Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Q51eky_Rk4mulDUXRJ28Fe_x6OM.roa
File: Q51eky_Rk4mulDUXRJ28Fe_x6OM.roa (raw, json)
Hash identifier: 69GQVlCLJDp4HEmPiR81BgjM4R4HgG3KnvWG3HcB9Ms=
Subject key identifier: 43:9D:5E:93:2F:D1:93:89:AE:94:35:17:44:9D:BC:15:EF:F1:E8:E3
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0929
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Q51eky_Rk4mulDUXRJ28Fe_x6OM.roa
Signing time: Thu 15 Jun 2023 06:24:19 +0000
ROA not before: Thu 15 Jun 2023 06:24:19 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 06:24:19 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=439D5E932FD19389AE943517449DBC15EFF1E8E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:b8:fb:68:c5:bf:76:dd:ef:fd:ee:53:55:
3a:5f:1d:d2:02:e2:bd:02:2d:50:1b:75:41:a0:26:
c1:4e:20:0f:74:83:86:9a:89:d4:56:73:f8:8c:bb:
c5:d9:69:86:a1:a7:90:4a:42:c5:aa:2a:f6:0d:80:
91:b4:bf:d0:43:af:3b:f6:1f:8f:21:f7:aa:39:88:
f5:44:bd:0c:a5:d4:3a:b7:66:5a:ab:4a:4f:73:e2:
94:af:4d:88:02:17:bf:d3:1f:7b:86:06:23:9c:79:
69:8d:ec:38:11:88:52:03:31:01:0e:c3:e2:10:27:
3d:f8:4c:26:6c:e8:08:0a:73:23:14:b1:d5:a3:3d:
1a:2e:7e:04:8d:5e:85:04:7a:f7:00:76:bb:ac:9a:
f7:5a:96:1a:26:2e:e7:4f:e7:15:a7:82:16:bc:db:
06:8c:f1:cb:58:60:a9:1c:a9:82:f4:14:4b:22:39:
32:25:c0:9f:44:c4:0f:26:fd:46:c4:af:70:c0:73:
d8:7d:8d:00:1f:57:95:81:23:ef:1e:37:06:d5:95:
56:e9:7e:de:7f:3c:40:55:51:ac:a7:1a:d3:c0:57:
45:e0:be:27:e9:87:fa:75:a0:09:24:f5:5f:e1:25:
25:98:54:68:90:86:b3:3d:79:15:c3:88:c0:22:d9:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9D:5E:93:2F:D1:93:89:AE:94:35:17:44:9D:BC:15:EF:F1:E8:E3
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Q51eky_Rk4mulDUXRJ28Fe_x6OM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:7d:db:88:53:fe:d9:37:d4:04:c1:a3:5f:f1:58:35:57:5b:
54:5a:32:09:5d:36:81:88:67:22:63:2e:53:b6:d5:df:fb:89:
17:96:8e:6e:c8:4a:27:1d:f6:73:b2:0f:34:88:ba:5d:e9:3e:
7d:9b:81:65:b3:d2:df:b4:29:3c:ef:45:9d:5d:ba:98:9b:7f:
0c:cc:ad:ec:aa:b8:a5:1e:89:d3:41:1d:ba:e4:65:79:e9:bb:
c7:05:72:f5:eb:54:79:5f:14:34:d9:0b:72:1e:4c:fb:a7:d9:
1c:c8:ec:cf:d5:a2:2e:dc:17:e7:d3:b2:24:8d:34:2b:e5:66:
b2:86:ac:2a:b6:ce:33:aa:64:b8:78:f5:b4:93:f4:3b:28:4a:
09:ad:52:e1:de:b4:47:ac:b9:be:20:97:d2:31:23:32:9d:3f:
c1:fe:15:ce:dc:43:3c:90:ed:bb:2e:1d:86:11:ff:fc:ff:8b:
d5:fa:1e:9f:84:fe:e0:ed:2e:da:56:6e:0f:cf:1c:65:8a:4e:
45:e8:3f:4e:e0:33:02:23:88:98:29:58:a9:93:2c:5e:2b:5d:
b9:1b:69:64:3a:9f:e9:9b:08:57:2d:4a:9a:10:7f:f1:2d:e9:
9c:86:88:54:12:4e:a4:59:79:d0:4e:0d:aa:28:39:d7:24:1c:
0f:f4:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org