Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/G3xHfzp2Rau8hjZZZLmeZZojA3M.roa
File: G3xHfzp2Rau8hjZZZLmeZZojA3M.roa (raw, json)
Hash identifier: 8pijPCeyOjgfqYU5s7a842+BI2I9TCkj9P0K0PLvAVk=
Subject key identifier: 1B:7C:47:7F:3A:76:45:AB:BC:86:36:59:64:B9:9E:65:9A:23:03:73
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07F8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/G3xHfzp2Rau8hjZZZLmeZZojA3M.roa
Signing time: Tue 13 Jun 2023 18:54:02 +0000
ROA not before: Tue 13 Jun 2023 18:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040 (0x7f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 18:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1B7C477F3A7645ABBC86365964B99E659A230373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:c5:db:a7:bf:27:b8:f7:b4:27:8a:11:1c:
8e:2f:82:be:da:00:62:43:bc:44:c3:80:ad:1a:8e:
e3:4d:ff:f2:46:8a:ca:7c:73:32:c4:74:d7:21:e1:
c8:fa:28:6a:4c:22:22:b7:76:07:f5:3f:52:f7:21:
65:c5:7b:48:a9:28:84:8a:63:1f:ba:98:06:f1:a6:
dd:61:b4:fe:01:ce:af:c2:fb:ad:1a:68:de:e0:1c:
f8:89:33:e2:8e:9d:29:32:c3:8f:56:2f:de:48:fe:
14:9b:5d:8b:33:a4:7e:cb:ba:dc:dc:9e:d9:bd:e7:
d1:97:1b:9a:10:aa:9a:b8:27:0d:34:1f:b9:09:43:
ca:6a:8d:ef:87:07:b8:f2:21:2f:24:5b:3b:60:56:
bf:aa:7a:c4:49:4a:fb:f9:aa:7e:98:c0:53:57:20:
c0:a9:2b:23:fa:52:7b:74:f3:dd:4f:41:19:7b:15:
f5:87:37:71:ab:c6:cc:cc:a5:22:d3:8b:84:1e:93:
cc:82:7a:d7:38:d6:03:8a:c1:e8:20:2d:60:18:b1:
a1:0d:e8:0e:29:57:9f:2e:0f:9e:23:55:41:72:cc:
03:36:b6:0f:46:8f:ea:31:cd:f0:53:04:50:5e:02:
12:af:09:c9:85:0c:75:80:86:be:87:6e:ce:3b:ba:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:47:7F:3A:76:45:AB:BC:86:36:59:64:B9:9E:65:9A:23:03:73
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/G3xHfzp2Rau8hjZZZLmeZZojA3M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
31:db:6d:d1:e8:8b:09:6a:8d:e9:43:21:1c:10:70:3a:f2:46:
50:96:8f:77:c2:e5:17:a7:49:1b:a8:b0:84:0e:8c:5f:af:13:
45:d4:20:4c:00:c2:35:f6:ae:ee:70:79:72:26:bd:fb:4c:6a:
74:6f:24:76:b7:ea:cb:f8:61:3f:0a:4f:7a:a3:99:84:f3:13:
ed:a4:29:28:59:32:3c:ee:2f:d8:19:1c:32:cc:93:ef:26:d5:
a0:63:7d:24:9a:1c:7a:30:90:a4:64:a3:47:00:0c:7d:94:13:
b2:1f:22:53:12:fe:e8:f7:3a:7d:cb:0e:e8:e1:df:dd:93:9e:
c1:a6:28:ff:52:c5:0a:d6:fe:83:92:49:8a:8e:82:66:e6:bf:
11:6b:4d:46:ad:c7:a4:0c:58:78:a6:1d:99:93:56:58:5a:2f:
9b:d2:9c:d7:bc:c4:c7:11:3f:8d:04:91:17:b4:ce:f6:e7:7f:
7c:ef:b1:ba:ee:14:43:70:1e:55:9d:1b:e4:c8:d3:78:df:31:
9b:0a:bb:42:8d:a8:0e:76:94:f6:27:83:15:d0:6b:5c:29:1e:
9c:0d:18:f0:78:69:26:7e:a8:e2:e8:45:84:b9:92:a9:34:e5:
83:51:c4:78:99:d1:47:68:86:2e:cd:02:84:69:bf:da:27:d1:
82:f7:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org