Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/bBTIZTMqqrQDbma93HORAd_A6a8.roa
File: bBTIZTMqqrQDbma93HORAd_A6a8.roa (raw, json)
Hash identifier: coZWNH/K7seVB+R8Z6AiAdUloDdD2ql1y5eRkUJ1uNQ=
Subject key identifier: 6C:14:C8:65:33:2A:AA:B4:03:6E:66:BD:DC:73:91:01:DF:C0:E9:AF
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 080C
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bBTIZTMqqrQDbma93HORAd_A6a8.roa
Signing time: Tue 13 Jun 2023 21:24:00 +0000
ROA not before: Tue 13 Jun 2023 21:24:00 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 21:24:00 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6C14C865332AAAB4036E66BDDC739101DFC0E9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:2e:8e:e7:e9:cf:b6:b1:1b:98:dd:46:87:
15:77:e9:af:70:40:bb:49:01:4b:a6:00:f4:32:1b:
21:3c:1d:66:8d:c5:ed:2b:8a:e3:f8:4a:c1:7b:26:
d9:f4:b1:52:ba:3a:9d:29:81:ac:4d:38:42:a6:c3:
b6:56:29:5b:70:30:cf:07:83:65:0f:29:11:e5:81:
62:13:7f:52:07:d5:6b:42:70:cc:f8:47:3c:00:af:
57:ed:3d:31:30:cf:92:89:92:76:a2:28:cc:14:d6:
c9:7f:f5:ba:9a:50:4d:c3:8c:ed:3d:ca:c8:db:42:
a7:03:13:63:f7:6f:9e:d7:a2:50:40:af:23:d3:4a:
fd:55:ef:9d:85:92:09:4c:9e:fe:8e:25:0e:95:e3:
b9:96:f4:b1:93:32:0a:cc:0e:fb:b0:5b:93:22:86:
ee:4d:a1:d1:2c:d9:7b:56:5d:08:e2:87:10:ea:2d:
ff:45:38:28:88:cb:d0:2a:2f:9d:fc:40:7f:a9:8e:
24:32:6e:7f:5d:cf:15:30:c1:96:c6:e2:96:5b:ae:
9f:f8:de:45:b6:20:31:3a:49:2b:d9:64:23:13:76:
57:85:8e:7a:0d:79:b6:5b:3b:c4:9f:7c:d7:54:11:
bc:e1:da:37:a5:93:ce:45:18:39:44:73:0c:cc:ca:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:C8:65:33:2A:AA:B4:03:6E:66:BD:DC:73:91:01:DF:C0:E9:AF
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bBTIZTMqqrQDbma93HORAd_A6a8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
17:e8:d8:dd:0d:7b:e3:62:35:04:a3:12:5a:5b:ce:29:19:27:
03:78:80:01:d7:62:1e:04:28:9c:03:6e:a2:dd:d9:04:33:55:
8e:ce:eb:a0:50:93:8c:53:14:26:7e:b3:8b:83:fe:ca:3a:1c:
be:4c:60:df:ea:bc:15:d2:56:30:3f:7d:86:53:ae:04:f1:9a:
66:13:81:9b:fe:3d:27:38:00:ec:25:7f:e8:6a:6e:54:ae:67:
4b:5b:fe:d1:93:45:f8:82:03:68:43:09:76:d0:35:73:f5:9c:
25:29:ae:84:d9:55:8d:a3:4e:6b:ec:a8:c2:91:15:2b:da:3a:
b0:cb:36:0c:d8:1b:90:6b:2d:cb:9f:82:f4:bb:50:00:b9:c3:
b1:d4:b6:fb:d1:1a:31:26:08:f2:bc:a7:62:d6:b2:58:4d:f1:
bc:62:c4:ea:57:79:c1:ad:7b:06:9f:63:97:5a:ba:f6:bd:a8:
7a:b8:e1:6f:79:04:68:18:ee:84:b4:ff:e1:50:c7:ef:14:5f:
98:5d:cc:70:7d:0f:fc:ed:8b:af:d3:dc:0a:43:79:74:d6:37:
16:06:79:e9:cb:e2:8c:1f:b1:52:8f:dc:b9:68:ce:08:c4:a5:
a8:92:0d:b6:2f:2e:c2:9f:09:d2:4e:1d:a6:9a:7e:83:6e:88:
36:12:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----