Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/RgByRtJ3QkD1krTm_VRLT1kxPVk.roa
File: RgByRtJ3QkD1krTm_VRLT1kxPVk.roa (raw, json)
Hash identifier: Sp9HFiQSs7SyLIXAcvddbOEE1Fw84MBC5zb8AVu3/9k=
Subject key identifier: 46:00:72:46:D2:77:42:40:F5:92:B4:E6:FD:54:4B:4F:59:31:3D:59
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0870
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/RgByRtJ3QkD1krTm_VRLT1kxPVk.roa
Signing time: Wed 14 Jun 2023 09:54:03 +0000
ROA not before: Wed 14 Jun 2023 09:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 09:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=46007246D2774240F592B4E6FD544B4F59313D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:60:ec:be:37:ef:d8:67:29:c4:c7:95:ae:
5d:14:05:cf:12:ef:a5:d8:cd:2c:47:08:df:db:f5:
2c:61:2a:dd:94:d2:17:94:8d:bb:61:16:61:92:b9:
8b:b0:fb:2a:4f:1d:7e:40:b3:72:96:0a:f7:d2:24:
22:88:12:8f:41:62:2d:08:b6:88:a4:70:de:94:e0:
73:9d:81:12:96:b3:73:e8:87:cf:b7:4c:97:48:74:
a6:05:ce:d2:00:de:0f:a0:30:e0:83:a4:48:a3:34:
66:46:c3:4c:c6:ec:5b:58:69:6a:b3:96:43:47:ab:
9d:71:15:5e:35:31:a0:35:68:6a:7c:de:ac:c3:93:
ba:83:e2:3a:bb:ab:3d:c0:e6:e3:06:8a:76:95:8f:
c2:70:43:39:8a:65:d9:01:d3:ed:b4:ef:25:3f:9e:
7c:7f:43:6b:cf:a7:54:bc:39:dd:a7:eb:69:60:59:
54:82:fa:b0:1b:58:38:2f:50:f7:db:33:a0:a3:61:
6f:98:00:c8:32:04:7f:3d:d8:ab:8d:a2:02:27:91:
ea:60:9f:38:c5:fd:6e:15:e7:eb:4b:3f:2b:ef:bd:
8e:1c:92:87:b5:9e:6d:44:a1:c6:18:16:01:89:5f:
e8:ab:eb:0b:fe:8b:8a:2a:a9:12:2a:0c:b5:38:87:
ba:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:00:72:46:D2:77:42:40:F5:92:B4:E6:FD:54:4B:4F:59:31:3D:59
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/RgByRtJ3QkD1krTm_VRLT1kxPVk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
21:42:1f:3b:81:94:d8:90:b8:cb:85:7a:c3:f5:a2:91:a6:4a:
c3:47:45:65:9c:62:f8:cd:df:3e:b6:9b:db:50:81:c8:4b:78:
3d:a8:94:ab:f4:9c:b3:1a:55:ca:be:7a:e5:d6:78:fe:d7:b1:
f5:46:21:b8:ae:69:4b:a9:b0:e2:a0:d8:46:9d:57:1f:8b:ef:
1d:21:80:f5:7d:4d:e2:c4:a1:67:87:5f:7f:f4:d3:8e:75:a1:
8f:ee:7c:3f:35:5a:47:3f:d2:ea:cb:55:8d:f2:59:e7:32:c5:
db:2e:9d:87:e0:a4:b5:69:3c:da:61:fc:2c:ad:1e:0b:b8:84:
73:9a:1d:02:3d:0e:f6:e3:6b:4d:f7:01:38:9e:85:09:47:80:
53:b9:23:3f:db:84:11:8a:90:be:fa:48:87:fa:c0:dc:b7:e0:
ab:ab:e5:cd:5a:26:48:d1:3b:2f:ac:62:10:53:3a:62:72:33:
e1:c0:36:5b:f2:65:48:73:98:4c:8b:9e:37:ef:12:1f:db:30:
5c:83:3c:11:5b:a8:cd:9d:86:93:6e:61:e5:4d:c0:83:5c:49:
9d:00:c0:2b:bf:e1:26:49:d4:12:bd:eb:ab:d1:2c:5b:9e:a1:
88:ca:96:e2:63:e4:d1:db:35:87:4f:ba:ec:3b:70:80:a3:56:
ba:10:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org