Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/L17h6tGop4WOrJzhrMsjVW8XDYI.roa
File: L17h6tGop4WOrJzhrMsjVW8XDYI.roa (raw, json)
Hash identifier: tG+JvciZohJuHNxds+oNVcnF+2P+vxChWe5ndG/xkXM=
Subject key identifier: 2F:5E:E1:EA:D1:A8:A7:85:8E:AC:9C:E1:AC:CB:23:55:6F:17:0D:82
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0898
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/L17h6tGop4WOrJzhrMsjVW8XDYI.roa
Signing time: Wed 14 Jun 2023 14:54:05 +0000
ROA not before: Wed 14 Jun 2023 14:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 14:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=2F5EE1EAD1A8A7858EAC9CE1ACCB23556F170D82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ad:16:d0:28:9b:71:ac:ac:fb:e5:2a:85:81:
cb:af:a0:80:5b:df:5f:26:40:f1:6e:a7:47:95:ca:
32:7b:fb:2f:20:72:be:bb:3c:48:43:c7:c8:7b:6e:
c6:47:9b:3a:41:6e:95:87:88:6c:11:69:eb:94:9f:
b8:4b:7e:2f:31:ef:6e:f4:6f:81:db:c1:cb:f1:ee:
5c:f9:17:98:55:dd:bc:87:5b:44:b0:1b:a2:5f:a4:
11:7a:8d:3e:36:99:ff:87:f6:e3:63:06:1e:1b:4e:
38:99:af:bb:08:15:ba:18:ab:f2:1f:be:ad:88:85:
5a:f7:c5:ba:e6:b0:c9:09:c4:14:44:b2:6d:f0:ed:
59:81:bb:22:f6:08:32:48:32:22:d4:80:27:cc:fe:
ac:f4:f7:8d:10:4e:24:0a:b2:ea:8d:f2:0f:47:c1:
f1:68:3d:b0:ff:fc:40:1b:9c:6e:37:58:47:10:2d:
f3:4e:02:38:63:98:ca:0f:cf:8c:0e:ec:cc:f7:9d:
d2:fc:b1:e5:6d:93:29:6f:d5:03:a8:7b:e5:c1:e9:
5a:8d:00:3d:1b:9a:0d:00:f4:53:a3:da:ff:42:8b:
70:58:1c:21:e5:8a:a2:29:62:97:1f:3f:63:5f:36:
6a:28:04:c0:4a:cc:95:79:99:41:b6:11:16:ea:f3:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5E:E1:EA:D1:A8:A7:85:8E:AC:9C:E1:AC:CB:23:55:6F:17:0D:82
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/L17h6tGop4WOrJzhrMsjVW8XDYI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:8b:06:ef:6b:97:81:e8:83:7b:ef:4b:97:ab:22:31:5f:95:
a6:4e:da:6e:e5:57:c2:9e:2c:48:31:c3:bd:92:4a:80:bc:76:
09:12:2f:3a:ef:3d:42:84:92:6a:e2:93:56:52:b1:c7:e3:b5:
48:e4:ed:ad:3e:9d:7e:a7:d0:2b:0d:47:bb:73:3a:96:0a:c4:
26:47:b7:87:95:a1:9d:04:c4:78:f2:58:dc:fb:9b:fb:61:41:
85:55:da:2c:8e:d7:e9:4e:db:63:49:9e:66:18:12:d7:f4:22:
dc:03:9e:ae:28:33:ea:17:d0:39:c1:6a:bc:29:08:35:0d:29:
ad:0c:c2:63:b0:e0:f2:a0:32:a5:2a:c2:00:dd:2a:b2:4b:4b:
c0:c1:59:1d:e8:86:d0:c4:b8:f6:52:4b:db:9a:cf:ed:d8:c1:
a0:8d:e7:d6:14:5b:eb:5d:3c:b0:49:fe:3c:57:2c:cb:70:c9:
1b:e1:62:9a:19:ad:1e:3a:f4:6a:4d:54:68:d8:34:39:fa:fb:
4b:f2:70:3e:da:28:7c:1e:d5:d1:4a:70:12:01:c8:87:98:35:
c7:19:5f:90:63:01:44:72:f1:08:db:a7:c0:28:b3:12:e6:e4:
e7:c5:c4:6b:84:49:ca:59:13:7c:1e:59:91:0c:c2:13:b6:80:
f0:76:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org