Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/M5BSB9tbv5sL0h8WeQ9disu590s.roa
File: M5BSB9tbv5sL0h8WeQ9disu590s.roa (raw, json)
Hash identifier: ngYtYyKnLSmPdv0H+5EKXFIR93RmBfN0mOW6baa94Hs=
Subject key identifier: 33:90:52:07:DB:5B:BF:9B:0B:D2:1F:16:79:0F:5D:8A:CB:B9:F7:4B
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0935
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/M5BSB9tbv5sL0h8WeQ9disu590s.roa
Signing time: Thu 15 Jun 2023 07:24:05 +0000
ROA not before: Thu 15 Jun 2023 07:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357 (0x935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 07:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=33905207DB5BBF9B0BD21F16790F5D8ACBB9F74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:ff:0f:81:7e:66:3e:34:58:c7:71:7a:a3:
3a:b3:97:f4:37:16:5e:fe:92:f2:55:cc:77:e5:cb:
19:41:53:62:a8:68:d6:3b:62:56:39:93:81:da:bd:
aa:96:44:37:fa:0e:75:97:10:ca:05:43:95:31:f2:
7d:d3:53:65:7c:19:68:48:b7:30:1a:5a:fb:67:98:
86:49:94:53:17:f1:89:28:49:65:81:cc:c9:58:56:
32:3f:47:92:e4:80:57:fc:a8:68:4d:b4:0b:b4:1c:
3f:ee:b8:b8:f9:ea:85:be:4f:c1:9c:42:26:2a:68:
b3:29:cf:5a:cc:d7:24:31:d6:38:06:cf:62:32:91:
34:ea:53:76:69:88:19:5c:c9:a8:b4:76:dc:c3:b4:
d5:53:94:02:c4:03:10:35:3b:b0:20:b4:3d:1f:21:
25:da:0d:73:19:f2:da:6b:9f:3a:00:21:28:e4:40:
df:2b:9a:8c:ed:1f:31:21:c6:38:7d:44:c1:c8:3c:
db:d8:71:20:32:ba:9a:fb:22:46:e8:77:8a:e9:a8:
b9:a0:e5:5c:5e:2a:96:38:ea:5e:65:4c:6c:ff:7c:
63:49:7f:37:73:7c:6f:f4:5a:62:24:fe:56:ad:fd:
91:13:2b:49:57:39:66:8f:b4:fb:4d:c6:cf:1e:86:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:90:52:07:DB:5B:BF:9B:0B:D2:1F:16:79:0F:5D:8A:CB:B9:F7:4B
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/M5BSB9tbv5sL0h8WeQ9disu590s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
11:0c:57:2c:c8:25:11:c6:f9:8d:c8:82:db:a1:56:56:6f:5a:
09:b8:7e:9d:23:f3:e9:fa:d6:7d:44:02:e3:01:cc:04:4a:a8:
99:ff:14:af:7f:3f:e6:27:14:7c:31:38:c2:c4:b4:4d:85:e7:
b6:0b:07:19:c3:2d:51:60:bb:48:30:b4:cc:2b:90:cc:fa:a0:
26:63:81:25:39:9e:07:83:98:83:17:30:f3:d0:35:b9:f9:67:
b7:f7:bb:0a:17:fc:74:7a:21:22:b4:f2:21:0b:85:87:46:c0:
f9:eb:96:1a:70:8b:ae:84:c7:c9:2d:8e:b0:02:9b:05:07:c8:
e0:d2:5d:ba:0f:d8:e7:ed:86:c8:d7:64:13:04:7f:b1:8c:ba:
91:dc:af:77:92:f1:b6:5f:1f:16:2e:1e:bb:09:c1:fc:ca:77:
66:8b:dc:de:8f:77:5f:62:ea:5f:b6:0b:12:cb:5f:2e:74:d1:
f3:17:d9:79:88:77:ce:e0:e6:36:3d:2a:68:5b:d1:c0:ea:20:
4a:f2:94:99:b1:16:37:22:15:93:98:a6:73:e4:f4:58:ba:88:
cd:88:45:c0:4e:88:45:c8:64:9d:28:65:c0:3c:43:96:f2:a7:
c3:79:bc:af:ff:0d:16:6c:a9:e2:f8:8c:f7:34:5d:49:a5:4f:
0d:63:11:90
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCTUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTUw
NzI0MDVaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDMzOTA1MjA3REI1QkJG
OUIwQkQyMUYxNjc5MEY1RDhBQ0JCOUY3NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQtP8PgX5mPjRYx3F6ozqzl/Q3Fl7+kvJVzHflyxlBU2KoaNY7
YlY5k4HavaqWRDf6DnWXEMoFQ5Ux8n3TU2V8GWhItzAaWvtnmIZJlFMX8YkoSWWB
zMlYVjI/R5LkgFf8qGhNtAu0HD/uuLj56oW+T8GcQiYqaLMpz1rM1yQx1jgGz2Iy
kTTqU3ZpiBlcyai0dtzDtNVTlALEAxA1O7AgtD0fISXaDXMZ8tprnzoAISjkQN8r
moztHzEhxjh9RMHIPNvYcSAyupr7Ikbod4rpqLmg5VxeKpY46l5lTGz/fGNJfzdz
fG/0WmIk/lat/ZETK0lXOWaPtPtNxs8ehgv/AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUM5BSB9tbv5sL0h8WeQ9disu590swHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvTTVCU0I5dGJ2NXNM
MGg4V2VROWRpc3U1OTBzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAEQxXLMglEcb5jciC26FWVm9aCbh+
nSPz6frWfUQC4wHMBEqomf8Ur38/5icUfDE4wsS0TYXntgsHGcMtUWC7SDC0zCuQ
zPqgJmOBJTmeB4OYgxcw89A1uflnt/e7Chf8dHohIrTyIQuFh0bA+euWGnCLroTH
yS2OsAKbBQfI4NJdug/Y5+2GyNdkEwR/sYy6kdyvd5Lxtl8fFi4euwnB/Mp3Zovc
3o93X2LqX7YLEstfLnTR8xfZeYh3zuDmNj0qaFvRwOogSvKUmbEWNyIVk5imc+T0
WLqIzYhFwE6IRchknShlwDxDlvKnw3m8r/8NFmyp4viM9zRdSaVPDWMRkA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org