Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/I1NtBszly3Md_DYzna0H5odIE_Y.roa
File: I1NtBszly3Md_DYzna0H5odIE_Y.roa (raw, json)
Hash identifier: jY2zu5FFoHF/z+o1gtMguN9tZotoaaDgTplIbIWYkPo=
Subject key identifier: 23:53:6D:06:CC:E5:CB:73:1D:FC:36:33:9D:AD:07:E6:87:48:13:F6
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07E8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/I1NtBszly3Md_DYzna0H5odIE_Y.roa
Signing time: Tue 13 Jun 2023 16:54:02 +0000
ROA not before: Tue 13 Jun 2023 16:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024 (0x7e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 16:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=23536D06CCE5CB731DFC36339DAD07E6874813F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:0d:7a:6d:eb:b4:11:e2:00:ee:8f:0e:d7:
01:47:c3:a9:83:34:51:ca:60:d4:90:c9:e1:91:f7:
af:20:e7:31:69:4b:b0:da:c3:09:a6:a8:33:6b:11:
69:79:26:e9:31:32:0c:bc:20:27:fd:58:a4:c2:00:
95:aa:d9:83:40:96:c0:e4:45:59:6f:af:04:30:2d:
dd:f8:ab:b3:bc:17:82:c9:a4:97:3f:2e:23:48:dd:
d3:e3:ba:fb:72:32:46:c7:9e:ca:ef:f4:93:4a:dd:
7a:31:cf:3d:38:ad:6c:02:0f:f9:6a:1e:54:16:24:
ee:f4:3e:97:f1:f3:15:b4:30:01:df:b1:38:c3:e3:
fa:99:bb:1c:09:5f:4a:ab:36:f9:11:a8:05:31:b9:
73:3f:6a:57:d7:a5:f7:73:36:10:7b:f1:29:86:fb:
00:08:d4:2a:ee:7b:7c:5f:58:a0:b5:64:2d:d4:52:
8f:47:ab:6a:a6:62:94:33:86:07:f3:d1:b7:33:92:
15:ac:8d:57:ec:c8:56:59:e6:89:9c:88:12:3a:aa:
bc:ce:10:9d:10:6c:40:38:f6:37:78:1d:d7:eb:8b:
7e:0c:35:f9:40:cd:ea:af:b7:d2:b6:e3:fe:5a:f9:
3f:14:ce:ac:c2:c7:56:d5:c0:b3:8f:b1:91:f8:63:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:6D:06:CC:E5:CB:73:1D:FC:36:33:9D:AD:07:E6:87:48:13:F6
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/I1NtBszly3Md_DYzna0H5odIE_Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:00:af:1a:26:fb:8d:33:3e:eb:16:65:38:16:8b:c9:6d:ce:
b3:27:5a:07:57:e5:52:87:11:c2:88:b7:1e:3b:c5:45:53:b0:
2c:99:51:d0:74:f5:86:38:10:b0:1d:54:31:71:e7:92:1f:f7:
e4:8c:d0:b3:21:4e:c1:dc:41:e9:f4:52:15:24:81:18:0e:01:
04:aa:48:2f:ed:e7:ab:50:ff:5f:b1:fa:59:16:92:b0:9d:4b:
c5:70:ec:31:3c:8f:60:65:ec:b6:bd:96:90:7c:ee:76:10:4e:
0f:64:0c:9c:bf:75:a4:9a:b7:ae:24:78:c1:4a:43:ee:f6:62:
65:7b:a4:e2:6f:b5:e4:08:37:6c:5f:e9:d1:d8:5f:fc:7f:6d:
d1:8b:e6:e8:a5:bb:6f:9c:af:69:72:58:32:c3:96:4f:9a:fb:
16:a1:a8:d2:0f:e5:87:bf:cf:e2:98:4d:ca:ca:50:02:66:46:
bd:82:e4:c1:16:a1:e5:3f:1f:4d:45:fc:02:61:f0:d2:34:6e:
32:62:cc:0c:fa:2f:2e:bc:c1:81:1c:40:55:be:6e:b6:e1:09:
d1:c5:d9:65:24:d1:2a:c8:51:8d:ca:89:bc:20:f1:7d:6e:82:
dc:50:cf:e5:ac:7a:ba:c6:74:04:e4:47:36:89:e2:2b:83:9e:
aa:88:05:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org