Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/CqyQpTeRdEwHlefPT5AV61G7UGc.roa
File: CqyQpTeRdEwHlefPT5AV61G7UGc.roa (raw, json)
Hash identifier: 7PPQKBojPxpHf6cBFXmhFsOXs7Cp12s8g2YE2nkZYk8=
Subject key identifier: 0A:AC:90:A5:37:91:74:4C:07:95:E7:CF:4F:90:15:EB:51:BB:50:67
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07F4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CqyQpTeRdEwHlefPT5AV61G7UGc.roa
Signing time: Tue 13 Jun 2023 18:24:03 +0000
ROA not before: Tue 13 Jun 2023 18:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036 (0x7f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 18:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0AAC90A53791744C0795E7CF4F9015EB51BB5067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:7d:93:75:31:bd:38:34:7e:ef:d4:b7:4b:
d7:13:c7:e8:8b:7d:fe:4c:43:3b:47:f5:4a:79:b4:
36:db:af:af:41:f4:32:42:d0:7b:47:0d:3d:24:7b:
26:d0:ec:a1:4c:50:fb:cc:d0:c5:2f:62:c6:91:96:
90:62:bf:11:74:5f:62:b0:b9:d5:d5:b8:05:3c:ea:
a7:a7:47:1f:15:05:9e:99:54:73:5d:79:96:68:ad:
bf:b2:4a:89:79:b3:29:c4:32:f1:08:7e:d1:ec:3b:
8e:4f:1b:36:a3:80:ab:93:f1:1c:bc:b5:6c:9d:d9:
4e:56:66:26:c6:ea:5c:c4:64:bb:4d:bd:27:bd:96:
12:c2:8a:f6:2e:f1:22:4f:8a:f3:1e:ff:b2:8c:5d:
3a:25:3f:67:ad:a7:7b:6a:22:f7:24:78:b8:7f:49:
d1:aa:50:e3:d5:dd:89:76:3d:95:c7:fb:9a:85:92:
b8:6a:67:57:42:d8:d0:6a:3a:2a:81:ae:da:1c:9d:
2d:eb:66:02:ef:ca:c1:05:3c:c7:a7:96:3a:cd:e1:
c3:3a:d6:22:7d:72:29:5b:0c:e8:13:fa:c0:b4:01:
ee:8c:6f:d7:fb:bc:e0:42:c1:79:12:5a:a9:e1:14:
ce:ea:62:49:f7:a6:8a:d2:d2:b3:76:d7:d5:0c:5d:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AC:90:A5:37:91:74:4C:07:95:E7:CF:4F:90:15:EB:51:BB:50:67
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CqyQpTeRdEwHlefPT5AV61G7UGc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
42:5c:82:b5:0b:71:e7:f0:73:b2:5d:fc:e1:7c:97:27:29:7c:
ca:ec:30:cc:64:ce:5c:cd:ad:67:00:43:12:60:f2:4a:46:3b:
7b:3b:2e:28:d4:54:27:d9:5c:b0:f9:0a:71:3a:ac:a3:c5:99:
f1:17:00:d1:a6:65:34:33:81:62:62:c6:b5:8c:10:07:0b:63:
8e:c6:c0:6e:de:76:cd:86:aa:e1:41:8d:b0:a8:15:3b:8a:7c:
69:0d:19:62:20:c6:01:b3:85:5a:94:43:8a:5f:e3:78:66:55:
9d:c5:e2:31:b4:79:cd:85:73:df:6c:a3:e5:89:d5:9f:44:5a:
93:c4:52:c2:25:8d:a1:57:96:53:ee:ea:e9:c6:80:14:4d:d3:
9a:c2:3e:a6:7b:69:17:ad:25:48:f3:73:6f:85:23:c4:d2:db:
49:5f:71:12:f3:d9:44:3a:6f:fe:97:ed:07:69:34:5d:6f:3a:
6b:0a:c0:08:90:8d:3e:2d:99:a0:6d:99:1c:cc:e2:0c:72:95:
d7:95:61:3f:b7:7f:ac:be:aa:a8:88:f5:3b:a3:87:97:1e:d6:
28:21:66:12:f0:0a:30:ad:df:25:70:1d:d5:50:b0:b2:b4:7c:
14:13:c3:f6:65:54:b0:e4:40:9b:a9:79:ea:a0:73:af:f1:b1:
4a:5f:90:65
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
ODI0MDNaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDBBQUM5MEE1Mzc5MTc0
NEMwNzk1RTdDRjRGOTAxNUVCNTFCQjUwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw4X2TdTG9ODR+79S3S9cTx+iLff5MQztH9Up5tDbbr69B9DJC
0HtHDT0keybQ7KFMUPvM0MUvYsaRlpBivxF0X2KwudXVuAU86qenRx8VBZ6ZVHNd
eZZorb+ySol5synEMvEIftHsO45PGzajgKuT8Ry8tWyd2U5WZibG6lzEZLtNvSe9
lhLCivYu8SJPivMe/7KMXTolP2etp3tqIvckeLh/SdGqUOPV3Yl2PZXH+5qFkrhq
Z1dC2NBqOiqBrtocnS3rZgLvysEFPMenljrN4cM61iJ9cilbDOgT+sC0Ae6Mb9f7
vOBCwXkSWqnhFM7qYkn3porS0rN219UMXfOVAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUCqyQpTeRdEwHlefPT5AV61G7UGcwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvQ3F5UXBUZVJkRXdI
bGVmUFQ1QVY2MUc3VUdjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAQlyCtQtx5/Bzsl384XyXJyl8yuww
zGTOXM2tZwBDEmDySkY7ezsuKNRUJ9lcsPkKcTqso8WZ8RcA0aZlNDOBYmLGtYwQ
BwtjjsbAbt52zYaq4UGNsKgVO4p8aQ0ZYiDGAbOFWpRDil/jeGZVncXiMbR5zYVz
32yj5YnVn0Rak8RSwiWNoVeWU+7q6caAFE3TmsI+pntpF60lSPNzb4UjxNLbSV9x
EvPZRDpv/pftB2k0XW86awrACJCNPi2ZoG2ZHMziDHKV15VhP7d/rL6qqIj1O6OH
lx7WKCFmEvAKMK3fJXAd1VCwsrR8FBPD9mVUsORAm6l56qBzr/GxSl+QZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org