Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/bE1JTOufY8y-98TIEhSxVZYRDVA.roa
File: bE1JTOufY8y-98TIEhSxVZYRDVA.roa (raw, json)
Hash identifier: B0go7biSK8KYnT6kQhgc3LywcyST4uS75yfH3gQD+tQ=
Subject key identifier: 6C:4D:49:4C:EB:9F:63:CC:BE:F7:C4:C8:12:14:B1:55:96:11:0D:50
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08C8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bE1JTOufY8y-98TIEhSxVZYRDVA.roa
Signing time: Wed 14 Jun 2023 20:54:07 +0000
ROA not before: Wed 14 Jun 2023 20:54:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 20:54:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6C4D494CEB9F63CCBEF7C4C81214B15596110D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:bb:85:d9:e5:50:8c:38:ee:75:a1:b7:3c:
de:4e:c7:b3:41:ac:bb:d8:21:96:b7:da:03:8d:84:
aa:25:87:42:c1:e9:82:3a:ef:d8:e8:9f:c0:ec:8e:
b9:29:ec:de:9d:b6:fe:09:8d:7b:6e:db:06:30:3a:
ee:4d:b0:47:72:2f:56:d1:41:2d:85:7f:24:64:32:
68:f1:8c:0f:02:e5:bf:ae:85:60:e8:21:5a:c1:ae:
6f:7f:2a:69:c7:03:73:af:f8:f0:07:e8:11:b0:9e:
1c:0b:68:70:e4:f7:93:2c:fd:f8:45:6c:63:c1:d4:
29:39:a1:63:e0:ae:f9:f3:1a:d5:30:4a:51:9b:f5:
d7:09:83:a7:7e:45:f8:ca:13:65:c4:86:0b:e5:d6:
9c:3d:77:68:8b:d4:f8:ed:64:3c:2e:f4:53:ab:50:
b5:d5:ab:c5:04:32:a1:0b:d7:67:a4:6f:6e:7b:b5:
ea:16:52:02:c3:cd:ad:77:d3:7d:34:01:f5:62:6b:
10:6e:c8:6a:1d:3a:d8:2f:b0:e4:47:32:7c:cf:59:
c8:c3:6c:30:62:6d:16:5a:96:89:d2:49:9f:4f:18:
de:8b:b4:c8:d0:38:1d:8f:cf:c3:47:41:1b:e3:b5:
46:d8:ba:d3:6c:db:3f:ae:eb:9d:bb:f0:21:da:72:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4D:49:4C:EB:9F:63:CC:BE:F7:C4:C8:12:14:B1:55:96:11:0D:50
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bE1JTOufY8y-98TIEhSxVZYRDVA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:a1:3b:71:ce:71:b5:1a:f0:e2:3b:62:f4:b5:dc:7f:21:36:
b9:fe:9a:07:23:b2:48:25:6a:46:37:81:be:bd:4c:76:6a:1f:
19:4b:42:85:6c:d8:7c:21:67:79:59:58:d0:f5:35:30:7a:8c:
51:f7:b6:0a:e0:68:ba:3e:ef:28:c9:34:d5:1d:36:a9:6c:3a:
60:12:92:0c:1a:71:21:25:da:a0:91:2f:1d:65:56:4e:59:fe:
be:a6:59:19:68:56:7c:88:f4:c0:f8:39:3b:c8:b3:ba:b9:c2:
c9:1c:27:94:51:27:f9:78:1f:f3:70:45:fe:8b:18:bd:2f:53:
87:8a:b2:52:50:f5:64:75:9a:fd:55:85:9c:8d:45:65:9f:0d:
9f:c2:96:52:7c:50:c7:1e:9e:88:30:a9:e8:ca:47:96:d1:8e:
dd:27:e1:27:ac:5f:8b:13:31:f4:4d:37:bb:74:ae:81:6d:04:
8a:37:13:d2:8b:14:49:56:1c:d4:9e:54:9b:e9:fd:91:cb:7b:
29:e1:c4:34:c1:81:96:36:48:43:db:05:1c:e2:ca:42:ba:b6:
64:5a:f8:d1:01:fc:2f:dc:52:77:9d:11:17:d8:74:f8:c1:13:
c1:d3:30:3b:fb:2f:c7:53:16:59:b2:32:9a:35:85:03:46:48:
4d:6a:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:01 2024 by rpki-client on console-fra.rpki-client.org