Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/MkNcFBx2mPpkhYlFsJ8mEdEVpJE.roa
File: MkNcFBx2mPpkhYlFsJ8mEdEVpJE.roa (raw, json)
Hash identifier: xC1hLUuz1sC4ZHquVZhXcMZty8Y4IlFkV2XXXvXvbXI=
Subject key identifier: 32:43:5C:14:1C:76:98:FA:64:85:89:45:B0:9F:26:11:D1:15:A4:91
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 081C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MkNcFBx2mPpkhYlFsJ8mEdEVpJE.roa
Signing time: Tue 13 Jun 2023 23:24:03 +0000
ROA not before: Tue 13 Jun 2023 23:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 23:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=32435C141C7698FA64858945B09F2611D115A491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:7a:51:b4:de:a5:29:f3:63:27:de:60:13:
98:a4:1a:b2:42:95:9b:50:c7:31:c9:a3:ae:6a:39:
97:66:6c:ca:b6:39:44:e5:4d:62:a5:f1:76:6c:fd:
54:68:27:84:c1:2c:0f:71:6c:56:7e:83:1c:5b:85:
fb:6a:83:19:c5:52:f7:fb:d5:16:2a:2c:4d:dc:46:
d5:61:5e:93:04:ab:51:5f:af:0f:fb:b6:41:14:7c:
57:ed:82:2c:e5:9c:6f:f1:a3:00:e7:3e:7d:5a:e5:
0e:90:5f:62:08:0c:23:ca:95:14:46:62:ff:5d:63:
32:b7:ea:a4:d4:30:a9:f4:a2:95:8b:81:b5:a1:97:
b5:5e:7b:b8:f6:93:86:4d:cc:fc:7a:68:47:39:80:
6f:08:4e:b4:a4:2e:2c:5d:ed:59:3a:29:3e:61:2a:
ae:66:f7:48:7c:51:40:21:fe:3c:9b:61:96:46:c2:
3d:e0:65:6e:c1:71:3e:ca:8d:07:18:0e:81:f2:61:
a0:51:02:5a:f0:a5:b1:f2:5a:e2:90:b9:32:35:c8:
f7:60:49:18:1b:ad:84:a2:35:46:cc:40:32:36:56:
e6:e3:fc:a2:80:87:22:56:fa:55:66:9b:cc:32:3b:
84:bb:9d:64:4b:82:b6:41:5a:52:0c:fe:fe:77:79:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:43:5C:14:1C:76:98:FA:64:85:89:45:B0:9F:26:11:D1:15:A4:91
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MkNcFBx2mPpkhYlFsJ8mEdEVpJE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
31:cc:e3:5d:7b:09:92:bd:ad:71:22:40:ca:54:ba:97:b0:72:
af:e2:cf:bd:bc:c5:70:b2:3f:2c:2e:27:d5:e5:f4:89:00:bd:
b8:72:59:0b:ec:55:bc:93:3a:4b:e0:91:68:77:c2:b0:9e:e2:
ed:9a:2b:8d:04:e5:2b:91:5b:54:5e:53:40:51:70:fb:4a:5a:
05:b8:57:ed:ea:f9:0c:2e:58:0e:7e:b1:10:c8:30:89:39:ae:
66:e0:f4:7c:14:85:ef:40:e9:8a:9b:9b:17:0a:de:d0:c6:9d:
b5:06:06:0a:ab:fe:21:6a:af:c9:97:07:46:13:4e:06:a3:c6:
44:6c:04:4b:a3:98:42:95:08:95:d5:ac:ee:5a:bb:f7:70:f2:
94:a1:a9:a9:3c:34:24:e1:00:d2:ae:80:72:fd:98:c9:ec:89:
85:a3:24:88:fb:79:0a:48:84:5b:cc:44:f0:98:6a:6c:03:1b:
20:67:fa:a8:12:5b:1b:07:05:47:93:69:64:81:fe:44:b8:d8:
4a:6f:33:2c:80:36:30:59:f7:a0:05:17:d4:94:cd:bb:21:52:
23:d4:a0:98:43:80:78:2d:2a:d1:7e:d2:ed:43:7e:41:70:46:
23:e9:45:12:11:ea:37:74:1a:47:82:cb:6d:3c:c3:9d:f7:1e:
48:a0:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org