Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/bOSRlto85bNqLGoCJL88OJx9Fn4.roa
File: bOSRlto85bNqLGoCJL88OJx9Fn4.roa (raw, json)
Hash identifier: we2NBEtmnbRZVHdoFoNQsWX6HXnLitBW1f1pPtBAAAI=
Subject key identifier: 6C:E4:91:96:DA:3C:E5:B3:6A:2C:6A:02:24:BF:3C:38:9C:7D:16:7E
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0890
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bOSRlto85bNqLGoCJL88OJx9Fn4.roa
Signing time: Wed 14 Jun 2023 13:54:06 +0000
ROA not before: Wed 14 Jun 2023 13:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192 (0x890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 13:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6CE49196DA3CE5B36A2C6A0224BF3C389C7D167E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:60:2d:d8:d1:56:b8:ec:83:26:42:db:02:
33:3f:27:d9:4b:d4:8c:1c:01:31:d7:c4:da:f5:e6:
12:02:7a:21:98:7f:d8:15:91:ab:60:01:a7:fa:a1:
ab:ee:49:bf:35:ff:dc:27:8e:49:d5:73:07:40:24:
51:bc:db:16:23:bf:d6:33:e4:01:71:95:68:a4:17:
67:d3:a6:c6:6f:dc:cc:d3:8a:b4:10:67:4b:0d:df:
32:ed:5d:31:90:22:01:06:42:31:29:2b:03:b3:66:
dd:75:fe:48:82:55:c8:88:8f:92:46:3a:89:c0:41:
19:b6:9d:b7:fd:d3:48:24:9e:17:a9:a0:6e:cc:b6:
ce:a5:67:23:b7:f9:45:8c:76:d9:0f:2e:83:68:a8:
7e:9b:94:42:ae:19:a3:00:ac:44:46:9b:98:4e:e7:
2f:c7:50:5f:96:ec:a2:3c:33:d7:cb:71:d3:53:4c:
3e:77:0b:14:61:ed:82:7d:7c:5b:eb:75:f3:ac:4d:
ec:28:e3:d2:3e:72:08:d6:17:fa:05:f5:b9:b8:85:
2f:27:8a:98:81:e1:09:37:de:46:31:b3:d8:66:76:
e7:84:8b:2b:22:48:42:f3:09:04:41:cc:a5:ec:a0:
a1:2e:d8:58:68:7d:ba:f2:39:ab:f6:00:83:60:88:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E4:91:96:DA:3C:E5:B3:6A:2C:6A:02:24:BF:3C:38:9C:7D:16:7E
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bOSRlto85bNqLGoCJL88OJx9Fn4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
76:c1:f3:d5:ce:fc:2e:15:54:97:71:02:a2:58:77:b5:e0:db:
98:af:ea:88:29:22:44:8f:cb:14:7b:e2:b5:fb:44:ef:cf:e2:
4a:b5:96:e7:40:3d:03:5f:4b:36:64:9d:f1:0e:b1:18:b1:7b:
48:a8:2b:3e:05:61:9d:21:55:ed:bd:1c:25:f7:7f:3e:95:8d:
8d:90:80:0c:1d:4b:b4:ef:c3:01:69:75:f4:a0:ea:60:d4:74:
87:da:5f:06:be:da:6c:f0:29:f3:24:a6:95:20:39:5e:8d:8c:
73:0d:3d:8c:cf:72:eb:1f:7f:dc:e1:1b:25:cf:6f:da:1c:64:
01:ac:37:38:f3:06:6f:20:50:b7:b5:dc:04:e3:89:9d:e6:e9:
b7:e2:9a:a3:cf:9f:28:f1:e1:1e:18:7b:d8:bc:99:77:87:f1:
79:cc:02:10:3b:2f:2b:92:05:d9:df:5c:6c:b5:9f:93:9c:96:
10:ec:57:98:0b:23:ca:fa:35:fa:38:fa:be:43:ff:e9:24:da:
a2:bd:ae:93:3a:79:59:9b:18:93:76:8b:e4:5d:a8:f4:73:6a:
97:6c:6f:83:c0:ad:21:9d:82:0d:cc:20:62:fe:be:0b:8b:ac:
f2:45:c9:24:78:d6:cd:bb:ec:a2:de:f8:20:39:cc:2c:ca:1b:
5a:10:b4:e4
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQx
MzU0MDZaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDZDRTQ5MTk2REEzQ0U1
QjM2QTJDNkEwMjI0QkYzQzM4OUM3RDE2N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE5WAt2NFWuOyDJkLbAjM/J9lL1IwcATHXxNr15hICeiGYf9gV
katgAaf6oavuSb81/9wnjknVcwdAJFG82xYjv9Yz5AFxlWikF2fTpsZv3MzTirQQ
Z0sN3zLtXTGQIgEGQjEpKwOzZt11/kiCVciIj5JGOonAQRm2nbf900gknhepoG7M
ts6lZyO3+UWMdtkPLoNoqH6blEKuGaMArERGm5hO5y/HUF+W7KI8M9fLcdNTTD53
CxRh7YJ9fFvrdfOsTewo49I+cgjWF/oF9bm4hS8nipiB4Qk33kYxs9hmdueEiysi
SELzCQRBzKXsoKEu2FhofbryOav2AINgiEBdAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUbOSRlto85bNqLGoCJL88OJx9Fn4wHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvYk9TUmx0bzg1Yk5x
TEdvQ0pMODhPSng5Rm40LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAdsHz1c78LhVUl3EColh3teDbmK/q
iCkiRI/LFHvitftE78/iSrWW50A9A19LNmSd8Q6xGLF7SKgrPgVhnSFV7b0cJfd/
PpWNjZCADB1LtO/DAWl19KDqYNR0h9pfBr7abPAp8ySmlSA5Xo2Mcw09jM9y6x9/
3OEbJc9v2hxkAaw3OPMGbyBQt7XcBOOJnebpt+Kao8+fKPHhHhh72LyZd4fxecwC
EDsvK5IF2d9cbLWfk5yWEOxXmAsjyvo1+jj6vkP/6STaor2ukzp5WZsYk3aL5F2o
9HNql2xvg8CtIZ2CDcwgYv6+C4us8kXJJHjWzbvsot74IDnMLMobWhC05A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org