Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Hv_weGqkTnoCarZqbfvCTunCW8s.roa
File: Hv_weGqkTnoCarZqbfvCTunCW8s.roa (raw, json)
Hash identifier: C8eKBo7dSqhZ+0babNhKh4jdGYddeO43cjTUR0NWodo=
Subject key identifier: 1E:FF:F0:78:6A:A4:4E:7A:02:6A:B6:6A:6D:FB:C2:4E:E9:C2:5B:CB
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0844
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Hv_weGqkTnoCarZqbfvCTunCW8s.roa
Signing time: Wed 14 Jun 2023 04:24:05 +0000
ROA not before: Wed 14 Jun 2023 04:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2116 (0x844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 04:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1EFFF0786AA44E7A026AB66A6DFBC24EE9C25BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:4c:27:72:10:9e:2a:1c:6c:d0:88:c0:62:
98:46:e6:28:6a:6c:8e:12:97:4b:13:39:cf:ec:b0:
32:8a:6f:e1:f2:37:8e:04:12:ba:32:cf:3d:36:d9:
ce:aa:d0:fe:6c:03:7d:e4:61:85:fa:9c:ea:6c:1e:
11:ab:42:7a:c0:c2:c6:cf:48:36:c5:9c:61:b2:80:
07:f7:cc:e1:de:a8:96:d5:56:ef:a7:79:fa:df:19:
2b:8b:18:f5:b5:43:f6:c0:cc:fc:88:f8:fe:14:88:
af:04:0e:3d:f3:51:9c:08:b3:13:15:61:59:3b:35:
76:8e:91:3f:4f:a0:a6:b4:fe:01:35:4c:fe:97:19:
ff:4d:f0:6b:ad:2d:f4:85:22:6d:c9:49:b3:39:5d:
b3:9b:c1:64:dd:35:24:d1:e5:9b:f8:f1:99:cc:76:
2b:5a:4e:d0:ec:77:bb:6f:6e:5d:3c:ba:c8:6f:cf:
76:2e:47:6c:0a:55:e4:50:fd:a0:7a:81:6d:0a:6a:
e0:ac:0a:34:1d:7c:65:85:4f:1f:d5:cd:aa:1c:ce:
54:c3:83:85:62:dc:21:8a:dd:78:ee:03:c2:7f:c0:
6d:7a:62:9b:f4:e4:8b:cf:32:70:e6:dc:cf:40:00:
f9:1c:16:cc:df:9c:e9:72:09:c3:df:d8:0f:0e:99:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:F0:78:6A:A4:4E:7A:02:6A:B6:6A:6D:FB:C2:4E:E9:C2:5B:CB
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Hv_weGqkTnoCarZqbfvCTunCW8s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
64:66:ca:9a:86:02:34:6c:e2:85:2f:5a:23:e1:ec:46:93:f8:
13:48:a3:c7:55:e1:6e:e9:5f:65:b5:2f:d2:bc:62:d6:ed:23:
c9:e3:a7:6c:81:c9:96:c4:6e:93:76:47:e6:2c:f3:85:37:82:
9d:1c:45:e5:35:bd:b0:27:fd:10:63:f8:ab:df:7f:8e:5e:47:
7c:60:30:8c:6c:2d:71:64:fc:dd:6b:f1:74:9b:e1:8e:3c:32:
99:7d:ba:60:2a:e6:3f:42:b8:38:9d:aa:c2:fa:02:f3:68:91:
3b:98:6a:36:6c:fa:3b:30:2f:af:65:e0:8d:36:f7:5e:1a:5b:
c1:28:c0:ee:32:3e:87:6d:18:93:93:c1:b1:b4:7e:8d:01:79:
fc:c1:1e:22:73:ab:8c:32:cf:af:4a:bf:4e:45:a6:23:06:d5:
f7:38:fe:1c:51:7f:78:2b:4b:39:b1:23:f7:6c:d4:55:10:f2:
75:61:f0:38:9c:e8:35:9c:71:b5:33:d5:48:48:7c:b3:85:fb:
82:e1:bb:6f:b9:77:d7:83:77:17:46:93:bf:6f:64:ab:8d:49:
eb:34:e7:fa:5a:b0:66:69:9d:c2:86:cd:50:9f:d1:41:f3:20:
12:b4:ca:dd:ec:6c:c8:71:52:79:f7:97:e9:da:20:f0:0c:bd:
39:4b:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org