Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/HrmUu93aj8yXAZDSAGxfhMlatHI.roa
File: HrmUu93aj8yXAZDSAGxfhMlatHI.roa (raw, json)
Hash identifier: NnBu2jwwmDn9yrlc6b3NFkH/BYUyxu6n+A/J8tm9MFk=
Subject key identifier: 1E:B9:94:BB:DD:DA:8F:CC:97:01:90:D2:00:6C:5F:84:C9:5A:B4:72
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 088C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/HrmUu93aj8yXAZDSAGxfhMlatHI.roa
Signing time: Wed 14 Jun 2023 13:24:04 +0000
ROA not before: Wed 14 Jun 2023 13:24:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 13:24:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1EB994BBDDDA8FCC970190D2006C5F84C95AB472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:34:de:c5:ed:39:1a:10:d0:a3:54:86:a8:
e3:cc:a8:c3:7d:09:89:e1:db:0a:dc:74:ca:94:4b:
9b:ee:46:d4:6b:aa:57:8d:01:63:06:a6:ef:5e:d9:
95:96:54:b5:85:fc:5c:8e:53:2d:d0:1a:a5:ed:0d:
d4:63:09:ba:08:b9:bd:f2:ef:eb:e3:7b:d0:de:ed:
45:74:9f:fd:47:05:79:14:00:4a:4b:fc:e7:63:2a:
e8:6f:b0:4c:e4:85:d7:17:ea:9c:e7:92:17:c6:d3:
da:8a:42:1e:0b:14:4b:1a:b8:cb:e8:90:b7:3c:28:
f5:78:14:c6:e6:ea:f8:0b:49:9a:af:ca:98:9f:05:
be:ad:e3:8b:ab:4b:cb:86:18:db:3c:7d:03:19:3f:
a3:c8:d4:67:fe:4d:10:0d:c6:4c:8f:17:ba:2b:c4:
54:79:66:c3:02:cb:bc:8b:c6:0d:3f:7b:c8:5e:66:
81:2b:05:31:aa:9c:a7:68:30:e2:56:b4:1e:eb:e0:
53:7b:83:0c:b8:4d:0d:34:b5:cf:4b:e9:da:8c:6c:
01:d7:4e:1c:23:7f:67:83:f7:c6:2b:00:09:de:46:
1b:ef:b4:7a:22:87:ad:fb:92:0e:a7:35:0e:be:7a:
ab:02:bd:2a:e8:84:25:8f:ac:57:50:9a:f5:d0:96:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B9:94:BB:DD:DA:8F:CC:97:01:90:D2:00:6C:5F:84:C9:5A:B4:72
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/HrmUu93aj8yXAZDSAGxfhMlatHI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
47:01:26:eb:a8:38:10:8a:20:f2:c8:b2:04:71:03:37:40:bf:
86:58:8b:94:0c:e8:80:82:5b:06:2f:d6:14:10:21:b9:15:d8:
41:70:23:ac:e5:bd:84:b4:34:5e:6e:1c:6f:60:5b:48:5b:f3:
c2:85:9a:c4:20:6b:6d:55:5d:a1:5e:ac:ea:23:e8:3b:b6:a9:
7d:64:8c:03:d1:29:31:0c:37:05:7f:7f:26:de:94:d9:be:a7:
48:45:e0:90:fe:57:2f:54:ea:5c:75:4a:68:b5:eb:7f:6d:de:
89:3e:fd:c0:f1:71:65:4b:b2:26:f4:9b:ec:99:bc:d0:91:ff:
a1:cd:fa:72:d5:3a:26:45:79:75:3b:33:93:c5:28:46:03:75:
1b:7f:ad:56:67:e8:de:fc:4c:8e:0e:ac:50:c1:a8:3b:ae:f4:
06:58:56:d1:f0:ed:92:36:7c:a4:da:58:cc:51:ca:32:d9:2c:
ae:29:c0:29:67:17:19:ef:f0:7e:94:17:73:0d:e5:a1:02:44:
6c:08:a1:a9:5c:6b:ef:9f:ca:fb:6f:de:30:fc:07:5e:39:e9:
ac:41:b1:14:c7:7e:2f:20:52:b8:0f:ea:f4:14:5d:aa:5e:fd:
33:9e:ae:91:67:b2:3b:23:62:0d:ff:fb:a6:57:b7:ad:7f:0d:
34:4e:10:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org