Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/VGBTgaGHeq7VXlTxUs4MQb3S_A0.roa
File: VGBTgaGHeq7VXlTxUs4MQb3S_A0.roa (raw, json)
Hash identifier: 5kSqw00pNfZw9dc6OQYx+1aqMXVUh1k26/hI3AsmOSM=
Subject key identifier: 54:60:53:81:A1:87:7A:AE:D5:5E:54:F1:52:CE:0C:41:BD:D2:FC:0D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 092D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/VGBTgaGHeq7VXlTxUs4MQb3S_A0.roa
Signing time: Thu 15 Jun 2023 06:54:04 +0000
ROA not before: Thu 15 Jun 2023 06:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2349 (0x92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 06:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=54605381A1877AAED55E54F152CE0C41BDD2FC0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:04:64:cb:fa:ad:5e:4a:a6:c1:ff:b5:de:
8d:4f:26:0a:e8:3f:51:c2:84:f0:ac:5b:72:d4:95:
23:f8:63:b7:7d:e7:5d:47:6d:71:51:ca:9d:b3:3a:
20:1a:06:80:ac:87:96:e9:d3:07:97:1c:42:d2:17:
12:78:25:e6:3e:79:0b:30:9a:3f:dd:07:e3:a2:76:
b4:9e:33:74:06:27:d7:b7:f4:8c:50:44:06:64:a2:
aa:b7:af:3f:21:57:99:32:1e:ff:56:06:00:1f:01:
d4:39:b8:ea:0b:9c:b1:9d:27:53:33:24:83:5c:4c:
d4:47:80:30:91:ee:69:98:3d:44:37:93:1d:f2:63:
d1:b2:90:0b:01:df:39:74:d0:5f:7d:b8:ea:07:71:
ee:1e:a2:21:80:26:9c:eb:28:6a:22:f6:bc:17:bf:
50:e4:65:15:22:78:b1:81:23:ff:d4:aa:f7:dc:21:
27:28:08:77:91:04:f7:e0:57:0f:08:68:69:19:33:
1d:fa:9f:e1:1a:ee:67:29:b5:06:02:06:36:8f:a8:
74:dc:13:e4:71:e5:71:e5:01:5b:1d:e5:ff:e5:bb:
71:52:59:34:5e:84:60:8a:71:5a:a2:aa:d0:6a:b2:
a2:7f:65:64:59:39:5e:05:b1:f4:4e:85:7f:a3:e5:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:53:81:A1:87:7A:AE:D5:5E:54:F1:52:CE:0C:41:BD:D2:FC:0D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/VGBTgaGHeq7VXlTxUs4MQb3S_A0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
75:56:cb:d6:6a:1a:c9:ec:79:63:98:be:a2:b1:2a:44:a3:24:
cb:05:67:5e:dd:a4:f9:7b:ad:bc:51:e9:0c:b9:ac:ab:8b:2e:
e5:e6:df:b5:b7:7b:f8:6a:62:c2:d0:7a:00:f4:0e:4a:5e:20:
ef:46:19:d6:37:44:25:f1:ce:bf:9b:17:b4:4e:6a:5a:3f:b7:
fc:7f:df:5d:68:72:45:94:7a:18:42:29:c6:ed:5f:3b:e1:98:
0d:fc:f7:a3:56:bf:7b:2d:f4:c0:de:be:d1:83:76:f9:eb:03:
ec:81:ae:30:fe:7a:82:a5:f3:20:69:f1:04:89:82:3c:95:93:
70:31:31:72:76:94:0f:08:10:05:02:52:ee:46:c0:0e:cf:aa:
fb:1d:c7:84:44:90:02:d2:96:d3:f5:24:1a:6c:14:db:a6:1a:
e9:b4:7a:04:9f:48:74:b4:90:3a:2f:29:13:c0:5e:ee:6d:ee:
1a:d1:f8:76:2a:86:2b:e3:ce:0e:c1:a8:08:14:3f:69:f5:58:
bf:61:29:74:0a:78:f6:98:70:01:37:55:4d:9f:39:b6:08:c8:
28:36:0a:7e:1b:be:ce:95:17:07:1d:3b:4e:39:8d:de:01:27:
bd:37:dc:4a:14:7c:7f:23:26:5b:81:03:c9:0d:d3:eb:fd:52:
43:80:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org