Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/a1YoviyAxo-ex-F_gr1h83BQ8mg.roa
File: a1YoviyAxo-ex-F_gr1h83BQ8mg.roa (raw, json)
Hash identifier: Po4xnX7o58usuafBKIuW9343ngxXcBUvZzR6mylIiuY=
Subject key identifier: 6B:56:28:BE:2C:80:C6:8F:9E:C7:E1:7F:82:BD:61:F3:70:50:F2:68
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0894
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/a1YoviyAxo-ex-F_gr1h83BQ8mg.roa
Signing time: Wed 14 Jun 2023 14:24:03 +0000
ROA not before: Wed 14 Jun 2023 14:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 14:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6B5628BE2C80C68F9EC7E17F82BD61F37050F268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:2e:50:1e:4c:02:d8:4d:57:f2:07:ac:67:
18:fa:93:3f:5b:83:12:40:8f:d6:8f:db:49:e1:66:
74:01:03:68:5c:df:c0:bc:a6:ed:3d:77:f4:6a:d6:
6f:d5:15:60:ff:a3:13:47:75:7a:1e:e1:f5:72:70:
82:29:a3:0e:9d:60:c9:d5:db:43:37:a1:61:f2:76:
19:80:0a:1e:e9:c1:68:ec:71:b8:27:dd:a5:3e:10:
92:cd:83:f9:b2:69:45:4b:e9:57:58:6e:2b:aa:1f:
47:7e:4e:c5:fb:48:b6:70:7f:67:63:50:76:ee:b6:
f5:2e:d9:05:b2:df:43:04:4c:5d:7a:fd:8a:72:8a:
e1:81:92:40:ad:58:7b:92:a9:aa:58:b7:48:dc:85:
69:43:9c:53:d5:18:e4:dd:d0:89:e7:03:16:39:25:
e3:81:68:de:a1:e5:48:0d:a1:f7:bc:41:a4:f3:49:
cf:36:d6:bc:1f:b5:aa:72:92:83:03:57:b6:2e:7d:
db:58:0d:f5:64:58:16:5e:8b:9e:b5:e1:26:f2:d0:
0c:99:f6:37:76:86:0f:23:5d:aa:fd:91:0a:b6:d3:
8d:91:31:d7:a1:f6:ad:b1:ca:ab:97:c3:02:65:47:
97:d4:9d:e2:1f:07:6b:91:1d:57:8a:88:f6:63:dc:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:56:28:BE:2C:80:C6:8F:9E:C7:E1:7F:82:BD:61:F3:70:50:F2:68
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/a1YoviyAxo-ex-F_gr1h83BQ8mg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
20:38:e4:7b:1c:81:6d:58:14:94:14:60:a9:b5:c2:e2:2a:a5:
7a:79:2c:f7:d2:39:17:d3:6d:6c:0f:50:fc:14:9f:39:b8:35:
02:8d:2d:48:2a:5a:b0:4b:9a:54:21:14:af:9f:b2:54:78:30:
a5:60:61:32:eb:f3:0b:35:bb:c7:ba:14:8f:5e:af:6f:f9:8f:
45:25:84:80:2c:68:75:25:f0:75:2a:bf:5f:ba:09:45:32:ea:
f7:58:46:c8:4e:8d:55:fa:1d:7e:2d:63:57:a2:23:1d:0a:b8:
d3:a1:7f:12:82:b0:38:89:01:96:2f:82:f7:3a:c9:35:92:2b:
84:f5:fb:57:6b:25:56:9f:03:0c:df:23:14:de:39:84:ce:5b:
18:95:3f:7d:31:a6:1b:c4:b4:ae:f8:12:52:fd:42:a6:a8:69:
49:09:27:26:62:55:5c:7f:3a:26:0c:cf:f6:28:2c:de:96:ee:
d8:0a:00:b9:73:8a:b2:92:10:a6:91:41:10:5f:f8:ee:7c:bc:
6a:df:df:d7:e1:64:d9:9f:5d:4b:21:c4:6d:50:a5:d2:d6:26:
7c:7c:62:87:74:c0:5d:05:85:8f:b4:3e:12:9a:93:ea:48:13:
9b:bd:31:8d:f3:f3:82:de:36:00:5e:b0:00:6c:12:28:c9:95:
aa:98:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org