Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Xc64wr9S7Ozy3kEVznMcfzcYVTE.roa
File: Xc64wr9S7Ozy3kEVznMcfzcYVTE.roa (raw, json)
Hash identifier: HhtGZOTVwoD/0tmvbMBNK2Qcrd9D2DV+npoG1Pnf2HA=
Subject key identifier: 5D:CE:B8:C2:BF:52:EC:EC:F2:DE:41:15:CE:73:1C:7F:37:18:55:31
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0824
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Xc64wr9S7Ozy3kEVznMcfzcYVTE.roa
Signing time: Wed 14 Jun 2023 00:24:09 +0000
ROA not before: Wed 14 Jun 2023 00:24:09 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2084 (0x824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 00:24:09 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5DCEB8C2BF52ECECF2DE4115CE731C7F37185531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:7a:4e:cc:38:e3:4f:8a:5e:e5:1b:b3:05:
73:e8:cf:e9:6f:14:b7:b6:d7:f8:f2:7a:39:72:6b:
1c:3c:ac:0a:4e:d2:08:8f:78:d8:f0:9e:0b:6d:93:
f7:68:a6:2f:6b:56:2c:46:62:3e:05:24:cc:08:38:
4b:4a:ae:ef:f0:80:b0:75:e5:e2:2a:6d:a0:74:42:
e5:fd:c7:17:74:8c:03:c0:49:fc:3b:da:2c:02:08:
97:11:3c:d3:18:1b:5a:ca:29:5c:aa:06:ab:33:c5:
bc:3a:3d:5c:7b:ce:fe:33:e9:ef:bf:02:26:8f:87:
e0:6b:8d:d9:5c:82:08:1e:9a:1e:c4:95:2b:7e:12:
40:85:45:ac:aa:d1:0c:2b:5f:16:07:83:9f:7c:79:
88:55:9f:fc:43:dd:93:72:8a:64:08:f0:7a:21:fd:
9e:9b:be:db:26:0f:6a:09:80:ea:9c:8d:7c:14:94:
a7:2d:8c:9c:c0:0d:8f:9d:66:50:3e:68:e9:b3:6f:
98:33:03:a7:1c:23:99:07:71:5a:bf:72:ff:54:3f:
90:02:db:01:81:61:4e:92:0d:29:fe:a4:4b:36:bf:
1e:1c:6a:43:2c:30:0b:71:5c:5b:80:86:d6:f8:65:
14:ce:6a:e4:82:59:c5:ad:16:b0:ec:51:e7:99:d1:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CE:B8:C2:BF:52:EC:EC:F2:DE:41:15:CE:73:1C:7F:37:18:55:31
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Xc64wr9S7Ozy3kEVznMcfzcYVTE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
58:39:b8:44:d4:79:5b:d7:96:ce:22:7c:34:45:b4:8e:54:fc:
08:0a:2c:f4:6e:1b:2c:df:49:1e:c5:73:d1:9e:be:1a:a3:27:
9c:56:48:3d:cd:77:a9:d6:b2:d1:b7:59:d0:fc:96:79:32:7d:
f0:e3:de:c4:40:20:97:4c:e7:bc:a7:70:dd:11:80:3e:f6:75:
d9:55:40:04:c0:7c:ae:41:4b:a3:17:7f:17:fb:5e:0a:3a:51:
00:80:d8:9a:7b:32:80:e8:28:de:aa:5b:f4:8a:43:da:d2:2a:
a1:a4:38:83:c0:2e:f0:a8:76:90:de:1e:a0:4d:91:4a:a2:67:
ca:d3:51:0d:be:c9:d8:a3:de:a0:94:33:9b:2d:a0:0f:bc:2f:
9a:6a:71:a5:d1:04:76:b4:a9:bd:53:e8:ae:e0:9e:0c:fd:6c:
c0:f0:3d:55:54:bd:39:31:a0:8e:b5:19:24:2b:fd:0e:8d:15:
ff:09:09:13:f6:c5:9e:14:a3:f0:79:fa:ea:9e:91:bb:bc:d3:
50:f7:8f:b2:a0:58:e9:12:62:5a:63:9d:5e:74:a9:12:5d:65:
1c:28:f8:8b:8a:e4:28:81:ca:03:e7:4e:56:90:40:5e:44:d2:
56:3d:bd:22:81:61:a5:4b:ca:59:87:d6:7a:55:92:cb:37:92:
c1:d5:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org