Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/TLZXZuEqQ0frtkOAeI4OisiAAmI.roa
File: TLZXZuEqQ0frtkOAeI4OisiAAmI.roa (raw, json)
Hash identifier: cdVG+YtvcLGYm+wJiMYGm6szwjFRhXbM+OGrSHan28U=
Subject key identifier: 4C:B6:57:66:E1:2A:43:47:EB:B6:43:80:78:8E:0E:8A:C8:80:02:62
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08FC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/TLZXZuEqQ0frtkOAeI4OisiAAmI.roa
Signing time: Thu 15 Jun 2023 03:24:08 +0000
ROA not before: Thu 15 Jun 2023 03:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300 (0x8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 03:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4CB65766E12A4347EBB64380788E0E8AC8800262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:ae:7d:a1:51:9a:94:b3:53:91:c4:3b:aa:
28:6f:d4:3a:fd:af:7a:10:00:d4:9f:46:f4:81:ed:
5a:b4:bb:e3:73:e6:ff:1f:94:1c:78:ca:1e:11:90:
18:3d:03:f0:2f:9f:fb:a4:53:9d:95:29:ed:78:5f:
e5:96:88:4d:34:95:b6:73:e7:42:6e:08:96:95:4b:
8d:81:bf:28:4a:27:06:10:1a:1c:ca:77:6f:e7:ad:
08:17:d5:2b:fb:5d:36:79:d1:02:fb:5a:3d:18:27:
30:4d:4b:60:e3:53:aa:56:4b:6b:33:99:4e:50:0c:
17:8b:2f:8d:8f:b2:ca:25:71:57:0d:e8:b2:46:76:
71:d7:4b:3e:92:32:46:69:2f:d9:ef:1f:cd:dd:c1:
8b:e1:f3:bf:11:2e:71:93:10:56:38:7e:ed:f7:99:
3e:7f:22:be:cd:0f:25:ab:8c:65:31:cb:73:b9:cb:
2e:f3:63:74:c8:1a:eb:21:8e:98:fd:98:13:3b:17:
af:2d:78:8b:d7:aa:84:08:2d:6b:09:3e:11:4c:61:
7f:96:d5:9e:eb:ef:00:a7:9c:9b:cd:97:bc:8d:e1:
5e:15:10:6d:6d:01:3d:97:4c:61:d6:c3:6a:26:ba:
ba:3a:df:a5:aa:3d:cd:b1:cb:1d:d2:c1:ab:6e:a2:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:57:66:E1:2A:43:47:EB:B6:43:80:78:8E:0E:8A:C8:80:02:62
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/TLZXZuEqQ0frtkOAeI4OisiAAmI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:cf:74:ce:5b:f9:fe:22:6d:f7:00:e7:a6:07:32:0f:db:74:
c0:6f:fd:06:ac:c6:18:28:ea:cb:a7:c3:60:a1:c1:cc:8d:90:
25:9e:9b:71:83:78:09:d6:83:26:6e:36:5e:d6:86:5a:a6:1a:
2f:fe:48:b3:3e:f0:3a:0a:04:10:fe:cc:e9:d0:ea:7d:c3:1a:
a0:a2:7e:48:2e:4a:ff:8d:1f:ae:99:ed:ba:9d:19:57:7c:3c:
91:71:7a:45:46:05:f4:be:e4:99:45:e2:98:02:13:98:8a:2a:
71:e9:bc:be:b5:2f:e2:9d:76:dd:36:9f:bf:ce:e9:a5:7d:96:
a2:a7:f9:e4:e2:56:f9:90:4e:f1:8f:4e:b6:b5:b6:5d:02:50:
17:a7:a3:38:b3:37:b2:a1:d1:32:26:aa:32:7a:3d:5d:03:10:
dc:f2:02:ea:2f:58:6e:83:4f:a4:ec:5d:11:56:2b:64:54:62:
e4:47:46:d8:1a:23:c4:87:f1:b5:23:04:fe:d5:65:63:43:84:
a0:50:d5:32:a1:93:65:e9:f3:be:1f:28:4a:72:c5:48:05:3f:
23:05:d9:53:cc:93:52:7b:24:7b:f6:bd:11:97:06:02:1e:dd:
65:f5:f8:9f:b3:51:bb:33:07:a2:d4:7b:cf:29:8c:33:69:f9:
38:e2:51:ef
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTUw
MzI0MDhaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDRDQjY1NzY2RTEyQTQz
NDdFQkI2NDM4MDc4OEUwRThBQzg4MDAyNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmmK59oVGalLNTkcQ7qihv1Dr9r3oQANSfRvSB7Vq0u+Nz5v8f
lBx4yh4RkBg9A/Avn/ukU52VKe14X+WWiE00lbZz50JuCJaVS42BvyhKJwYQGhzK
d2/nrQgX1Sv7XTZ50QL7Wj0YJzBNS2DjU6pWS2szmU5QDBeLL42PssolcVcN6LJG
dnHXSz6SMkZpL9nvH83dwYvh878RLnGTEFY4fu33mT5/Ir7NDyWrjGUxy3O5yy7z
Y3TIGushjpj9mBM7F68teIvXqoQILWsJPhFMYX+W1Z7r7wCnnJvNl7yN4V4VEG1t
AT2XTGHWw2omuro636WqPc2xyx3Swatuopq5AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUTLZXZuEqQ0frtkOAeI4OisiAAmIwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvVExaWFp1RXFRMGZy
dGtPQWVJNE9pc2lBQW1JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEASs90zlv5/iJt9wDnpgcyD9t0wG/9
BqzGGCjqy6fDYKHBzI2QJZ6bcYN4CdaDJm42XtaGWqYaL/5Isz7wOgoEEP7M6dDq
fcMaoKJ+SC5K/40frpntup0ZV3w8kXF6RUYF9L7kmUXimAITmIoqcem8vrUv4p12
3Tafv87ppX2Woqf55OJW+ZBO8Y9OtrW2XQJQF6ejOLM3sqHRMiaqMno9XQMQ3PIC
6i9YboNPpOxdEVYrZFRi5EdG2BojxIfxtSME/tVlY0OEoFDVMqGTZenzvh8oSnLF
SAU/IwXZU8yTUnske/a9EZcGAh7dZfX4n7NRuzMHotR7zymMM2n5OOJR7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org