Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/S5HbTb8obuJgH0xPV0zfuz00Bos.roa
File: S5HbTb8obuJgH0xPV0zfuz00Bos.roa (raw, json)
Hash identifier: n0UDEX+9aW9zL9cM8g2NnLc4wXaGT4SM0vsYF54muYI=
Subject key identifier: 4B:91:DB:4D:BF:28:6E:E2:60:1F:4C:4F:57:4C:DF:BB:3D:34:06:8B
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 090C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/S5HbTb8obuJgH0xPV0zfuz00Bos.roa
Signing time: Thu 15 Jun 2023 05:24:08 +0000
ROA not before: Thu 15 Jun 2023 05:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2316 (0x90c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 05:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4B91DB4DBF286EE2601F4C4F574CDFBB3D34068B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:45:c9:56:d7:dc:bc:21:73:a4:3d:55:73:
d2:eb:8f:bf:79:85:49:ae:88:46:38:da:fb:12:5c:
fc:d9:7c:8f:28:88:99:64:af:44:51:ca:da:8a:e3:
c5:2a:ea:65:b2:64:ab:8a:43:b0:2b:c1:5b:a7:93:
5e:36:c5:b0:92:c7:6c:23:c9:0d:f1:aa:a1:45:d2:
50:ad:41:ec:95:d6:83:df:65:64:ee:09:f0:18:2e:
ca:1e:04:bf:e3:21:b0:9e:dd:4e:09:22:16:11:6e:
f9:6c:14:ce:0e:eb:34:02:6d:f6:7e:ca:64:6c:28:
57:37:b4:3d:6d:97:7c:be:2d:27:f0:1f:e1:5e:b9:
a0:3b:7f:be:0f:bc:7a:d1:1a:70:fc:eb:e6:96:f9:
1e:73:07:88:e1:34:41:d9:00:41:3e:5a:fd:39:03:
44:6a:e1:ae:78:f0:82:cc:52:59:72:35:81:e8:c5:
d4:48:50:0d:0a:31:f7:e9:b7:d8:8e:f4:08:26:63:
23:d4:cd:78:5c:9e:a8:33:97:aa:65:5c:29:97:7a:
af:ee:42:51:6e:98:21:71:18:21:ea:f2:b5:d0:f5:
c0:5f:86:be:bf:7d:76:20:33:fc:7e:5f:20:be:d4:
05:7b:ec:9e:e9:9d:4d:6e:c4:1b:bd:b8:3b:50:a4:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:DB:4D:BF:28:6E:E2:60:1F:4C:4F:57:4C:DF:BB:3D:34:06:8B
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/S5HbTb8obuJgH0xPV0zfuz00Bos.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
75:49:68:7f:17:3a:88:74:ca:40:39:53:ac:f2:57:ad:5e:c4:
2f:b4:4e:a7:58:a3:af:cd:b0:b5:c2:73:ae:0a:68:9b:68:80:
9c:c1:1e:1a:fc:ef:ae:f4:f9:d2:0d:c3:0a:21:a5:ae:3a:25:
e2:e4:08:2a:19:8f:df:16:23:d0:96:27:f7:22:5f:1c:51:17:
a8:b6:ab:9a:58:f9:e4:06:be:cc:4e:e0:7e:e9:da:4e:95:15:
45:d4:72:06:21:ae:2c:8c:28:be:e5:9e:1b:8a:64:4d:a9:cd:
36:be:e1:89:3c:6a:70:a6:19:13:65:5d:63:6f:af:bf:4b:32:
34:45:28:af:82:8e:2b:83:d0:6a:1e:b1:e5:b0:56:52:41:e6:
67:c4:82:5a:53:9c:e8:d6:06:c4:4f:23:b0:c4:79:aa:2e:30:
e0:c8:cd:a6:d4:f0:b9:ee:14:5c:f2:97:c8:66:0d:c0:7d:25:
31:e7:09:50:52:2f:2c:c1:12:9e:07:e5:f0:54:8c:78:72:13:
b9:c8:7c:60:69:92:fd:fe:08:58:1e:5e:ca:04:8f:66:41:59:
c7:46:b9:00:a9:3d:5e:b8:01:d1:39:71:5c:cd:23:5d:e9:67:
78:33:d4:99:83:10:66:13:76:b7:b7:74:72:1c:81:86:ef:ad:
30:24:7b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org