Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/E426LtLPRuGrjqMT4-mcE5MqLxY.roa
File: E426LtLPRuGrjqMT4-mcE5MqLxY.roa (raw, json)
Hash identifier: RYWdA7F3iENKZrjpCP6IEuxhospXDt7+i6RV18JtLgw=
Subject key identifier: 13:8D:BA:2E:D2:CF:46:E1:AB:8E:A3:13:E3:E9:9C:13:93:2A:2F:16
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 082C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/E426LtLPRuGrjqMT4-mcE5MqLxY.roa
Signing time: Wed 14 Jun 2023 01:24:02 +0000
ROA not before: Wed 14 Jun 2023 01:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 01:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=138DBA2ED2CF46E1AB8EA313E3E99C13932A2F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:c3:05:fe:4c:22:45:1d:9a:1f:7f:96:b1:
16:10:2a:63:c8:d7:f1:ad:6e:41:86:b4:7e:98:90:
92:1a:9f:0e:84:8d:b1:79:6e:19:81:7d:ca:8d:1d:
dd:5b:a6:46:ec:b3:72:97:b6:76:c4:79:b6:04:d9:
00:fe:2b:3d:fa:80:29:a5:00:28:ad:95:f1:24:4f:
5d:cb:6e:6f:09:7a:d0:7e:25:e9:f3:d2:3b:96:b2:
14:cf:95:69:eb:ed:ab:e0:d9:27:83:6a:b3:61:05:
8c:4c:1d:76:bc:c8:37:fb:ba:a6:ad:c0:c2:6f:df:
d4:93:b0:0f:f6:2e:ca:e4:83:49:1f:9a:ea:20:26:
8e:ab:42:97:21:fb:70:d7:27:ee:3c:d4:c4:2e:be:
6f:71:b1:f8:77:48:bf:c4:d3:51:54:ad:10:c5:c7:
01:8b:24:3c:3d:ec:64:0e:f3:a0:fa:61:20:b1:08:
7e:5b:89:f4:6d:7e:b8:41:c5:65:7f:a7:f4:ea:44:
3b:27:b5:fd:dc:8f:c7:cf:d9:44:c0:51:a0:7c:af:
14:8b:24:71:6b:e9:32:c6:ea:2e:e2:aa:45:e1:f8:
ad:c3:f7:fa:98:69:17:dd:36:9c:50:20:70:2b:af:
af:b7:1e:92:63:4b:0c:f1:42:ff:91:fc:d0:a2:4f:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8D:BA:2E:D2:CF:46:E1:AB:8E:A3:13:E3:E9:9C:13:93:2A:2F:16
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/E426LtLPRuGrjqMT4-mcE5MqLxY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:f1:5f:25:f1:43:3c:3a:b2:96:4f:89:53:77:ff:2e:17:08:
51:58:5f:fb:c6:f2:e2:ef:f3:ee:16:ef:56:dc:18:15:29:97:
42:6f:9e:12:cd:5f:44:89:d3:06:67:3c:05:e8:2c:2b:61:7e:
bf:b3:08:de:dd:09:5f:b6:9a:7e:7d:56:67:73:b1:d8:5f:e2:
e8:95:ac:ee:6e:14:07:22:d9:25:50:49:f8:63:b9:dc:45:d1:
39:33:10:63:e8:50:9d:5c:20:7e:51:91:d4:ff:67:61:34:79:
6b:0a:3d:09:e4:3e:40:44:04:79:74:09:f8:c6:96:d3:76:f6:
d2:9f:87:53:a6:6c:3d:a1:44:d7:1d:6c:bf:a5:67:dd:fb:10:
c6:28:57:8f:3f:49:76:3a:e0:ee:ae:92:82:a7:17:80:1f:6f:
af:78:da:40:58:1e:03:a1:5f:35:e4:d0:2c:1f:73:20:36:a6:
b9:e9:df:eb:3b:46:65:4b:13:6b:69:c1:d2:e9:74:a1:29:3d:
d4:2d:46:93:11:e3:e1:69:02:7c:7d:a2:f2:44:7f:1c:8a:c4:
78:1f:e9:71:9d:75:e6:a8:13:6f:f6:4a:30:e1:89:a1:61:58:
5c:b8:62:28:60:3e:e9:b9:78:36:5a:22:93:b5:ff:c8:bf:b8:
7d:b7:81:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org