Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/_kiweDGMAkXYb7VIFyJYJbbNO0A.roa
File: _kiweDGMAkXYb7VIFyJYJbbNO0A.roa (raw, json)
Hash identifier: 9XVu7fqpidlIr+tHCQzkP/0XbDh9OSl3X/ukHluqhSQ=
Subject key identifier: FE:48:B0:78:31:8C:02:45:D8:6F:B5:48:17:22:58:25:B6:CD:3B:40
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08C4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_kiweDGMAkXYb7VIFyJYJbbNO0A.roa
Signing time: Wed 14 Jun 2023 20:24:13 +0000
ROA not before: Wed 14 Jun 2023 20:24:13 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 20:24:13 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=FE48B078318C0245D86FB54817225825B6CD3B40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:ba:86:49:85:75:51:1f:90:c3:56:aa:1a:
91:03:ed:43:19:cc:c8:f3:3a:46:01:ac:39:f2:9b:
ec:69:a9:ec:c0:f3:9f:1d:97:a8:e5:a0:a2:f5:d9:
09:6d:8c:9a:b6:a2:6c:80:1c:19:4c:5d:43:02:f4:
2d:24:8a:47:a5:25:df:fe:86:38:14:d7:12:e7:db:
01:a4:5e:97:f0:1c:02:41:23:5a:de:6d:1a:47:26:
48:34:bb:3a:2a:eb:92:38:8e:bf:6e:1b:40:61:4f:
a5:6f:3c:95:84:4a:3b:b6:00:79:d8:8f:24:67:95:
d3:9e:43:35:5d:f7:07:9d:66:c2:e6:2d:a6:fa:0e:
57:8e:31:14:c8:bd:c4:8e:6e:6d:a4:84:45:aa:3a:
6c:11:40:c9:4e:2e:fc:b3:17:57:26:1c:d7:c3:f5:
11:81:2e:94:a7:71:18:de:b4:27:b7:8d:d5:d4:88:
6f:b1:22:48:a0:44:72:0a:de:1d:e1:0d:b5:0a:95:
f3:29:78:c0:82:c2:13:c8:c2:d1:84:33:cf:5b:b9:
5d:9b:58:de:1e:b5:0a:d7:d6:96:ca:cd:ba:4f:e5:
28:b6:0c:5e:68:92:5e:6b:ab:8c:29:35:a1:0a:21:
8a:88:07:bb:f4:e0:ff:15:18:8f:ff:42:fe:e4:e4:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:48:B0:78:31:8C:02:45:D8:6F:B5:48:17:22:58:25:B6:CD:3B:40
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_kiweDGMAkXYb7VIFyJYJbbNO0A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
48:a2:44:71:58:be:b0:bf:d4:1b:9c:64:08:c9:76:fd:07:05:
80:91:81:f3:63:b8:ba:e0:62:3f:4e:d8:d4:f7:1b:92:ad:e0:
0b:63:01:50:a2:38:c7:61:2a:06:a3:af:28:54:35:82:8e:18:
2f:88:98:bc:07:b4:3b:3f:8b:a1:1b:85:d5:6b:95:ab:9b:92:
2e:94:6d:28:9d:68:97:71:8c:86:e9:54:20:4c:0e:26:a1:b5:
a5:16:eb:3d:23:62:f5:95:6a:0f:79:45:2d:9f:b8:60:4e:5b:
3a:e2:e1:f9:e8:b1:23:c1:a1:4b:1c:f6:4b:09:61:67:b7:da:
ce:87:0b:9f:8d:84:1e:80:fb:46:78:f3:ed:cf:16:43:f3:30:
c9:20:38:f8:d0:3d:76:8a:2f:73:61:98:b2:77:90:b4:09:d2:
92:94:30:0a:af:f7:64:84:b5:94:54:10:ca:35:b3:53:cc:77:
57:63:f5:19:4c:bb:58:91:36:2a:e4:a9:0c:b5:a7:96:f8:3e:
61:5a:e0:50:4f:7f:b9:06:86:ee:14:63:c5:9b:7f:98:08:b6:
e1:a7:d7:36:79:fa:bd:fa:7f:f8:ad:15:8a:73:b0:4e:1d:d9:
e7:99:d5:52:3a:fe:a4:8d:90:9c:8f:cf:d9:86:bf:64:83:54:
d8:ce:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org