Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/PTsYcl82hsQKWhbwcavAicPrs0U.roa
File: PTsYcl82hsQKWhbwcavAicPrs0U.roa (raw, json)
Hash identifier: MwCdzY7F8kWVKVaEGa9N4izFzAiU1HEQdkF8dVc9Tp4=
Subject key identifier: 3D:3B:18:72:5F:36:86:C4:0A:5A:16:F0:71:AB:C0:89:C3:EB:B3:45
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0884
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/PTsYcl82hsQKWhbwcavAicPrs0U.roa
Signing time: Wed 14 Jun 2023 12:24:04 +0000
ROA not before: Wed 14 Jun 2023 12:24:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 12:24:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3D3B18725F3686C40A5A16F071ABC089C3EBB345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:a6:35:09:6b:32:0e:07:2c:0e:45:d5:7f:
59:d1:17:35:9e:84:2f:30:4f:87:12:db:04:31:5e:
e6:c2:fe:81:cc:95:47:7d:01:5e:78:81:ba:97:ca:
cb:c7:23:f7:1b:21:57:9a:e5:24:89:40:89:75:65:
25:b2:44:3c:47:e8:28:cd:90:98:32:0e:ff:86:c5:
44:50:d6:60:10:16:80:10:fc:66:f7:39:b1:ac:42:
d9:55:fc:8d:01:da:66:9f:c6:5e:d5:d2:ba:7b:a3:
7c:c9:de:55:69:7b:9d:44:3f:6a:2c:8f:b0:ad:1d:
fa:e5:16:fb:42:eb:39:c0:6b:f1:f0:03:91:95:ad:
5e:23:c3:83:e2:f5:c7:f1:57:76:93:14:30:55:90:
35:da:b7:26:7e:cd:29:46:9c:d6:f1:8c:f0:b5:9d:
45:40:04:79:5d:a4:82:04:5e:1e:57:d1:ec:96:06:
23:8c:5e:66:aa:cc:32:82:d7:8a:be:af:10:7b:49:
75:39:6a:aa:84:65:50:16:01:a4:de:0f:43:f0:04:
4f:c0:4c:7a:56:62:e2:2a:22:0a:59:d1:e5:f2:2f:
e0:c9:bd:34:13:75:f1:ed:80:50:1d:1b:b2:32:aa:
71:5f:6b:6f:9f:0a:64:ed:22:ee:0b:f2:ce:17:12:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3B:18:72:5F:36:86:C4:0A:5A:16:F0:71:AB:C0:89:C3:EB:B3:45
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/PTsYcl82hsQKWhbwcavAicPrs0U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
72:ae:e4:29:93:fc:62:54:e0:2b:11:b1:81:45:a8:dc:19:5b:
37:16:74:29:24:85:d1:6c:3a:73:47:3c:f7:ac:82:d6:19:4a:
77:90:fd:a2:83:29:2b:95:5d:19:f0:58:79:4e:11:8d:e1:5a:
f7:3b:50:da:df:ef:9c:ff:d2:6d:d3:96:a9:96:c3:11:04:e8:
6c:d3:4f:35:0c:5f:ca:53:6f:6e:c9:68:5f:65:fc:d3:dc:69:
06:67:d6:b4:7d:9e:e1:49:94:67:63:8e:f7:8e:b3:01:49:1d:
16:de:f0:df:a2:56:60:e6:a8:12:7b:db:6b:91:e8:ed:26:aa:
c5:e8:bd:55:e6:a9:88:ba:6e:c3:41:56:77:62:17:56:e7:a8:
c8:fb:b3:a6:69:5c:e3:6e:d7:ba:cf:92:b3:59:8f:e0:1a:d0:
e8:02:f7:b5:f4:3e:4d:e3:d1:91:c4:91:23:be:4c:59:44:eb:
90:5c:f2:0d:01:bc:b0:b1:4b:72:d4:5a:9e:1e:0c:f8:46:9c:
df:16:18:2e:30:05:7c:4f:e8:a1:7e:fa:30:ea:a2:9f:72:b8:
e0:ee:b3:c4:d0:d2:d7:ee:10:f6:5b:f9:f0:d1:38:91:25:43:
cc:3b:1f:bd:30:13:b2:93:21:13:0e:16:ee:30:a8:bf:55:82:
9a:1a:09:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org