Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/WPVkJhcTKG1YTHxVbOtsw-eeLIs.roa
File: WPVkJhcTKG1YTHxVbOtsw-eeLIs.roa (raw, json)
Hash identifier: w4d8otZCgpNKP/JYzv8FW9bCRSELd09YeY3mCJ/oxU4=
Subject key identifier: 58:F5:64:26:17:13:28:6D:58:4C:7C:55:6C:EB:6C:C3:E7:9E:2C:8B
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07CC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/WPVkJhcTKG1YTHxVbOtsw-eeLIs.roa
Signing time: Tue 13 Jun 2023 13:24:03 +0000
ROA not before: Tue 13 Jun 2023 13:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 13:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=58F564261713286D584C7C556CEB6CC3E79E2C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:14:31:9e:52:d9:ae:b5:14:77:21:35:60:
17:08:60:7f:34:d5:80:0e:ca:51:d2:c2:dc:f1:b6:
a3:ce:a8:14:ee:2c:b7:88:60:b9:ac:93:dd:37:44:
e5:79:6f:68:09:3c:88:91:df:11:bf:d4:cb:2a:35:
d1:5c:89:76:e3:ae:63:9d:5c:92:db:51:76:1b:f6:
8b:5c:18:98:b8:bc:35:19:47:b7:30:4d:77:3a:c6:
eb:22:7b:ee:72:91:a3:20:66:36:cb:c4:b6:4b:f6:
d9:0f:5d:44:7f:31:a6:89:cb:ab:02:3e:ae:15:39:
01:e7:ef:bd:e3:2d:e0:bb:48:6c:aa:e9:f1:22:21:
5f:91:13:95:f6:22:fb:72:c9:46:ad:2b:e3:18:eb:
53:c2:0c:65:f0:ae:a0:0f:b2:5d:88:3c:f7:f8:cf:
d2:53:2c:a5:54:b4:e8:30:51:b0:ab:7a:cd:62:eb:
28:8b:5c:91:2a:29:ae:91:ac:e8:e4:d3:e5:f9:c9:
08:24:68:c4:60:65:ab:ae:95:1c:91:a2:bd:0a:c2:
b2:97:f6:7a:f8:6b:0a:81:bb:d7:14:2e:b2:d2:24:
58:75:04:bd:bc:21:dc:66:2f:e7:4e:b5:d3:8d:38:
b8:12:81:43:a5:9a:ee:85:a7:b5:ff:3e:3d:96:81:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F5:64:26:17:13:28:6D:58:4C:7C:55:6C:EB:6C:C3:E7:9E:2C:8B
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/WPVkJhcTKG1YTHxVbOtsw-eeLIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:26:d2:0d:e7:0a:33:22:17:bc:5a:9d:09:04:8e:07:5d:c1:
51:35:75:b6:16:49:01:90:7f:b9:80:c8:1f:58:6b:be:99:39:
6b:09:67:ef:8d:de:70:7e:56:49:ad:ad:f2:e3:a5:fc:a9:d9:
b4:77:f7:f6:83:3b:6f:50:83:bf:ea:ba:64:02:20:c9:b6:88:
28:27:68:d4:3f:e7:e8:0c:68:9a:70:00:c9:85:d4:e6:99:4f:
9d:2f:b1:43:5c:0f:fc:c4:c0:8a:bc:fa:35:91:b3:f8:30:4b:
89:39:41:30:c3:ac:f1:1c:d5:7e:7c:d0:cf:52:f9:ee:ea:c4:
8c:1f:e4:56:7a:13:97:95:99:21:f6:83:87:a4:d7:a2:2e:42:
4e:ed:06:04:aa:41:f6:c5:23:72:76:3b:6f:63:31:78:3b:9d:
51:7e:0d:da:81:1b:8c:05:24:6c:e2:c7:99:50:49:67:33:fa:
ea:b9:cc:4c:c2:a8:53:12:ec:61:51:5b:18:f8:b3:37:4c:27:
84:46:ab:ac:f2:70:5a:e7:a9:1a:69:fb:c5:1e:5b:01:24:96:
94:70:e1:27:a3:18:1a:22:48:f6:1b:ec:55:7f:5e:e4:29:c9:
7d:77:7d:53:e8:61:36:29:31:f0:57:7e:91:85:45:74:93:97:
79:d3:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org