Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/VHNwHum8e41HmuoBsu_KopAPKTY.roa
File: VHNwHum8e41HmuoBsu_KopAPKTY.roa (raw, json)
Hash identifier: 0gZzCcv+3B4GFNJU3LjQ8LgQ9SN5pG5toYciBipKkFA=
Subject key identifier: 54:73:70:1E:E9:BC:7B:8D:47:9A:EA:01:B2:EF:CA:A2:90:0F:29:36
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0858
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/VHNwHum8e41HmuoBsu_KopAPKTY.roa
Signing time: Wed 14 Jun 2023 06:54:02 +0000
ROA not before: Wed 14 Jun 2023 06:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 06:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5473701EE9BC7B8D479AEA01B2EFCAA2900F2936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:f9:21:77:7f:e3:20:c8:a6:66:ad:c8:15:
b2:7d:8a:68:3e:8b:f7:f2:fd:69:2a:02:63:ea:98:
f4:e2:37:fc:66:76:ce:46:5b:f4:06:c1:af:17:85:
a5:29:28:0b:c7:ba:f4:bc:c7:02:3d:f5:69:ca:b7:
75:14:4f:3d:14:10:f5:ab:7b:6b:b8:c5:51:6b:01:
97:e7:5f:1b:6b:2f:a4:be:90:82:b9:d1:b2:47:5b:
e7:17:02:94:fb:5c:e9:fc:38:5d:fa:a9:e1:f6:29:
fa:0e:0d:f3:b1:2e:91:39:75:60:c2:38:ba:6b:71:
93:89:81:a9:d3:ca:73:55:3c:bd:f7:e2:5f:16:c3:
89:4e:1e:cd:7c:c8:b5:cf:ef:31:d7:bd:cb:ab:f6:
ce:ba:07:b9:79:5d:33:a9:fd:7d:14:0b:68:56:7e:
01:4b:19:e0:2b:d5:b8:fb:f8:ce:fa:33:d3:50:b6:
6c:96:7b:fb:e1:20:26:bc:54:db:91:30:dd:b1:26:
62:d1:a6:45:41:10:a0:af:c4:c0:91:0d:25:12:25:
de:d6:a5:62:38:d0:13:c5:82:14:53:77:77:1e:64:
b8:c9:cc:8c:16:dd:a6:82:aa:cb:0b:14:2c:3e:5a:
87:d3:50:a7:7b:fe:d0:fb:cb:91:28:e3:f6:c9:34:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:73:70:1E:E9:BC:7B:8D:47:9A:EA:01:B2:EF:CA:A2:90:0F:29:36
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/VHNwHum8e41HmuoBsu_KopAPKTY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
57:e9:bc:64:92:24:1a:fb:72:99:be:0b:cb:d5:b0:89:77:b0:
05:c9:19:d9:0b:4c:d6:c7:a7:e5:9f:3b:b0:77:9d:52:48:cf:
86:2e:b4:28:70:02:d0:75:f2:4d:31:c3:66:bd:66:71:4b:2e:
4b:b7:73:3c:3a:1b:46:39:c9:f7:96:1e:fe:97:70:86:12:5b:
bb:e7:0e:6f:3e:5d:72:9c:0e:1d:24:d1:d8:ee:f2:fe:7a:36:
d8:c9:7a:46:24:ee:f9:ce:6f:18:f7:45:3e:82:3c:bb:69:52:
ab:36:d4:79:58:45:80:f5:51:4d:70:a4:79:f8:aa:80:f4:57:
26:5d:c7:2f:50:93:7a:3c:df:e6:05:b4:22:29:6d:bb:ec:36:
d5:c0:84:cf:04:9e:9c:ba:35:cc:7a:82:e8:dc:09:8c:7c:6e:
14:05:93:f6:d1:5c:fe:79:65:8a:47:f7:67:6a:42:8e:91:4a:
0a:61:f8:79:f0:a5:f7:3b:eb:cf:bb:5c:3a:4e:f6:5f:3e:01:
d8:f7:8a:97:c6:ea:b3:f1:67:67:b0:d6:60:58:5e:af:7f:2a:
7e:3e:cd:c3:b2:6e:80:3a:f6:05:18:4f:71:ed:f9:ce:63:aa:
3a:ba:96:22:be:b2:4c:90:ae:33:a3:43:ee:88:73:99:58:db:
ba:8e:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org