Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Y6A-xuRVx9mKfoWZizm4_iTVWYg.roa
File: Y6A-xuRVx9mKfoWZizm4_iTVWYg.roa (raw, json)
Hash identifier: PuIIsRaI8UoJENPfS2pONpdTrt5nB3ZNiIvR72K9gvk=
Subject key identifier: 63:A0:3E:C6:E4:55:C7:D9:8A:7E:85:99:8B:39:B8:FE:24:D5:59:88
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08A4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Y6A-xuRVx9mKfoWZizm4_iTVWYg.roa
Signing time: Wed 14 Jun 2023 16:24:11 +0000
ROA not before: Wed 14 Jun 2023 16:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 16:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=63A03EC6E455C7D98A7E85998B39B8FE24D55988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:3d:8d:e8:8e:4d:df:e9:6b:02:53:ab:b6:
4e:d0:97:30:7c:dd:76:cf:01:51:a4:de:60:5a:9a:
e5:79:b5:ea:89:c6:4b:9e:c4:c1:f6:af:06:10:e1:
4b:ef:d2:84:0a:1c:f4:5e:7a:6f:a3:c5:a8:ce:7c:
93:a8:ee:48:03:c0:4e:87:c0:a0:8a:d5:d3:46:07:
59:f7:fc:5f:bd:e2:e9:d9:0d:15:ba:a9:e2:74:58:
97:2e:c5:51:77:33:b5:47:70:1b:e5:22:78:4b:38:
75:85:25:8d:bc:59:b6:df:ba:b2:f0:9b:fb:b4:7f:
4d:fe:c0:cb:b0:cd:9f:71:1d:32:19:67:0d:04:d6:
20:72:97:ec:fc:51:d2:64:b4:6a:0b:d5:65:b5:9a:
16:83:3c:e4:1d:37:b0:b6:bf:d7:e6:1d:2d:4d:59:
ef:35:12:ea:f5:65:c4:12:e6:42:1a:51:31:e2:ee:
ae:50:e7:da:c6:14:a8:2e:3c:8f:30:78:03:82:d8:
1e:d3:ab:1d:a5:59:60:52:c6:7a:c0:1f:ad:b6:2f:
3e:72:57:0e:21:11:08:68:59:c6:5c:71:a5:43:c6:
03:ee:80:f1:14:6a:df:2b:28:f6:4a:af:30:2e:d7:
e6:d5:fa:dc:94:b9:c9:e4:50:8a:ac:68:cf:91:92:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:3E:C6:E4:55:C7:D9:8A:7E:85:99:8B:39:B8:FE:24:D5:59:88
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Y6A-xuRVx9mKfoWZizm4_iTVWYg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:b2:5a:50:a0:44:49:0c:40:af:84:18:a2:3f:c0:71:c3:f5:
04:61:3a:53:4f:0e:d3:66:69:80:d8:13:8a:a4:14:c8:c6:e2:
10:69:b2:59:4f:41:80:f0:22:01:84:91:d8:ec:d8:b0:41:27:
e1:74:23:2d:55:29:c2:87:e6:ea:b2:b6:64:51:2e:68:61:49:
59:35:ed:e3:68:8d:da:19:8a:a5:b9:5e:82:36:34:f4:35:a4:
67:fa:d7:b4:2e:44:b7:9a:64:94:f5:37:05:b2:93:36:e1:53:
b8:fa:42:bb:a7:85:cc:66:a8:76:cd:1a:e0:e1:d9:2e:27:bc:
90:18:b7:cb:a0:cd:a1:92:d5:e1:69:7f:83:64:7e:88:43:66:
1d:ae:bd:da:b5:fc:55:03:47:41:18:d5:2b:40:60:98:00:6a:
37:33:17:6c:7c:19:6d:4a:c6:c7:87:50:cd:8a:0d:35:0c:54:
08:ec:be:60:e2:03:7d:59:76:57:a1:3e:89:83:6b:a9:2a:bf:
35:22:43:43:7c:65:93:ae:6e:74:64:31:15:9f:6f:69:f6:17:
39:61:1a:8f:bf:f7:72:9c:ad:c7:32:14:57:8f:55:05:b8:3f:
ae:9c:0d:ab:06:e3:74:8e:5f:2a:8e:29:1f:f1:a2:f6:ca:e6:
6e:df:69:71
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQx
NjI0MTFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDYzQTAzRUM2RTQ1NUM3
RDk4QTdFODU5OThCMzlCOEZFMjRENTU5ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyDD2N6I5N3+lrAlOrtk7QlzB83XbPAVGk3mBamuV5teqJxkue
xMH2rwYQ4Uvv0oQKHPReem+jxajOfJOo7kgDwE6HwKCK1dNGB1n3/F+94unZDRW6
qeJ0WJcuxVF3M7VHcBvlInhLOHWFJY28WbbfurLwm/u0f03+wMuwzZ9xHTIZZw0E
1iByl+z8UdJktGoL1WW1mhaDPOQdN7C2v9fmHS1NWe81Eur1ZcQS5kIaUTHi7q5Q
59rGFKguPI8weAOC2B7Tqx2lWWBSxnrAH622Lz5yVw4hEQhoWcZccaVDxgPugPEU
at8rKPZKrzAu1+bV+tyUucnkUIqsaM+RkmxlAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUY6A+xuRVx9mKfoWZizm4/iTVWYgwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvWTZBLXh1UlZ4OW1L
Zm9XWml6bTRfaVRWV1lnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAHLJaUKBESQxAr4QYoj/AccP1BGE6
U08O02ZpgNgTiqQUyMbiEGmyWU9BgPAiAYSR2OzYsEEn4XQjLVUpwofm6rK2ZFEu
aGFJWTXt42iN2hmKpblegjY09DWkZ/rXtC5Et5pklPU3BbKTNuFTuPpCu6eFzGao
ds0a4OHZLie8kBi3y6DNoZLV4Wl/g2R+iENmHa692rX8VQNHQRjVK0BgmABqNzMX
bHwZbUrGx4dQzYoNNQxUCOy+YOIDfVl2V6E+iYNrqSq/NSJDQ3xlk65udGQxFZ9v
afYXOWEaj7/3cpytxzIUV49VBbg/rpwNqwbjdI5fKo4pH/Gi9srmbt9pcQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org