:0f:f9:3e:3a:0a:c7:f3:
70:2d:78:95:11:8e:cd:aa:cb:2d:00:39:83:09:a9:
10:44:90:ba:fa:57:dc:34:92:79:fb:d0:31:42:78:
32:07:8d:50:30:ba:27:af:f5:80:cc:30:97:9c:f7:
13:4a:db:7a:6d:41:aa:7c:b3:9a:2c:bc:fd:93:17:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:6C:2E:24:71:2B:74:A9:48:DE:08:77:30:E2:A0:9C:E7:FE:BC
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CahsLiRxK3SpSN4IdzDioJzn_rw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
02:48:9b:3a:38:cd:e5:ca:59:26:da:41:5e:0a:64:bb:ab:ab:
c8:d7:33:32:d7:53:88:3d:2b:db:54:7c:98:60:9d:d1:10:c7:
33:45:f7:51:eb:06:26:c9:79:6c:42:74:ec:03:57:1a:6d:7f:
60:cd:8e:94:89:60:e4:34:33:26:88:4a:70:0e:af:16:48:59:
1c:25:c1:ac:e0:c9:b6:4a:ed:f1:14:03:c4:a2:b2:b3:08:97:
69:ea:14:e4:42:5b:ae:02:e8:6f:6b:02:21:db:d4:af:12:ad:
6f:e2:15:9d:ac:38:20:6c:33:73:16:1a:cf:5c:fe:a0:b7:a3:
f6:2b:31:26:47:1a:ee:51:bc:ef:53:26:2b:3a:63:e7:1a:83:
d2:55:e6:de:a4:68:04:77:bc:12:01:85:90:49:4f:fd:51:f2:
8f:d2:36:c7:25:f5:29:42:06:33:68:19:6d:5b:ac:d5:01:cc:
49:92:83:fd:b5:53:62:a4:c1:24:47:a1:7c:38:f1:bc:64:2c:
e4:14:a5:56:e7:fa:f3:d0:73:21:41:68:a2:fa:96:a3:7a:6d:
01:2c:e8:2f:f5:35:28:6d:a4:90:2b:17:cc:84:04:b1:92:2f:
84:bd:96:fa:70:42:57:29:5e:9e:0f:30:a5:5a:e7:9d:c7:74:
62:f4:d3:87
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
MjU0MDFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDA5QTg2QzJFMjQ3MTJC
NzRBOTQ4REUwODc3MzBFMkEwOUNFN0ZFQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO1B2Oku6mgxslrwv5/OccIutY2gX1K7aLCO6TRMu0/Q2QeIDG
6jf8uGqnrSJmStgO75YHX+LBxehlZF1bn1MxN3+9gLV6VXXfDwwAKC9i9ukGn5FL
1KbIownZvDkJLceBBMsLSy4wgm5uxAta9HQMwVF33siuj6zfFDFgqFbC8jXUsFev
FwAmeSJ0CYwWG3i7WsWVGlzcQ3NG/BhCYMc/M5yFwhjpJtOCD53HynJwTdgL2pCP
NUzpTrEOD/k+OgrH83AteJURjs2qyy0AOYMJqRBEkLr6V9w0knn70DFCeDIHjVAw
uiev9YDMMJec9xNK23ptQap8s5osvP2TF2zTAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUCahsLiRxK3SpSN4IdzDioJzn/rwwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvQ2Foc0xpUnhLM1Nw
U040SWR6RGlvSnpuX3J3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAAkibOjjN5cpZJtpBXgpku6uryNcz
MtdTiD0r21R8mGCd0RDHM0X3UesGJsl5bEJ07ANXGm1/YM2OlIlg5DQzJohKcA6v
FkhZHCXBrODJtkrt8RQDxKKyswiXaeoU5EJbrgLob2sCIdvUrxKtb+IVnaw4IGwz
cxYaz1z+oLej9isxJkca7lG871MmKzpj5xqD0lXm3qRoBHe8EgGFkElP/VHyj9I2
xyX1KUIGM2gZbVus1QHMSZKD/bVTYqTBJEehfDjxvGQs5BSlVuf689BzIUFoovqW
o3ptASzoL/U1KG2kkCsXzIQEsZIvhL2W+nBCVyleng8wpVrnncd0YvTThw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org