Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Wudh2ix0jEyLsfeEHYZbQOYAY7M.roa
File: Wudh2ix0jEyLsfeEHYZbQOYAY7M.roa (raw, json)
Hash identifier: +Ry6TJ2kPxVcADmZHxuQ8Rl1ccfWXvtlAlMM7lwObzk=
Subject key identifier: 5A:E7:61:DA:2C:74:8C:4C:8B:B1:F7:84:1D:86:5B:40:E6:00:63:B3
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0878
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Wudh2ix0jEyLsfeEHYZbQOYAY7M.roa
Signing time: Wed 14 Jun 2023 10:54:05 +0000
ROA not before: Wed 14 Jun 2023 10:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 10:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5AE761DA2C748C4C8BB1F7841D865B40E60063B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:b4:a0:4e:a3:1f:e5:3f:f9:aa:28:ff:e7:
8a:12:73:c7:8e:6a:0e:01:04:1a:46:f2:19:9e:c0:
7f:72:be:e1:44:7f:46:bb:46:8e:f4:09:94:c8:a0:
d7:a8:7d:30:a8:28:ea:d8:d8:0d:7b:5c:34:4f:94:
90:72:f1:4f:55:30:b2:73:17:a2:e6:1e:15:56:e8:
0d:cc:b5:1d:96:ae:f4:b5:e2:37:25:57:fe:e2:ee:
09:ec:5e:c4:86:62:9d:7b:b3:ac:c1:28:76:a9:b5:
35:f1:25:be:28:11:a2:ce:b2:48:26:47:78:c8:4b:
df:bc:e6:4c:93:56:96:d3:47:2c:5d:52:b7:d8:84:
61:04:24:e7:00:78:23:86:2d:0f:82:72:1e:a2:c4:
5f:18:83:c1:74:f3:dc:e1:8b:27:7c:bc:07:57:28:
34:33:75:19:94:13:b1:ed:a8:61:df:06:4b:42:9a:
9f:d0:14:e1:d6:53:2b:a0:a9:d1:f8:1d:d2:5e:b3:
54:49:6e:4f:d1:05:2a:d0:34:a2:93:87:7f:50:b7:
d2:da:67:ea:90:a3:9f:0d:18:db:eb:47:eb:e7:70:
3c:ab:81:21:61:ba:13:2b:da:c8:bb:55:f5:c9:0d:
8b:1a:88:7b:55:d1:cf:0f:08:7d:55:71:b4:62:92:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E7:61:DA:2C:74:8C:4C:8B:B1:F7:84:1D:86:5B:40:E6:00:63:B3
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Wudh2ix0jEyLsfeEHYZbQOYAY7M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:ba:32:ea:73:c8:a0:17:83:c5:ec:22:d9:95:b8:f8:08:53:
b7:7c:03:27:c1:a9:d3:50:4f:ee:e6:ce:ee:f8:a5:db:b0:39:
91:92:4d:b7:6e:46:c5:ed:2a:93:09:c4:ce:d7:03:36:81:79:
9a:c6:c1:51:33:7e:07:5c:36:f1:5a:a3:b1:9d:23:e5:e1:69:
f7:56:90:51:fd:03:9f:68:4e:9c:ec:3b:44:e7:5f:04:8d:32:
fe:9b:60:f7:62:af:56:6d:b4:8d:de:a7:00:d8:8f:21:0f:0f:
5b:22:6c:22:55:88:c5:ad:d5:44:45:df:2f:10:f5:1b:57:50:
c4:a5:31:f1:9f:e8:f7:0f:8f:6a:94:20:62:b2:39:b7:7c:65:
90:ed:31:9a:59:ac:76:f4:d2:f3:8d:48:fc:26:54:83:92:fe:
31:df:e6:19:1f:f6:ad:b2:2b:9b:ba:3c:26:2c:f1:1f:a9:2b:
5f:dc:f6:7a:64:8e:fb:8d:f8:b1:9d:02:72:80:fa:e6:78:5d:
b0:e1:5d:1b:55:d8:4d:f8:d8:ad:39:4d:b6:7e:40:82:cb:a2:
ad:34:e5:e7:10:8e:82:4d:bb:0a:bf:ab:ce:d7:d9:9f:ed:a5:
7d:0d:ec:27:c7:fe:35:d3:a6:f8:c4:c5:a2:c5:a6:45:dd:81:
45:81:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org