Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/E3jeiHhGNQSj6eflg-gn6H_Fzck.roa
File: E3jeiHhGNQSj6eflg-gn6H_Fzck.roa (raw, json)
Hash identifier: 1isBRrjOl2B8pM/RUdcgYe9VwA1umH0NDwCYzolfkrc=
Subject key identifier: 13:78:DE:88:78:46:35:04:A3:E9:E7:E5:83:E8:27:E8:7F:C5:CD:C9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 086C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/E3jeiHhGNQSj6eflg-gn6H_Fzck.roa
Signing time: Wed 14 Jun 2023 09:24:03 +0000
ROA not before: Wed 14 Jun 2023 09:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 09:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1378DE8878463504A3E9E7E583E827E87FC5CDC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6b:79:ac:34:6c:d0:4d:56:1f:bb:4a:92:43:
a2:53:d9:c8:07:bf:e6:af:e9:96:66:74:60:26:03:
4d:f8:63:9c:58:45:d1:d6:44:13:1d:11:1d:d5:79:
72:6b:d4:14:fd:87:c5:71:2c:f3:f6:bd:d6:b7:c7:
3c:27:4a:82:29:fb:27:28:e4:10:d5:ac:8a:fb:0d:
43:75:5b:76:22:ab:47:22:29:32:1a:6d:7d:e9:f6:
bb:d4:05:1d:2d:46:0e:91:fa:46:c5:bf:ac:7d:21:
8f:19:31:c0:74:00:40:d6:52:08:9e:1d:df:6c:a1:
10:1a:4e:b2:91:c7:68:12:72:52:01:36:a0:30:1e:
bc:6c:d5:9f:0d:0f:84:33:3e:1d:e2:a8:68:2b:ff:
c6:3c:20:8c:27:16:a3:96:f2:66:30:57:7a:a8:ad:
38:88:c5:59:48:c5:b5:02:1b:ad:6f:29:4a:e5:d2:
f0:ea:6b:3a:ca:cf:f2:4d:8e:e8:09:39:0d:86:16:
69:d8:a3:80:f1:6f:0b:aa:02:e1:15:54:8a:eb:b6:
92:da:26:30:71:36:f7:2a:19:05:d6:40:0a:10:b5:
15:7b:73:b4:bb:ee:10:e7:e5:76:0e:e4:16:02:40:
28:1a:e2:d6:ad:8e:de:ea:e5:28:77:56:8a:80:fe:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:78:DE:88:78:46:35:04:A3:E9:E7:E5:83:E8:27:E8:7F:C5:CD:C9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/E3jeiHhGNQSj6eflg-gn6H_Fzck.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
77:04:60:6d:34:ba:9c:5a:33:44:b2:eb:49:3a:bc:31:c1:bc:
51:cc:58:8d:a2:81:65:f8:91:48:1f:d3:d1:7c:04:ae:48:8f:
c9:53:c1:ef:a1:8e:24:c8:58:2d:55:0a:4b:25:0e:57:e3:71:
d3:72:71:f4:3c:ee:8a:e5:f2:a7:3b:c8:47:99:2e:cd:d8:17:
0b:44:15:54:a3:dd:c0:2d:46:35:4e:de:c0:4f:96:66:7d:f9:
c9:1f:f4:cd:49:38:c0:44:e3:22:e1:39:b6:87:57:38:cf:81:
2b:9d:f2:71:ae:8b:65:c7:e1:5f:3a:1c:ff:07:db:0c:76:59:
b1:5c:bd:81:46:51:a3:57:0f:65:8d:74:66:e8:b0:70:cb:fb:
34:06:ca:45:ee:70:ec:29:f3:86:06:2a:5a:08:87:56:21:06:
b9:95:72:87:79:54:f8:b2:19:84:5d:0b:b9:55:5f:70:99:a6:
c8:90:7a:fc:1e:32:ac:1b:cd:6f:8a:e7:fb:a1:8b:96:d5:49:
ca:f8:4e:be:73:e9:49:7a:df:dc:30:fb:5a:79:b6:1e:cf:7a:
88:90:00:29:24:90:f7:ed:52:dc:33:de:4c:dc:71:7c:3c:52:
81:20:25:83:d1:a3:43:8d:d6:be:50:27:a7:06:e1:24:de:2a:
0e:8a:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org