Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/YzUDd4fihznNE9BXXaZ2FBYRyMI.roa
File: YzUDd4fihznNE9BXXaZ2FBYRyMI.roa (raw, json)
Hash identifier: CfJ34qRbeZ+6eKpMivRVrrWG/j5OgJpP3OQTWRj39WU=
Subject key identifier: 63:35:03:77:87:E2:87:39:CD:13:D0:57:5D:A6:76:14:16:11:C8:C2
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07FC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/YzUDd4fihznNE9BXXaZ2FBYRyMI.roa
Signing time: Tue 13 Jun 2023 19:24:10 +0000
ROA not before: Tue 13 Jun 2023 19:24:10 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2044 (0x7fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 19:24:10 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6335037787E28739CD13D0575DA676141611C8C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:57:67:d4:10:5c:b4:c4:39:1e:72:c7:aa:
5d:52:68:e8:5c:f8:27:8b:ac:76:3d:a7:9d:14:13:
46:4d:bd:83:4c:1c:a7:fc:09:10:cc:dd:84:69:3f:
21:e7:06:71:f0:e0:57:35:c2:55:13:43:a5:3e:92:
bc:22:aa:18:4a:51:7a:95:e4:8d:5d:ff:a1:f6:28:
2e:82:51:fe:20:a6:8c:0a:a9:1c:16:1b:17:7a:df:
ca:a6:70:60:57:52:d7:00:4b:86:bb:7b:cd:80:bb:
5e:28:7d:b8:5b:36:8e:3d:8a:a6:07:22:8c:53:cd:
7d:ad:45:fb:df:6b:b0:00:ec:b4:81:17:54:0a:94:
84:03:cf:5d:e5:6a:59:4f:27:d6:f5:67:46:f4:70:
16:9a:af:34:26:db:5f:7c:bc:9d:2b:8a:34:f7:5c:
50:7a:8b:20:71:c9:fb:5d:31:73:d4:99:26:77:e3:
a8:49:fc:3d:03:ee:b8:87:04:30:a6:c7:8b:3c:05:
d1:9e:18:2d:48:f3:90:e1:2e:51:de:f9:66:fe:b8:
24:62:65:b9:43:4f:e3:a0:e5:86:8d:70:ef:f8:b6:
d9:58:e8:3a:f5:db:b6:df:a6:2a:bc:91:42:64:30:
07:dd:cd:d8:97:32:7c:ed:66:42:a5:ba:c1:f9:ad:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:03:77:87:E2:87:39:CD:13:D0:57:5D:A6:76:14:16:11:C8:C2
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/YzUDd4fihznNE9BXXaZ2FBYRyMI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
98:6d:12:0a:14:0d:48:cd:8f:79:f2:c1:e1:c9:e3:9b:25:af:
6e:c3:48:8c:48:5e:b2:18:80:4b:b4:85:0d:1d:58:c5:df:04:
58:ee:a1:68:1f:0f:d2:94:28:75:7c:c4:00:8d:0a:d5:f0:fe:
70:f7:b0:60:6e:ef:10:54:ae:8b:2d:6f:6c:bc:45:aa:ad:63:
6a:0c:82:40:7a:62:de:1e:f0:c6:10:e6:dc:18:19:c4:e7:e9:
c3:a4:35:15:07:f1:b4:ad:b5:69:c3:44:45:1b:c3:e2:c1:5a:
f1:1a:43:ff:4c:3e:94:36:e5:f3:90:43:56:f6:54:bb:43:8f:
d2:08:ee:18:ab:2b:2a:9c:90:98:05:e8:12:96:8a:ee:a8:47:
1a:0b:54:0c:cb:5d:ab:a1:a1:88:c9:2b:6a:b3:d7:76:53:58:
4d:5d:f6:47:45:61:30:ed:53:56:5b:c1:37:33:60:b0:cc:2e:
d6:bf:4e:96:76:f0:7b:ca:68:13:ca:ee:0a:fe:65:e7:6e:8b:
ae:67:b2:53:a3:d2:0f:f5:f6:0d:a4:a2:4c:2c:a0:00:d9:e4:
03:d7:4d:74:4a:02:17:67:e4:87:b6:7f:2a:aa:30:96:38:f7:
33:47:dd:63:f9:bd:fc:04:03:c3:1d:da:50:23:86:94:16:82:
b1:38:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org