Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/EKCGN9pDMa2OycsPrgU6QfXMsuk.roa
File: EKCGN9pDMa2OycsPrgU6QfXMsuk.roa (raw, json)
Hash identifier: EDM2meWcDY5LhXgI4513FHvMjdBv8J+XU1ZaOJhOnPQ=
Subject key identifier: 10:A0:86:37:DA:43:31:AD:8E:C9:CB:0F:AE:05:3A:41:F5:CC:B2:E9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0888
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/EKCGN9pDMa2OycsPrgU6QfXMsuk.roa
Signing time: Wed 14 Jun 2023 12:54:04 +0000
ROA not before: Wed 14 Jun 2023 12:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2184 (0x888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 12:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=10A08637DA4331AD8EC9CB0FAE053A41F5CCB2E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:f5:39:0c:b1:03:d7:d5:a0:b6:12:9a:71:
68:11:b4:8f:34:7e:41:05:e7:58:ad:44:88:cb:bf:
20:9d:8c:50:e5:40:07:0a:13:2b:a5:d3:61:6a:81:
9f:13:0c:30:82:28:fc:ef:1d:0b:9b:06:36:6f:36:
11:d4:ab:26:f8:81:6c:d8:d1:ec:cf:75:72:4e:03:
f0:fb:fe:13:91:7f:07:a6:cc:72:50:e7:b5:45:6f:
9e:9e:68:31:11:e3:cb:77:9f:71:e0:e6:87:0b:15:
1e:70:f4:e5:22:48:a5:e1:5e:eb:c8:38:19:c4:2f:
f7:02:53:a7:94:cb:05:7f:65:9b:04:94:4c:f8:08:
a1:f3:9c:e3:1a:8e:43:ae:de:ad:ab:2b:a3:26:88:
ef:3b:c8:b9:7d:d8:04:e6:20:90:e5:23:04:ce:0f:
a2:7c:4f:13:7b:ce:7a:5f:75:e7:77:9f:35:ad:c4:
de:40:b6:3a:54:d7:e9:6d:37:43:78:6d:c9:78:5a:
c0:66:22:e4:45:e8:1a:c7:92:a8:12:9c:b9:37:6e:
9d:7a:ee:b1:ed:97:0a:4b:52:46:92:95:13:f9:b3:
bc:10:b7:29:a7:64:4e:fe:ad:65:41:71:de:fa:ac:
2e:6f:23:1e:67:41:3e:54:0e:95:b2:8f:b0:76:1f:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:86:37:DA:43:31:AD:8E:C9:CB:0F:AE:05:3A:41:F5:CC:B2:E9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/EKCGN9pDMa2OycsPrgU6QfXMsuk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:57:ec:7d:aa:80:c0:db:dd:de:f5:75:5e:bb:04:af:5a:47:
ec:3e:c7:78:e4:c8:38:4f:c5:20:aa:db:cc:f4:37:66:0c:f9:
95:d1:aa:76:3e:97:a1:f3:d3:c5:a0:cd:8c:b1:d5:cb:6d:4a:
ff:32:7a:6d:d4:3b:02:ec:20:23:64:86:54:36:3a:55:b2:97:
9b:e6:0f:3c:08:a5:80:1c:82:73:6e:cd:88:0e:fe:18:78:c2:
73:64:c0:04:ef:c7:4e:3d:f8:cd:23:5e:bf:28:8e:7d:7c:40:
b4:40:54:6a:5e:86:b3:b9:58:97:2e:b2:7d:e4:22:af:87:71:
51:18:6d:fc:8b:93:b6:9e:79:9f:a1:4b:f8:8a:ec:a9:a2:3d:
a9:23:f8:be:92:a8:37:bd:71:ba:d6:c5:a2:d0:b8:df:35:14:
d4:e2:c5:a4:68:91:71:4d:81:f2:e3:74:16:df:17:25:2f:1d:
8e:ec:31:f4:49:77:a1:aa:13:07:15:93:2e:bd:cd:64:e8:fa:
a9:73:21:26:a4:91:a2:05:b0:66:67:84:a2:23:a8:2d:bc:23:
35:6a:8a:6d:58:a7:c2:63:46:c9:9f:01:16:a9:d1:52:bb:e2:
3e:0f:cd:d5:61:87:0b:13:44:7b:f5:17:86:34:52:28:51:5e:
b4:7b:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org