Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/UpHl1i3sNZwgj_XwRwJT_wfFHTs.roa
File: UpHl1i3sNZwgj_XwRwJT_wfFHTs.roa (raw, json)
Hash identifier: WJwsuAZjDBEn/vI0eP3eEDaLKz5Ubyx1wvRu2zSzstQ=
Subject key identifier: 52:91:E5:D6:2D:EC:35:9C:20:8F:F5:F0:47:02:53:FF:07:C5:1D:3B
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07AC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/UpHl1i3sNZwgj_XwRwJT_wfFHTs.roa
Signing time: Tue 13 Jun 2023 09:24:10 +0000
ROA not before: Tue 13 Jun 2023 09:24:10 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1964 (0x7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 09:24:10 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5291E5D62DEC359C208FF5F0470253FF07C51D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:49:fb:ad:b9:15:bd:63:c8:63:ac:9b:72:
36:0b:b2:7a:9c:67:97:7f:38:b2:68:d5:00:62:54:
ab:6f:34:35:78:b2:47:ea:95:51:d0:52:16:37:1b:
d8:14:98:bf:a2:94:e6:ab:01:21:5a:7b:65:ca:2f:
d4:5b:e3:b6:7c:4f:1e:19:5a:80:e0:85:8d:c5:b3:
4c:26:b1:86:9a:eb:7d:3e:75:51:e4:cc:f6:c8:ae:
31:54:54:3d:37:c0:bb:e8:f9:ec:1a:e1:28:80:a6:
9a:c5:90:68:10:b4:5e:99:94:5e:2a:8f:f1:40:f8:
58:40:a0:72:96:d9:07:58:7e:84:1c:14:68:b9:82:
96:48:53:2c:88:99:2e:60:cb:31:e3:7d:68:95:ef:
46:6c:2f:98:12:c4:8c:fd:49:7c:a6:5f:ac:79:cc:
ef:19:18:c8:9f:13:51:6c:44:27:0d:fb:d4:14:bf:
ac:99:a5:3e:1c:d0:db:b3:6f:8f:7d:ac:f0:36:16:
69:56:7a:da:ee:dd:53:03:5c:81:4a:28:5f:0d:cc:
3e:5e:59:82:21:49:9d:7e:a7:c6:ba:6d:6c:c9:99:
ab:0c:bc:35:7e:90:89:80:d0:bf:c6:80:71:7d:62:
64:57:bc:8a:ed:9c:73:52:a8:02:d7:1d:2a:54:b5:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:91:E5:D6:2D:EC:35:9C:20:8F:F5:F0:47:02:53:FF:07:C5:1D:3B
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/UpHl1i3sNZwgj_XwRwJT_wfFHTs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:79:53:d2:dc:69:93:a3:ad:0d:70:2e:25:50:74:ff:1e:78:
52:bb:d4:6d:5c:8e:f3:d7:a3:bb:0d:04:48:23:5c:27:84:e6:
f3:7a:5e:b2:c0:ec:b3:34:b8:0a:e6:4a:bd:1f:cb:4d:ed:ea:
f3:27:33:39:a4:d3:e7:06:66:6f:f5:d1:01:5b:dd:a7:a1:42:
b9:a6:d3:78:bc:86:2d:61:6e:75:2e:70:50:50:be:21:8f:b7:
e9:2b:bf:8a:b0:0d:2d:3c:f3:a4:f2:2c:33:6e:39:85:ef:c1:
7c:81:14:25:7b:67:cb:00:b4:60:72:75:f1:fe:b2:2b:3a:b3:
8e:c6:8e:ba:7f:3e:0c:cf:b9:25:e2:36:19:ab:21:95:a0:4e:
e8:f8:10:e3:72:65:67:e4:2c:72:c6:a0:70:86:2b:1d:99:70:
1f:ae:6f:0e:dc:4a:25:f5:b6:38:ba:de:e1:1c:78:df:38:8f:
26:64:c6:e6:de:76:68:84:79:b9:bf:95:5b:24:03:52:ad:98:
13:bb:a4:88:91:ea:ee:3a:93:d9:6f:fe:fb:43:41:3e:15:b8:
ab:6e:fb:9c:f2:98:8d:ed:a6:be:df:11:a7:31:fb:a4:0a:0d:
d9:cc:a1:9e:98:1a:bc:a8:85:f9:46:1d:2f:38:e1:68:8d:49:
03:32:28:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org