Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/b3TddEb6sW_DgcMe8BngHS6vX5A.roa
File: b3TddEb6sW_DgcMe8BngHS6vX5A.roa (raw, json)
Hash identifier: VI2qkq25JobRLMTlg42EZQCJJtPl7ZHHG1M8cMe6A8o=
Subject key identifier: 6F:74:DD:74:46:FA:B1:6F:C3:81:C3:1E:F0:19:E0:1D:2E:AF:5F:90
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07B8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/b3TddEb6sW_DgcMe8BngHS6vX5A.roa
Signing time: Tue 13 Jun 2023 10:54:01 +0000
ROA not before: Tue 13 Jun 2023 10:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976 (0x7b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 10:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6F74DD7446FAB16FC381C31EF019E01D2EAF5F90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:f3:c7:15:3b:ff:af:c1:de:fd:d3:e7:ee:
3b:65:7b:50:0e:e8:24:26:84:dc:52:49:b9:86:00:
22:72:27:66:8e:97:9c:dd:95:b1:31:1d:17:a8:e2:
3e:00:00:de:64:b0:4d:17:82:3d:2c:e3:ad:ca:06:
e5:b7:5c:b7:85:fe:73:ed:fe:ce:45:1b:5c:58:7b:
0b:3f:b4:85:dc:75:ad:8f:0b:a4:cb:65:6c:6f:da:
46:85:c5:3b:b9:14:d0:7b:73:1d:0f:58:bb:07:a3:
a8:e9:d0:3c:d0:84:61:9d:14:0b:e3:d3:bf:dd:15:
2c:d8:48:9a:d1:02:38:82:fd:57:5c:cd:4a:e7:d7:
99:c4:bf:d1:da:5c:7e:09:ef:eb:2a:08:e0:dc:61:
a7:11:1d:a0:5d:5c:8b:d6:9e:99:a2:e6:fb:71:6b:
3a:27:5d:7c:f3:35:85:b4:e2:65:f1:e8:4d:8b:d2:
32:59:18:bc:a2:bf:6d:5b:c7:c5:97:89:fb:56:70:
66:06:53:de:c5:44:b2:a6:23:ed:06:f9:1a:62:9c:
e8:77:8b:a9:74:85:11:09:b2:ea:79:fe:01:41:8c:
67:0a:32:cd:3e:20:54:27:d1:f9:e5:bd:48:6a:dc:
6f:e7:02:b6:8b:96:38:7b:fa:52:ec:e0:5f:14:f7:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:DD:74:46:FA:B1:6F:C3:81:C3:1E:F0:19:E0:1D:2E:AF:5F:90
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/b3TddEb6sW_DgcMe8BngHS6vX5A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
64:cb:da:b6:b7:6a:e5:c7:cd:c1:c5:b1:4f:d2:0a:e2:55:5b:
97:14:de:d7:54:7c:f9:1b:aa:78:9b:07:9f:b3:4f:82:75:62:
b9:32:c4:aa:49:a4:82:6f:99:be:87:3c:c6:7c:97:bc:83:9f:
2c:d9:87:e4:85:0d:60:49:ed:6c:ea:d2:0a:41:99:8c:8b:31:
e5:d5:58:f2:7c:9c:98:7e:52:5d:9b:7b:96:b3:98:43:76:dc:
c2:7e:80:ed:6c:16:bc:43:1b:d1:7f:bd:43:d8:93:03:7d:a3:
d7:e3:0a:f2:8c:24:3f:92:27:c6:91:d8:ce:94:1c:4f:f4:cb:
bc:d1:3d:b0:8c:46:16:58:82:14:3c:43:bd:ac:a5:08:fe:d7:
57:84:8c:dd:b7:2f:91:e7:37:1c:a2:c9:c0:53:89:49:48:f8:
6c:d3:a6:36:2f:7f:8b:36:cf:75:0e:c1:e4:11:96:e2:f4:3c:
79:34:59:dd:a2:24:68:33:db:fa:92:60:e5:5a:c2:71:93:91:
4e:44:14:7b:7a:64:28:d5:f4:be:e0:16:1e:08:33:71:08:26:
7b:3b:40:41:3d:64:48:94:1b:4b:83:05:75:a1:c5:e2:c7:bf:
cc:a9:a6:23:0d:bd:b4:74:bb:e0:95:d7:d9:a3:62:ee:d9:9a:
ad:01:5f:42
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
MDU0MDFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDZGNzRERDc0NDZGQUIx
NkZDMzgxQzMxRUYwMTlFMDFEMkVBRjVGOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAafPHFTv/r8He/dPn7jtle1AO6CQmhNxSSbmGACJyJ2aOl5zd
lbExHReo4j4AAN5ksE0Xgj0s463KBuW3XLeF/nPt/s5FG1xYews/tIXcda2PC6TL
ZWxv2kaFxTu5FNB7cx0PWLsHo6jp0DzQhGGdFAvj07/dFSzYSJrRAjiC/VdczUrn
15nEv9HaXH4J7+sqCODcYacRHaBdXIvWnpmi5vtxazonXXzzNYW04mXx6E2L0jJZ
GLyiv21bx8WXiftWcGYGU97FRLKmI+0G+RpinOh3i6l0hREJsup5/gFBjGcKMs0+
IFQn0fnlvUhq3G/nAraLljh7+lLs4F8U95+3AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUb3TddEb6sW/DgcMe8BngHS6vX5AwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvYjNUZGRFYjZzV19E
Z2NNZThCbmdIUzZ2WDVBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAZMvatrdq5cfNwcWxT9IK4lVblxTe
11R8+RuqeJsHn7NPgnViuTLEqkmkgm+Zvoc8xnyXvIOfLNmH5IUNYEntbOrSCkGZ
jIsx5dVY8nycmH5SXZt7lrOYQ3bcwn6A7WwWvEMb0X+9Q9iTA32j1+MK8owkP5In
xpHYzpQcT/TLvNE9sIxGFliCFDxDvaylCP7XV4SM3bcvkec3HKLJwFOJSUj4bNOm
Ni9/izbPdQ7B5BGW4vQ8eTRZ3aIkaDPb+pJg5VrCcZORTkQUe3pkKNX0vuAWHggz
cQgmeztAQT1kSJQbS4MFdaHF4se/zKmmIw29tHS74JXX2aNi7tmarQFfQg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org