Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/KCkXYkOF70OsSREae2OIFAeRgQ4.roa
File: KCkXYkOF70OsSREae2OIFAeRgQ4.roa (raw, json)
Hash identifier: 8aF1oBRPIiQmL8fbVBKko1TDe9MMGs/K/+ERNJMvlRM=
Subject key identifier: 28:29:17:62:43:85:EF:43:AC:49:11:1A:7B:63:88:14:07:91:81:0E
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0810
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/KCkXYkOF70OsSREae2OIFAeRgQ4.roa
Signing time: Tue 13 Jun 2023 21:54:02 +0000
ROA not before: Tue 13 Jun 2023 21:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 21:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=282917624385EF43AC49111A7B6388140791810E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:1d:39:c5:fb:99:df:61:fa:03:38:af:fe:
e1:d3:da:9c:18:7e:16:65:4b:64:bb:d2:2a:84:02:
e7:e0:5e:bd:34:4f:77:2e:bd:ce:72:01:c3:fc:ed:
50:fe:30:6c:ae:78:ed:07:7a:6b:b2:84:60:b7:31:
54:c8:61:0a:3b:8b:8c:e1:99:a7:8d:f1:ca:cb:25:
ff:f2:2f:83:42:ef:8a:e9:fe:f3:79:10:3b:8f:53:
e1:4a:72:94:43:2c:0a:f8:2f:c6:89:d7:ae:9a:ad:
24:5b:5a:d1:91:22:d4:26:9d:23:61:a2:5f:b9:d1:
1c:62:8a:91:1b:6f:de:55:92:b8:51:89:e5:f5:65:
dc:d6:cc:db:aa:b2:e4:7d:d0:54:06:f7:c7:69:30:
fc:c3:60:4f:ca:5a:b2:01:35:b5:c1:77:93:97:48:
2a:05:98:d0:d0:65:5b:a0:c4:85:a3:42:03:5c:43:
f3:a9:2d:d7:90:b0:3d:56:87:16:77:d9:a2:bb:9f:
35:0c:88:91:64:76:20:74:ec:11:5a:0c:57:40:b2:
24:07:ca:dc:2b:1a:e4:28:b4:c1:e1:73:4d:68:d9:
a9:0f:1d:cc:25:da:25:75:68:6b:3c:41:ea:ba:a8:
49:20:eb:23:0d:11:bd:86:72:65:76:13:96:f6:09:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:17:62:43:85:EF:43:AC:49:11:1A:7B:63:88:14:07:91:81:0E
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/KCkXYkOF70OsSREae2OIFAeRgQ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
34:a7:a1:e6:00:5c:5d:00:6f:da:30:25:86:8c:ec:42:5b:2c:
44:fb:db:dc:82:e8:22:f5:31:a8:e1:be:fd:ec:ad:28:db:29:
1a:15:7e:fd:18:40:37:58:7c:96:0b:64:30:10:f4:83:01:7c:
e7:02:cd:9f:62:14:6e:a3:48:16:e0:41:4c:c3:5f:ef:96:62:
d1:1c:fd:99:66:86:48:a5:b0:f1:7e:78:ec:e9:fe:59:05:12:
5a:2b:b0:46:fd:19:7d:ad:8e:1c:ee:dd:a2:c2:0c:54:e0:8b:
a4:16:ea:9b:98:7d:de:7e:9a:2a:79:75:09:13:73:62:32:a7:
69:37:0e:3d:21:72:72:e1:39:45:b5:2d:b0:f3:d4:ce:8e:9a:
ed:f9:ee:e7:c5:b5:d8:15:b6:77:ed:69:a2:17:23:58:e0:d6:
cf:49:a5:17:83:1a:e8:0d:ca:aa:4f:db:56:98:45:c1:5b:bd:
6d:14:81:b5:4a:85:30:b2:1a:34:72:23:8b:c9:ae:76:16:d1:
77:d3:0d:de:a9:bf:41:d2:46:7b:4a:35:ba:6f:52:7f:f1:12:
17:37:9e:8b:e6:2d:0e:0a:7b:11:b6:66:68:ba:05:ae:06:22:
dc:a5:75:aa:5f:75:d4:d8:ca:07:a3:bd:d3:a7:32:50:a4:2d:
87:bc:49:1a
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMy
MTU0MDJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDI4MjkxNzYyNDM4NUVG
NDNBQzQ5MTExQTdCNjM4ODE0MDc5MTgxMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgPB05xfuZ32H6Aziv/uHT2pwYfhZlS2S70iqEAufgXr00T3cu
vc5yAcP87VD+MGyueO0HemuyhGC3MVTIYQo7i4zhmaeN8crLJf/yL4NC74rp/vN5
EDuPU+FKcpRDLAr4L8aJ166arSRbWtGRItQmnSNhol+50RxiipEbb95VkrhRieX1
ZdzWzNuqsuR90FQG98dpMPzDYE/KWrIBNbXBd5OXSCoFmNDQZVugxIWjQgNcQ/Op
LdeQsD1WhxZ32aK7nzUMiJFkdiB07BFaDFdAsiQHytwrGuQotMHhc01o2akPHcwl
2iV1aGs8Qeq6qEkg6yMNEb2GcmV2E5b2CSoxAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUKCkXYkOF70OsSREae2OIFAeRgQ4wHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvS0NrWFlrT0Y3ME9z
U1JFYWUyT0lGQWVSZ1E0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEANKeh5gBcXQBv2jAlhozsQlssRPvb
3ILoIvUxqOG+/eytKNspGhV+/RhAN1h8lgtkMBD0gwF85wLNn2IUbqNIFuBBTMNf
75Zi0Rz9mWaGSKWw8X547On+WQUSWiuwRv0Zfa2OHO7dosIMVOCLpBbqm5h93n6a
Knl1CRNzYjKnaTcOPSFycuE5RbUtsPPUzo6a7fnu58W12BW2d+1pohcjWODWz0ml
F4Ma6A3Kqk/bVphFwVu9bRSBtUqFMLIaNHIji8mudhbRd9MN3qm/QdJGe0o1um9S
f/ESFzeei+YtDgp7EbZmaLoFrgYi3KV1ql911NjKB6O906cyUKQth7xJGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org