Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/REVhIRVexZxkLU1lFEaC9CEsHlo.roa
File: REVhIRVexZxkLU1lFEaC9CEsHlo.roa (raw, json)
Hash identifier: KqMRhcDNeyyNyMakqBKGmEBB9N0j4hYGUSon8MfT2GQ=
Subject key identifier: 44:45:61:21:15:5E:C5:9C:64:2D:4D:65:14:46:82:F4:21:2C:1E:5A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0828
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/REVhIRVexZxkLU1lFEaC9CEsHlo.roa
Signing time: Wed 14 Jun 2023 00:54:01 +0000
ROA not before: Wed 14 Jun 2023 00:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 00:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=44456121155EC59C642D4D65144682F4212C1E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:cd:74:0d:74:40:aa:3d:6c:0b:0b:b3:36:
29:c1:17:c8:43:6f:76:8f:96:2c:52:57:8a:6c:e6:
fe:3c:c1:ff:ac:c6:99:b3:db:40:22:2a:e1:95:20:
d2:9f:11:73:e3:75:fe:47:25:b8:ff:a7:4e:d8:1e:
80:f6:fa:da:d7:f6:c9:aa:b0:ef:45:45:e3:69:cb:
1a:ba:b6:7e:c2:77:06:e7:1d:91:41:e0:bc:72:50:
44:6f:21:3f:3f:47:81:3f:01:16:29:06:27:75:6f:
d9:4a:fd:3a:7e:7e:7a:f3:ed:6f:c4:60:b8:aa:5c:
0f:86:04:71:5b:8a:cc:39:34:fd:43:b6:9c:ed:6b:
1c:b8:8c:58:18:0b:52:0c:c7:90:38:fa:36:7c:60:
0e:5d:cc:62:01:52:0e:7d:f7:db:ef:e9:be:98:6d:
5c:b3:2e:c3:88:c0:f3:ef:2e:14:eb:ab:26:0a:a6:
c9:a1:e7:0a:0f:f9:f8:fd:5e:b8:68:39:b3:c0:9b:
0d:e4:ea:2d:14:a2:3b:8b:68:70:2c:a6:d3:2a:61:
e8:98:9f:49:db:c9:21:25:4f:eb:d8:1a:bb:9a:1d:
f1:65:b4:a4:78:f2:85:14:d7:0c:62:a6:83:73:73:
32:2f:a4:4e:14:e7:80:c6:bc:dd:d7:62:8b:b0:09:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:61:21:15:5E:C5:9C:64:2D:4D:65:14:46:82:F4:21:2C:1E:5A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/REVhIRVexZxkLU1lFEaC9CEsHlo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
34:15:33:23:ca:ed:cf:af:82:1d:fc:d5:17:39:4c:ff:7e:bd:
53:d3:fd:82:f6:1b:e6:41:3a:04:ec:09:3d:9d:d5:22:43:e2:
57:5d:47:cd:4c:76:60:69:95:b4:8c:3b:0e:63:fa:8d:00:5e:
4f:64:51:38:00:b4:a8:ac:69:7d:c9:17:b5:e3:a1:76:02:27:
c8:eb:73:83:10:fc:13:9b:f2:f5:06:6e:54:10:b9:1a:3d:df:
e3:97:20:ad:60:75:f8:ab:55:fa:cb:bd:02:30:22:6d:eb:65:
51:5a:cb:1a:9a:06:74:4b:71:24:a3:56:1e:13:65:c4:7f:2d:
7b:eb:c7:cd:32:35:f2:56:83:bd:69:4d:17:ec:10:7e:c4:a6:
cc:01:57:e1:61:92:6b:dc:f3:99:75:82:94:43:60:a8:dc:f3:
dc:86:4d:ad:ee:5b:5a:11:97:e6:14:14:75:a7:b2:9c:ed:34:
7b:03:c6:8c:07:b8:c6:36:ef:88:78:ed:fd:de:c0:ed:15:da:
26:67:47:ba:37:23:c5:cc:24:34:37:80:41:f0:e8:77:eb:45:
21:55:5d:49:38:16:77:02:d1:f5:b2:0b:12:68:2e:f3:a6:66:
8f:79:62:0d:cf:23:9d:b0:20:b2:5c:6f:04:e6:f9:ac:d1:e2:
40:b2:c5:77
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQw
MDU0MDFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDQ0NDU2MTIxMTU1RUM1
OUM2NDJENEQ2NTE0NDY4MkY0MjEyQzFFNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOW810DXRAqj1sCwuzNinBF8hDb3aPlixSV4ps5v48wf+sxpmz
20AiKuGVINKfEXPjdf5HJbj/p07YHoD2+trX9smqsO9FReNpyxq6tn7CdwbnHZFB
4LxyUERvIT8/R4E/ARYpBid1b9lK/Tp+fnrz7W/EYLiqXA+GBHFbisw5NP1Dtpzt
axy4jFgYC1IMx5A4+jZ8YA5dzGIBUg5999vv6b6YbVyzLsOIwPPvLhTrqyYKpsmh
5woP+fj9XrhoObPAmw3k6i0UojuLaHAsptMqYeiYn0nbySElT+vYGruaHfFltKR4
8oUU1wxipoNzczIvpE4U54DGvN3XYouwCcS5AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUREVhIRVexZxkLU1lFEaC9CEsHlowHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvUkVWaElSVmV4Wnhr
TFUxbEZFYUM5Q0VzSGxvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEANBUzI8rtz6+CHfzVFzlM/369U9P9
gvYb5kE6BOwJPZ3VIkPiV11HzUx2YGmVtIw7DmP6jQBeT2RROAC0qKxpfckXteOh
dgInyOtzgxD8E5vy9QZuVBC5Gj3f45cgrWB1+KtV+su9AjAibetlUVrLGpoGdEtx
JKNWHhNlxH8te+vHzTI18laDvWlNF+wQfsSmzAFX4WGSa9zzmXWClENgqNzz3IZN
re5bWhGX5hQUdaeynO00ewPGjAe4xjbviHjt/d7A7RXaJmdHujcjxcwkNDeAQfDo
d+tFIVVdSTgWdwLR9bILEmgu86Zmj3liDc8jnbAgslxvBOb5rNHiQLLFdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org