Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/TutUORCdMdJuUfEEbhnwElvLbzg.roa
File: TutUORCdMdJuUfEEbhnwElvLbzg.roa (raw, json)
Hash identifier: Zn9WTy4VvO1bC8Pr2o2/mMd23j1sBkSsHEkwlQCbQUM=
Subject key identifier: 4E:EB:54:39:10:9D:31:D2:6E:51:F1:04:6E:19:F0:12:5B:CB:6F:38
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0880
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/TutUORCdMdJuUfEEbhnwElvLbzg.roa
Signing time: Wed 14 Jun 2023 11:54:03 +0000
ROA not before: Wed 14 Jun 2023 11:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2176 (0x880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 11:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4EEB5439109D31D26E51F1046E19F0125BCB6F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:67:13:96:18:87:6f:be:4e:d8:01:33:e6:
bf:c7:9c:56:55:d5:dd:17:db:15:41:b0:76:50:62:
51:1f:f2:f7:87:89:ff:d5:06:ae:54:cf:9b:71:42:
86:97:0a:45:24:71:ea:b4:c7:00:0f:a8:9b:b4:45:
91:ae:01:b4:ea:58:ae:79:18:d4:2d:11:10:79:e0:
99:84:4b:dd:e8:7a:64:50:cf:28:12:59:67:18:4b:
74:db:56:0f:46:f3:ec:31:92:c7:17:5b:bc:0d:2e:
51:26:1e:a5:15:40:5b:b9:ba:91:02:c5:e2:23:7f:
dc:65:b2:59:2f:a7:ba:9c:da:89:a8:62:53:db:ac:
9e:df:03:b4:14:f4:21:65:a8:e1:9b:5d:57:d9:ab:
34:45:47:35:75:75:71:91:57:45:bf:5b:98:05:04:
4e:e6:fa:fe:a7:7e:d6:57:f0:79:4e:eb:27:f4:07:
22:db:c3:94:c9:74:e8:2a:4d:79:69:1d:e0:05:1d:
42:95:50:37:fd:ec:d7:29:fc:58:6d:98:83:8d:af:
5b:ea:20:1a:2a:3e:3f:3b:9f:57:5d:1b:0c:cd:0e:
92:23:c1:b2:72:05:31:fe:5c:40:f4:64:62:10:8b:
5a:83:97:88:34:b1:01:01:f6:07:1b:24:1b:36:93:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EB:54:39:10:9D:31:D2:6E:51:F1:04:6E:19:F0:12:5B:CB:6F:38
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/TutUORCdMdJuUfEEbhnwElvLbzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
93:52:a4:4a:7b:4e:c6:54:93:ab:33:52:fe:da:0a:12:87:16:
f5:b5:6a:40:97:1d:95:fb:ed:84:5f:ae:65:63:cc:31:f6:90:
df:c5:d5:ed:47:3e:68:2c:6b:6f:5d:12:06:1f:ab:8e:a0:0e:
a9:32:09:bf:6e:d1:2e:6e:bd:d3:24:83:aa:0c:9b:e1:b9:9c:
f3:85:a4:44:0e:a2:0e:96:6e:12:da:c6:d5:a2:96:6a:89:b1:
90:e6:28:44:b2:49:e6:7d:e0:47:1f:9f:8e:08:5e:d1:9a:67:
6b:44:15:3a:34:68:fa:b7:85:5a:c4:74:9d:db:9b:0a:12:9d:
cb:9a:89:58:0a:11:26:41:9e:5e:68:4f:e8:a8:cc:ae:b9:f6:
55:5c:2b:ad:37:01:86:cf:ad:f1:3c:77:7a:62:b9:42:3d:17:
35:83:8c:c1:37:9d:a7:1b:1e:91:ab:e8:ac:5e:cf:1b:5e:48:
f0:6e:11:4a:48:65:6c:68:f3:e1:52:37:6e:cd:5f:1a:59:2b:
a6:30:14:a8:0c:43:41:0a:1c:c4:af:b8:a3:10:2b:a5:16:78:
33:79:47:a6:f2:60:d1:8e:6e:1e:28:24:9a:ae:6f:50:ee:7d:
9b:25:1f:78:99:7d:eb:8a:2f:33:7e:d7:5e:1f:0c:2e:29:2c:
c7:18:6c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org