Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/LkCi_fkJsUB0ZEoFaahimDmtUVo.roa
File: LkCi_fkJsUB0ZEoFaahimDmtUVo.roa (raw, json)
Hash identifier: /H5TaccgUXPgzSdTmX7oE57lYM7Em9lyRfxCwSGT9yo=
Subject key identifier: 2E:40:A2:FD:F9:09:B1:40:74:64:4A:05:69:A8:62:98:39:AD:51:5A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 089C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/LkCi_fkJsUB0ZEoFaahimDmtUVo.roa
Signing time: Wed 14 Jun 2023 15:24:14 +0000
ROA not before: Wed 14 Jun 2023 15:24:14 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204 (0x89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 15:24:14 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=2E40A2FDF909B14074644A0569A8629839AD515A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:39:0d:7b:bf:73:61:16:6f:d0:9c:ce:59:
13:70:0c:be:2a:26:23:22:78:fc:46:d5:f7:85:b8:
3c:f5:25:6e:88:7a:d2:30:2d:2e:c3:41:c2:c5:c9:
b1:eb:1d:87:6e:72:06:89:86:22:78:2e:d1:ec:83:
d1:cc:3a:94:ce:23:87:49:5b:05:52:0b:48:05:74:
85:da:6e:39:24:4f:7d:cd:60:0c:1b:c2:b9:fe:19:
53:67:3e:6c:3e:b1:5a:cf:4a:22:53:de:fc:f6:78:
60:27:22:e2:a9:0a:cd:ea:35:15:5e:93:ff:f2:a6:
c4:99:74:2a:99:57:9f:3c:fb:a2:69:db:7a:42:e5:
01:5a:5b:ca:87:7a:b1:b8:2d:a5:51:fb:a5:9d:f7:
54:fe:94:c3:a5:a6:99:29:5f:b1:92:82:9e:71:21:
82:07:35:6b:d4:69:73:23:f9:49:d3:ad:b6:05:ac:
79:cd:7f:e9:f9:1f:81:a8:73:70:2c:41:ef:1f:11:
5d:46:db:7e:85:51:75:15:1d:24:7b:a6:f3:8c:66:
4b:b8:ef:f5:d1:53:59:b5:39:ed:32:7e:77:1e:64:
0f:2c:c5:03:c1:29:8f:d1:6f:e9:4f:f5:ca:3f:5c:
6a:a0:fb:84:e4:6e:01:0d:ed:8e:48:df:c2:38:e3:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:40:A2:FD:F9:09:B1:40:74:64:4A:05:69:A8:62:98:39:AD:51:5A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/LkCi_fkJsUB0ZEoFaahimDmtUVo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
57:57:1b:f5:dc:d5:34:d1:83:aa:09:4c:c9:c0:e4:84:59:6d:
5b:3f:4c:3c:d7:99:83:31:bb:e9:ac:ce:a3:f9:ad:16:d2:83:
2d:7d:6a:60:60:e2:2d:91:50:71:c9:17:16:ec:c7:5e:4d:84:
23:16:c9:16:bb:7e:76:5a:3f:78:ca:3f:57:23:b9:e7:ea:fb:
0a:69:7c:f6:f8:43:20:28:bf:41:57:b8:9e:d3:ac:2f:d1:64:
ea:b4:c9:5e:a9:3b:0e:f7:44:b7:e8:d8:9a:96:b1:42:9f:4e:
b3:93:1a:26:06:a5:cc:17:c0:ec:ca:23:72:c5:4f:25:03:17:
eb:2c:43:61:f7:70:ff:51:f5:a7:1c:db:eb:2d:bd:d0:f5:e7:
a6:cb:37:1c:8b:dc:02:18:8c:6f:db:b1:30:8b:eb:af:7a:5e:
21:ba:e9:54:e2:bc:1d:cd:c9:f2:47:33:aa:7f:bb:38:68:d9:
cd:cb:4d:d5:c1:e2:9c:95:37:e5:a4:01:42:54:e0:90:f3:48:
e3:44:0d:06:5a:89:30:8a:62:98:da:37:1e:d1:68:54:99:22:
a1:1a:1f:1d:ae:85:9e:ef:80:91:99:c6:11:f9:1d:f8:77:5a:
f7:4d:88:af:2b:a9:8b:05:6f:45:89:53:3e:96:53:7c:6f:99:
be:0c:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org