Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/GFBt65L4URPSty_O3MtAajYzbMU.roa
File: GFBt65L4URPSty_O3MtAajYzbMU.roa (raw, json)
Hash identifier: yTtDyb/ZfDJ7AAzMNspZSAxCKjZSJI72Flia3H/CpAc=
Subject key identifier: 18:50:6D:EB:92:F8:51:13:D2:B7:2F:CE:DC:CB:40:6A:36:33:6C:C5
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08F4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/GFBt65L4URPSty_O3MtAajYzbMU.roa
Signing time: Thu 15 Jun 2023 02:24:06 +0000
ROA not before: Thu 15 Jun 2023 02:24:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 02:24:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=18506DEB92F85113D2B72FCEDCCB406A36336CC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:8e:dd:c7:52:c0:f2:a1:5b:f7:49:6d:cf:
5d:fd:45:db:88:f8:2d:23:7f:15:97:76:11:86:da:
92:25:60:20:9c:00:fa:5f:09:fe:50:34:06:29:9a:
c1:34:53:fa:19:22:59:5d:b6:db:38:b2:73:85:3c:
f5:6c:9b:8b:3c:a8:11:a7:16:ca:00:3a:76:98:ce:
9a:68:0c:cb:79:68:d6:b4:8f:4f:82:75:35:80:ac:
0e:14:34:9a:7c:05:11:5b:04:0b:46:f5:b7:07:36:
2a:74:39:c5:30:fd:02:2a:1c:17:a3:70:a0:51:59:
5d:da:f5:b4:50:1f:f6:d9:34:69:e1:03:b7:e6:58:
43:7f:28:e1:23:78:28:03:e9:23:47:e0:68:0a:d6:
77:93:b9:82:b1:01:30:1b:60:d8:a1:77:b5:15:3b:
37:31:a8:a6:a0:f2:96:e3:04:84:b4:c2:f8:d4:c8:
64:4b:69:ba:5c:6a:64:cd:21:d2:db:d0:86:29:24:
a3:91:39:13:db:2c:73:7f:d1:61:0d:65:d6:3d:a5:
4b:a0:b8:cb:25:eb:ec:7a:b6:22:23:e0:04:11:95:
b7:97:9d:bc:00:8f:c9:33:93:a8:c6:6e:26:c3:a3:
df:a6:ca:a0:bd:e0:88:a6:3c:3f:44:ca:0e:cc:06:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:50:6D:EB:92:F8:51:13:D2:B7:2F:CE:DC:CB:40:6A:36:33:6C:C5
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/GFBt65L4URPSty_O3MtAajYzbMU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:34:cb:36:32:d2:53:f7:c6:8b:b1:c0:f8:87:ac:b2:8d:3f:
60:78:a7:04:2b:c1:18:07:13:c3:32:b2:45:49:9a:9c:c1:48:
b9:bb:7c:df:64:b6:bb:c9:99:e7:6f:7f:d2:a7:b0:b7:0f:e2:
0e:d5:af:38:39:44:70:52:61:8d:ea:39:65:4f:45:d7:49:e6:
53:d8:c3:89:ea:6a:cb:d6:0a:56:9a:87:00:b3:e0:b1:cb:ae:
12:cc:0c:5c:63:9f:ce:d5:a4:9d:d0:c3:70:20:ce:f9:c3:2a:
be:ba:cf:65:ec:f5:24:63:ef:ee:68:3f:8b:4d:f9:10:8e:1a:
16:20:bc:e7:4d:6f:37:50:be:b4:ac:32:3e:c4:d3:12:56:85:
57:ed:e0:96:f9:9a:af:aa:b2:71:4d:4e:f9:b2:66:a6:83:96:
a9:d7:57:45:a0:84:7a:56:26:55:bc:90:2e:94:b4:5c:b9:2e:
fb:a5:32:d6:45:2d:d9:c5:f5:fa:40:a5:bf:b1:cd:ef:7b:24:
ac:0d:0e:5b:72:81:e4:cf:d5:23:59:60:02:3a:be:5e:a5:2d:
2f:dd:f2:97:d2:dd:1b:3d:aa:ab:81:2b:e3:3b:87:a2:ef:a0:
b2:fa:ca:80:4c:d3:64:83:9f:3e:58:4a:3a:53:1a:26:b7:ec:
a9:f6:3f:7d
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTUw
MjI0MDZaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDE4NTA2REVCOTJGODUx
MTNEMkI3MkZDRURDQ0I0MDZBMzYzMzZDQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzFI7dx1LA8qFb90ltz139RduI+C0jfxWXdhGG2pIlYCCcAPpf
Cf5QNAYpmsE0U/oZIlldtts4snOFPPVsm4s8qBGnFsoAOnaYzppoDMt5aNa0j0+C
dTWArA4UNJp8BRFbBAtG9bcHNip0OcUw/QIqHBejcKBRWV3a9bRQH/bZNGnhA7fm
WEN/KOEjeCgD6SNH4GgK1neTuYKxATAbYNihd7UVOzcxqKag8pbjBIS0wvjUyGRL
abpcamTNIdLb0IYpJKORORPbLHN/0WENZdY9pUuguMsl6+x6tiIj4AQRlbeXnbwA
j8kzk6jGbibDo9+myqC94IimPD9Eyg7MBrW/AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUGFBt65L4URPSty/O3MtAajYzbMUwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvR0ZCdDY1TDRVUlBT
dHlfTzNNdEFhall6Yk1VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAfTTLNjLSU/fGi7HA+Iesso0/YHin
BCvBGAcTwzKyRUmanMFIubt832S2u8mZ529/0qewtw/iDtWvODlEcFJhjeo5ZU9F
10nmU9jDiepqy9YKVpqHALPgscuuEswMXGOfztWkndDDcCDO+cMqvrrPZez1JGPv
7mg/i035EI4aFiC8501vN1C+tKwyPsTTElaFV+3glvmar6qycU1O+bJmpoOWqddX
RaCEelYmVbyQLpS0XLku+6Uy1kUt2cX1+kClv7HN73skrA0OW3KB5M/VI1lgAjq+
XqUtL93yl9LdGz2qq4Er4zuHou+gsvrKgEzTZIOfPlhKOlMaJrfsqfY/fQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org