Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ZmnDyhlCr91yvyLcZPz3vKk2OgI.roa
File: ZmnDyhlCr91yvyLcZPz3vKk2OgI.roa (raw, json)
Hash identifier: D7F4pfvaDcmQANNphV4c2d/laFIMG8UUpMlwh/4pE/M=
Subject key identifier: 66:69:C3:CA:19:42:AF:DD:72:BF:22:DC:64:FC:F7:BC:A9:36:3A:02
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 087C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ZmnDyhlCr91yvyLcZPz3vKk2OgI.roa
Signing time: Wed 14 Jun 2023 11:24:11 +0000
ROA not before: Wed 14 Jun 2023 11:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 11:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6669C3CA1942AFDD72BF22DC64FCF7BCA9363A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:43:4f:e9:ab:d4:2e:43:e8:ad:bf:03:68:
39:fb:3c:31:52:4d:6e:67:31:25:ae:d4:d4:53:b3:
9d:9c:1f:18:0b:76:9a:27:49:5e:12:03:c0:c7:3d:
e1:06:81:d4:42:f1:6d:ab:48:3f:cc:73:d1:72:9a:
06:b7:6e:64:39:dc:42:13:b7:29:c1:7f:e2:fe:c9:
17:0c:54:fb:a3:4d:98:5b:2a:8c:67:34:82:f0:db:
2d:be:e5:17:4c:54:f5:37:35:2b:be:81:c9:fa:51:
30:e4:b2:e2:32:89:b2:05:ab:59:51:f1:db:a1:19:
b0:9e:4a:e9:85:79:5d:74:aa:3b:e5:99:82:cc:b6:
f8:0f:2e:96:7e:2b:77:47:d7:0c:56:e0:c8:8b:8e:
83:6c:b5:ef:04:99:62:da:0e:a3:dc:19:91:30:cb:
67:18:93:d6:3e:f2:fb:51:e7:33:1e:a8:4c:e6:ac:
70:af:05:04:1b:98:fb:e0:46:8d:06:8b:00:bc:11:
79:30:b7:cd:c1:07:f7:1c:35:ab:56:2b:01:07:49:
00:e9:49:5c:7c:cb:5b:03:29:4b:16:8d:54:b0:b3:
2d:68:70:b7:59:13:95:8c:01:82:9b:88:14:44:6c:
b8:73:d6:aa:e0:24:75:cd:21:1c:c4:94:58:d2:d8:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:69:C3:CA:19:42:AF:DD:72:BF:22:DC:64:FC:F7:BC:A9:36:3A:02
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ZmnDyhlCr91yvyLcZPz3vKk2OgI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
36:c7:1f:cd:bd:03:8f:46:e4:08:e0:de:3a:bd:ab:c0:2c:9a:
cf:b8:43:9d:b5:f5:ae:52:0a:20:f1:74:49:98:0e:e5:ea:56:
7c:7e:31:fe:30:5b:9e:18:31:d1:ed:57:f2:c4:c4:38:ac:f3:
71:e8:f6:22:48:2c:ac:0a:a3:e3:2e:09:30:b8:cd:c2:25:d4:
b9:b9:97:4e:a4:7a:c5:55:dc:96:5b:26:3b:61:ea:c3:b2:b1:
90:e3:26:73:5c:d7:15:6a:de:3c:da:97:f1:9d:df:6d:fc:82:
ca:43:c0:05:5e:03:46:86:e8:13:23:45:9d:0f:08:f9:10:45:
b5:68:af:9b:e6:ab:a2:8c:8e:bd:91:4d:ff:75:af:e4:91:e8:
d5:e0:5b:c9:d7:fd:2f:a9:22:ad:b0:78:29:25:1b:bb:a4:7f:
5e:26:3a:75:3a:70:a6:64:58:c1:fe:0d:4d:c3:b8:65:39:49:
d1:06:cc:30:f7:2f:f7:a6:21:10:15:60:55:46:91:13:49:93:
3b:87:da:21:1b:b8:0e:78:15:d5:f7:e7:e6:df:4d:b8:b2:5a:
16:f3:5c:f9:9d:ce:62:a1:14:c3:37:e4:bd:9a:e1:de:9e:5d:
55:9c:c0:b1:f5:7b:c2:ff:27:96:6d:8f:2f:39:40:98:30:b9:
e1:e1:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org