Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Yuyll2JgDOCpTjUk34AlXUXNKMQ.roa
File: Yuyll2JgDOCpTjUk34AlXUXNKMQ.roa (raw, json)
Hash identifier: pVxL8Z26r47YK09KuNysS0qo9RPpn+EviSgCOIo/AGg=
Subject key identifier: 62:EC:A5:97:62:60:0C:E0:A9:4E:35:24:DF:80:25:5D:45:CD:28:C4
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 083C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Yuyll2JgDOCpTjUk34AlXUXNKMQ.roa
Signing time: Wed 14 Jun 2023 03:24:01 +0000
ROA not before: Wed 14 Jun 2023 03:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 03:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=62ECA59762600CE0A94E3524DF80255D45CD28C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:a0:d3:d3:c0:ce:9e:10:ef:0c:6c:fc:d7:
75:52:d3:4d:58:d4:2d:7b:e2:e9:7d:32:59:6e:dc:
82:a1:56:97:20:40:31:2d:32:68:cb:27:7d:a5:9a:
ca:71:a6:a4:38:b6:b5:e3:69:96:c1:7c:0d:7e:ab:
c9:b2:eb:d9:ca:09:ad:2f:b7:b9:fb:59:4d:7f:08:
f2:c3:76:26:ce:40:b5:8e:1c:68:d6:b7:c4:72:ae:
d7:c1:48:f6:70:3f:a2:4b:85:e6:84:6c:0b:cd:d3:
dd:61:82:9a:e6:e7:99:55:7b:3b:45:e0:26:96:59:
56:c5:d1:4e:d4:2f:54:61:a5:bf:67:0c:7f:13:2c:
93:b6:39:50:71:67:01:89:de:b7:36:a0:e1:a2:c2:
3b:03:e8:2f:52:79:21:4e:b1:4a:03:a6:b1:0a:6b:
48:47:3c:e6:55:ec:16:06:76:2f:7b:d1:3c:47:d8:
10:02:27:d2:54:e1:e8:4e:c9:55:7c:16:4e:56:3e:
6e:03:f5:1a:d6:cf:84:bf:cc:75:6e:d7:a9:8e:8b:
61:88:9d:8f:dd:24:68:cc:4c:1e:9d:64:56:c5:b4:
27:b8:47:56:44:f5:e8:97:a7:08:c1:5a:7f:6a:fe:
20:c4:5c:6c:a5:cf:a0:4f:50:45:d5:5e:54:34:f7:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EC:A5:97:62:60:0C:E0:A9:4E:35:24:DF:80:25:5D:45:CD:28:C4
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Yuyll2JgDOCpTjUk34AlXUXNKMQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:c4:16:3c:08:2c:53:3b:65:c7:28:32:da:44:db:52:00:eb:
7b:1e:9d:95:91:26:23:3b:56:b6:3d:cf:15:18:5d:44:71:d5:
e8:0f:da:b1:5d:12:26:84:e1:da:85:9d:f7:0f:e1:1c:c5:30:
6f:fa:b0:fa:2b:f3:ef:da:67:ef:c5:dd:f6:d3:c4:6d:40:85:
e5:c9:f9:d3:bd:ab:91:87:1e:56:28:41:a8:f1:de:0c:a2:3c:
7b:a9:77:2d:cc:16:55:87:d1:85:b9:2d:4e:14:ef:00:a3:af:
f2:f7:2e:b8:64:b9:b4:4d:5d:5e:6b:ed:a9:0e:e1:5a:ad:e8:
90:89:b5:06:cd:2b:6f:b5:c4:05:b5:a1:af:ef:24:e3:46:d3:
0d:61:05:42:7c:0f:a8:32:18:9e:a0:b1:37:96:0a:1c:e8:f5:
42:f8:dd:5f:45:eb:44:37:c9:a1:c6:d7:6d:68:f7:32:60:b5:
c5:da:2b:f8:d2:d9:7c:22:9c:e8:7c:26:5a:07:2f:8f:ff:43:
ec:19:f6:97:44:0a:33:43:1b:9a:1c:3a:21:dc:3d:a9:65:e7:
a0:08:b4:64:f3:b6:2c:d1:aa:d3:1f:6d:ee:91:77:3e:46:5e:
58:f0:64:fd:7a:d9:d8:9a:67:3d:34:9c:f2:cd:c8:5f:b7:30:
0f:fa:ea:7e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQw
MzI0MDFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDYyRUNBNTk3NjI2MDBD
RTBBOTRFMzUyNERGODAyNTVENDVDRDI4QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6g6DT08DOnhDvDGz813VS001Y1C174ul9Mllu3IKhVpcgQDEt
MmjLJ32lmspxpqQ4trXjaZbBfA1+q8my69nKCa0vt7n7WU1/CPLDdibOQLWOHGjW
t8RyrtfBSPZwP6JLheaEbAvN091hgprm55lVeztF4CaWWVbF0U7UL1Rhpb9nDH8T
LJO2OVBxZwGJ3rc2oOGiwjsD6C9SeSFOsUoDprEKa0hHPOZV7BYGdi970TxH2BAC
J9JU4ehOyVV8Fk5WPm4D9RrWz4S/zHVu16mOi2GInY/dJGjMTB6dZFbFtCe4R1ZE
9eiXpwjBWn9q/iDEXGylz6BPUEXVXlQ09+sfAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUYuyll2JgDOCpTjUk34AlXUXNKMQwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvWXV5bGwySmdET0Nw
VGpVazM0QWxYVVhOS01RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAnMQWPAgsUztlxygy2kTbUgDrex6d
lZEmIztWtj3PFRhdRHHV6A/asV0SJoTh2oWd9w/hHMUwb/qw+ivz79pn78Xd9tPE
bUCF5cn5072rkYceVihBqPHeDKI8e6l3LcwWVYfRhbktThTvAKOv8vcuuGS5tE1d
XmvtqQ7hWq3okIm1Bs0rb7XEBbWhr+8k40bTDWEFQnwPqDIYnqCxN5YKHOj1Qvjd
X0XrRDfJocbXbWj3MmC1xdor+NLZfCKc6HwmWgcvj/9D7Bn2l0QKM0Mbmhw6Idw9
qWXnoAi0ZPO2LNGq0x9t7pF3PkZeWPBk/XrZ2JpnPTSc8s3IX7cwD/rqfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org