Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/TicjseE1FVerA4R8Dy1uneazJH0.roa
File: TicjseE1FVerA4R8Dy1uneazJH0.roa (raw, json)
Hash identifier: Hfw2QJTkOr6pLkT1z/8aqv+ilttw2tqBgIMB1delOI0=
Subject key identifier: 4E:27:23:B1:E1:35:15:57:AB:03:84:7C:0F:2D:6E:9D:E6:B3:24:7D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0940
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/TicjseE1FVerA4R8Dy1uneazJH0.roa
Signing time: Thu 15 Jun 2023 08:09:29 +0000
ROA not before: Thu 15 Jun 2023 08:09:29 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 08:09:29 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4E2723B1E1351557AB03847C0F2D6E9DE6B3247D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:cd:34:fe:d6:29:93:8c:7d:03:94:4c:f9:
30:f9:a3:5d:25:f0:0e:a4:c6:4b:40:c8:aa:27:d6:
f0:db:2d:f1:8c:bf:3b:59:01:c7:b0:1f:03:c5:d8:
ae:ee:ed:ec:3e:33:40:8b:e8:df:cd:10:01:9c:fa:
9d:30:35:e9:b4:9d:ba:1e:05:ad:37:2e:7b:2e:2f:
9a:84:43:ad:3c:b0:cb:aa:f4:fc:a6:d9:79:72:57:
28:35:04:09:87:01:33:e2:79:f4:fc:4b:60:0a:71:
3b:a0:5b:8a:de:ed:60:82:e6:f8:8a:db:57:0f:17:
0d:a3:5d:4f:a1:d7:53:8f:f6:af:da:19:09:18:75:
8c:29:c0:c5:06:97:b6:75:80:3e:c1:a9:db:20:d3:
a4:8b:d3:13:a1:15:87:e5:0d:7b:73:3b:35:ad:11:
66:d8:a5:4a:a1:4f:ff:4e:e1:ba:47:46:5c:82:96:
08:61:92:07:44:81:7b:b0:b0:51:27:48:e1:35:a2:
ce:67:78:5e:1a:a9:4e:25:cb:b1:fb:e3:ca:08:59:
c5:65:cb:2a:40:83:ec:c6:72:70:1e:a6:15:8f:36:
66:ea:88:d1:93:09:cf:2b:72:a1:9d:f7:9c:75:d9:
5c:a0:bc:c9:11:df:74:f2:ef:63:f9:af:d4:37:d8:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:27:23:B1:E1:35:15:57:AB:03:84:7C:0F:2D:6E:9D:E6:B3:24:7D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/TicjseE1FVerA4R8Dy1uneazJH0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
86:43:e2:1a:34:76:82:e2:9e:61:e9:bf:7e:22:d7:44:dd:ea:
e5:25:48:06:c7:d5:a1:63:b5:40:68:f8:76:df:68:20:6e:65:
49:76:8d:d9:72:4e:a6:3b:a8:8a:b4:cb:4a:65:8b:3e:ab:f6:
aa:84:42:b4:75:a2:20:96:d1:1d:40:d2:bc:91:40:b1:38:31:
7d:c5:57:13:f2:64:75:cc:2f:88:85:a5:d2:89:cc:f5:f5:c7:
44:9c:b8:cf:a4:85:44:7d:9c:ee:5f:39:31:e6:06:5d:0b:6a:
fa:48:47:13:2a:cc:83:69:2b:22:34:34:9b:8a:2a:5d:e6:a0:
26:6c:1a:ae:ed:f0:73:9d:1b:ed:3c:05:06:8f:18:d2:c8:4e:
3f:fb:28:4b:73:25:2f:26:6b:42:bd:c9:31:82:72:39:20:36:
78:20:a6:5b:15:56:8c:4c:e2:b7:be:36:6d:fd:c7:a2:e1:af:
0a:77:c2:fc:71:45:c6:4f:19:2e:c3:2f:d0:0b:82:41:27:a3:
48:b2:c7:da:82:5a:e1:42:7c:7e:a7:c3:77:4d:75:36:6b:d8:
40:91:f9:9e:e1:21:f9:72:4e:ea:4b:59:c7:ef:bd:36:5b:53:
55:91:39:2a:90:a6:24:1d:fc:5c:51:0d:7d:18:f5:33:60:0d:
b9:ec:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org