Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Q0FsIE3AAttcC8BBi0WvfvMR-p8.roa
File: Q0FsIE3AAttcC8BBi0WvfvMR-p8.roa (raw, json)
Hash identifier: ZWXF7i40V8VewRjtk2AUffBvXxUxkGUSOTjtx2xNTcw=
Subject key identifier: 43:41:6C:20:4D:C0:02:DB:5C:0B:C0:41:8B:45:AF:7E:F3:11:FA:9F
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0804
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Q0FsIE3AAttcC8BBi0WvfvMR-p8.roa
Signing time: Tue 13 Jun 2023 20:24:02 +0000
ROA not before: Tue 13 Jun 2023 20:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 20:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=43416C204DC002DB5C0BC0418B45AF7EF311FA9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:a4:48:ff:b1:47:b9:ac:86:8c:1d:07:31:
6f:07:f1:19:4f:95:34:1a:90:24:f0:6b:8d:02:1f:
89:65:1c:9d:d5:e8:78:9f:d8:47:50:1d:52:36:4a:
40:37:57:9e:c6:1c:41:9b:4d:08:e5:16:cf:68:7b:
da:1e:bf:43:a2:4f:d4:b7:7c:b7:db:ff:f3:94:b0:
bf:18:29:a7:16:18:cb:cf:7d:87:9f:1b:a0:c0:ba:
7a:05:eb:14:f6:e0:85:80:9d:c4:03:05:81:e2:68:
9b:47:a9:22:53:b0:ee:70:68:0c:52:ac:44:5b:25:
5a:3e:7f:63:d0:8d:6f:b7:38:99:e9:f5:e7:37:42:
cf:0a:70:6b:ee:e6:20:a0:26:e7:16:73:22:3e:02:
5d:d8:ef:d7:8c:a6:5f:83:30:14:04:e1:1f:cf:70:
df:dc:54:1a:15:8f:1d:8a:69:e3:3e:3b:6e:6a:f4:
7a:99:a2:06:ab:99:bf:1f:2e:f2:a3:7b:2a:6d:6d:
eb:3e:58:1e:32:bb:f6:70:2e:a8:0c:dc:44:30:84:
55:26:3d:9a:41:62:ea:fa:21:b3:5d:f7:1d:5e:6d:
64:9e:4b:bf:6d:df:c9:a3:8a:04:bd:c5:ea:3e:66:
a8:46:a4:39:51:72:b7:03:10:53:d9:52:05:6c:b8:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:6C:20:4D:C0:02:DB:5C:0B:C0:41:8B:45:AF:7E:F3:11:FA:9F
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Q0FsIE3AAttcC8BBi0WvfvMR-p8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:23:cd:2b:cc:f5:d6:95:79:52:6e:61:81:24:e3:58:0f:cf:
b7:fa:7c:2a:2a:f4:f3:fb:e2:49:0c:5c:72:99:fe:ef:17:35:
59:d6:f9:67:6f:75:2e:92:08:7a:03:fd:a4:26:aa:be:58:a3:
08:75:06:dd:c0:9c:48:9f:97:14:1f:c6:68:05:05:7f:15:1b:
a8:60:8f:3f:cb:15:8b:c1:31:09:b7:8d:3e:c3:78:17:77:fd:
09:a6:37:dd:e4:7a:0b:1c:b5:96:ff:ce:c4:ef:99:3d:7d:b8:
ff:ac:15:83:0a:06:f0:81:e8:ff:28:db:af:b9:10:e5:d9:d1:
d3:87:53:79:38:4a:c3:4f:73:f1:86:65:29:a6:00:76:e3:83:
0f:89:eb:69:b4:7c:c3:d4:b3:ab:5b:61:97:b9:da:d2:d6:5a:
46:78:8b:65:05:01:58:9e:6d:76:a7:74:6f:76:3a:30:01:f1:
d1:d3:6e:20:ba:2d:8e:d6:bc:91:01:fd:ea:f2:a0:e4:35:39:
c5:e2:34:75:62:b8:50:dc:b3:47:db:95:f3:45:13:c7:0e:1d:
b1:98:0f:3b:0c:9c:69:43:65:a3:dd:0f:ad:0b:df:14:1c:31:
a3:58:43:80:87:79:3b:4c:95:ec:c6:48:14:ee:b5:4a:7f:2c:
70:20:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org