Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/NKAuzV2OGNDvFYOLxMWayRo1GY8.roa
File: NKAuzV2OGNDvFYOLxMWayRo1GY8.roa (raw, json)
Hash identifier: dzcQPPtSuBKv4t5zPHgtE4yEqvJg7mMaL0ax1G2rBnQ=
Subject key identifier: 34:A0:2E:CD:5D:8E:18:D0:EF:15:83:8B:C4:C5:9A:C9:1A:35:19:8F
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0874
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/NKAuzV2OGNDvFYOLxMWayRo1GY8.roa
Signing time: Wed 14 Jun 2023 10:24:12 +0000
ROA not before: Wed 14 Jun 2023 10:24:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 10:24:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=34A02ECD5D8E18D0EF15838BC4C59AC91A35198F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:d0:b6:a8:b6:69:08:d2:f0:33:99:81:0c:
d5:6f:50:4a:6b:27:a3:da:58:bc:c2:7e:70:cb:31:
c6:c2:20:e3:66:75:2c:22:ec:a7:ac:a9:7b:ac:2e:
61:fd:31:f8:4e:81:9a:50:6b:70:05:71:38:1e:39:
87:32:0f:87:91:fe:10:2f:35:a3:a1:3f:86:d5:d5:
a1:67:64:9f:f2:2a:9d:ff:b8:2d:12:8a:a8:eb:e3:
70:b6:f4:39:b5:87:26:5d:89:ac:45:14:9f:43:c8:
9e:94:19:a1:a8:4a:04:3e:89:d1:44:3a:80:6e:c7:
f9:f9:3d:7e:9a:ad:80:07:0d:5b:19:51:08:fc:0b:
5d:52:d0:1d:bc:87:8b:eb:90:b4:20:86:bb:9e:9a:
03:58:71:93:85:22:7b:c9:93:96:d5:52:5f:a9:1b:
93:b7:b8:01:45:fa:76:f0:6a:7b:4d:e5:9a:1b:e2:
cc:b0:5e:13:ec:08:f1:6a:ca:81:2d:02:70:cd:0d:
7d:b8:54:6d:68:7d:c5:c4:ac:89:c3:53:67:1c:15:
6f:8c:39:20:e7:3c:59:ae:fe:ea:ca:01:a8:3a:49:
ef:9e:ad:57:e6:84:cb:96:21:4b:b8:9c:84:f0:b5:
e9:6f:69:e1:eb:33:83:d1:20:a1:e2:02:70:3f:8a:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A0:2E:CD:5D:8E:18:D0:EF:15:83:8B:C4:C5:9A:C9:1A:35:19:8F
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/NKAuzV2OGNDvFYOLxMWayRo1GY8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
55:d9:80:28:0e:cd:ef:d6:c3:b7:44:f7:78:e2:69:2e:25:5a:
e1:61:3f:da:db:61:08:fc:4c:a4:32:f1:64:e2:a2:3b:8d:31:
23:33:33:7f:ee:9e:37:7a:13:d0:8a:a7:38:ed:3a:74:1e:de:
28:fa:98:fa:ee:32:ea:8f:7f:1f:f3:09:8a:01:0c:8c:84:a2:
7b:36:b9:e0:b8:40:13:c7:0b:27:30:b9:17:05:9e:88:51:33:
ca:14:3b:db:81:c6:1f:77:6e:0d:6a:bc:af:5b:35:c0:b1:ae:
ec:c6:38:d8:54:ac:0a:5b:bd:42:7b:9c:a9:fa:6f:46:75:f2:
af:8c:33:46:af:a6:d4:6e:8a:8f:4e:c8:67:38:96:0a:99:d9:
d3:af:87:3c:0d:0b:12:a2:0a:d5:8a:dc:e4:d8:9f:a7:ef:27:
62:2f:5b:25:c9:42:99:ac:05:f7:5d:f3:8d:5d:63:a1:c9:65:
d1:a9:cd:80:4f:ac:87:02:79:ad:a5:3f:42:06:db:5d:98:29:
4f:95:4b:b6:8e:5c:10:49:f0:6e:c9:4d:dd:e7:4b:bc:7b:b1:
36:b5:cf:e7:3e:89:f2:a3:81:3e:a8:d2:87:58:46:0a:c5:b5:
7b:a2:65:a3:d5:54:9d:b8:d1:e8:fb:d7:08:29:52:6e:01:e4:
34:dd:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org