Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Gj8CJZUwWLCavOv-vLQb4BKi7XM.roa
File: Gj8CJZUwWLCavOv-vLQb4BKi7XM.roa (raw, json)
Hash identifier: 8r8KeXz40XE2+jvP+AgY2Au8pCtGnp5ia/WBhNCP8Oo=
Subject key identifier: 1A:3F:02:25:95:30:58:B0:9A:BC:EB:FE:BC:B4:1B:E0:12:A2:ED:73
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07D4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Gj8CJZUwWLCavOv-vLQb4BKi7XM.roa
Signing time: Tue 13 Jun 2023 14:24:10 +0000
ROA not before: Tue 13 Jun 2023 14:24:10 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004 (0x7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 14:24:10 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1A3F0225953058B09ABCEBFEBCB41BE012A2ED73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:69:83:49:b1:61:e7:ab:4e:24:d5:5c:0a:
82:cb:c4:00:e6:31:c2:69:e2:64:21:e4:e4:cd:7a:
0c:94:1a:b0:66:50:e9:3a:37:9b:20:7a:38:81:2e:
e1:c7:66:8a:29:c3:02:14:27:d1:50:35:c0:a8:31:
8e:01:a6:ef:ad:cd:aa:25:41:f3:98:5c:d8:d4:7b:
9e:d2:ac:6f:8d:7d:65:a8:1f:e8:cb:c3:20:b1:0a:
70:6c:37:9c:25:34:58:34:8e:dc:19:a5:4d:89:be:
89:9a:a9:a3:ec:4c:05:e3:df:d1:97:7f:d8:2e:08:
98:c7:20:0e:56:a0:4d:e8:17:23:a3:9c:96:2a:78:
c8:9e:64:02:cc:97:5b:95:19:3c:bb:0c:dc:b4:c3:
ee:68:90:36:ff:0d:30:d4:f0:3c:0c:48:fd:2f:9a:
47:7f:bd:a1:b7:93:07:d5:78:a4:8e:9c:81:79:71:
45:9c:89:0c:c1:37:88:76:ef:e1:0a:f2:d7:4f:3e:
7a:07:fb:e9:9e:51:bb:da:17:9e:d4:84:70:e3:e7:
79:0c:10:76:46:9b:ea:c4:1d:bd:6b:2e:56:33:a7:
e1:c9:85:a2:2b:83:18:4b:98:ba:6c:e6:9e:5b:e7:
63:9d:62:2b:4a:f6:22:4c:86:32:9d:d1:a4:ff:0a:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:02:25:95:30:58:B0:9A:BC:EB:FE:BC:B4:1B:E0:12:A2:ED:73
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Gj8CJZUwWLCavOv-vLQb4BKi7XM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:b7:a0:f2:ed:f6:fb:dd:b8:0e:67:81:08:9a:b9:88:bb:21:
aa:98:37:86:cb:96:c6:6a:b6:fd:ba:f0:d5:26:c3:7a:f3:0f:
43:f5:48:8c:2f:7d:06:22:94:7c:53:7c:af:26:3e:6a:b0:ff:
ca:65:53:30:c1:d5:97:9a:8c:6e:00:63:2e:0f:c6:51:3f:fd:
be:29:76:f9:c5:97:b0:16:5f:d9:7d:fb:d1:38:4b:0a:69:22:
cc:a5:0a:c0:b2:6e:9e:af:e5:16:0d:58:32:99:30:1b:b7:f1:
81:89:cd:ca:77:4f:8b:86:38:f8:37:ce:31:0e:b0:29:b0:cb:
61:f3:22:c2:8a:c9:0e:31:9c:b6:34:4d:2b:6a:4c:06:e2:2e:
0b:69:15:a0:da:90:63:a7:84:37:a3:7e:31:4e:1e:93:b9:87:
d8:b7:87:f3:bf:14:77:48:cc:56:0b:95:ce:55:6c:57:b0:3c:
81:34:56:c2:24:73:3f:5b:7d:22:0e:68:4d:57:a0:85:f5:eb:
ed:56:28:dc:60:20:52:97:03:26:1a:33:83:c5:f9:2a:69:21:
c7:7c:2c:b5:6f:0c:ff:84:28:40:81:eb:df:c8:77:27:df:26:
50:54:5f:4e:25:08:ed:5a:7c:9e:66:f5:9b:da:ce:6b:89:bb:
20:0f:db:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org