Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/d5o1oc4qWbucZkkGXvO5S4ruVgY.roa
File: d5o1oc4qWbucZkkGXvO5S4ruVgY.roa (raw, json)
Hash identifier: +bZbyPPqO8xD5UWFfeZ4Aiatmv+tvFs9fIt8RSYPy1Q=
Subject key identifier: 77:9A:35:A1:CE:2A:59:BB:9C:66:49:06:5E:F3:B9:4B:8A:EE:56:06
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07B0
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/d5o1oc4qWbucZkkGXvO5S4ruVgY.roa
Signing time: Tue 13 Jun 2023 09:54:00 +0000
ROA not before: Tue 13 Jun 2023 09:54:00 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968 (0x7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 09:54:00 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=779A35A1CE2A59BB9C6649065EF3B94B8AEE5606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:d5:62:8d:e2:76:9c:3b:f5:e7:82:97:13:
aa:a8:2c:8c:54:a7:64:fa:4b:61:c5:73:5d:9a:ab:
9b:c1:9c:73:81:ef:19:17:0e:91:82:b6:da:71:2b:
c6:88:94:f6:d4:a2:99:84:fd:86:0b:36:4b:5b:f8:
d5:34:a0:f2:87:09:93:51:51:a0:d8:73:84:f2:c6:
4f:24:2a:88:e4:e3:e9:f5:43:b8:18:43:7c:7f:6d:
4a:0c:7f:20:76:71:95:86:c1:59:6d:5c:d3:76:4f:
55:da:81:7d:3e:dc:d8:3f:9a:b8:c5:00:7f:d6:ad:
06:81:81:c7:d3:20:37:cc:c5:44:e6:b8:e8:7d:de:
74:7a:43:5b:15:b1:1e:1c:33:ce:68:16:24:ff:aa:
05:5c:f9:5f:13:c8:51:66:97:b1:ac:1f:c7:75:bc:
ad:16:1e:fc:a4:54:3c:36:04:35:5a:71:ca:b9:4f:
70:b9:23:0f:be:eb:77:20:d9:52:92:dc:d8:59:64:
cc:31:78:c0:a8:60:8c:3f:d4:ba:8c:eb:7d:85:a0:
a5:25:05:95:f7:73:fa:69:52:87:e3:0b:64:e9:03:
3f:80:a8:62:bf:89:67:76:7a:5d:59:33:f2:98:15:
96:2f:c1:f1:9e:dc:11:47:85:28:f7:5a:4b:f1:d7:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9A:35:A1:CE:2A:59:BB:9C:66:49:06:5E:F3:B9:4B:8A:EE:56:06
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/d5o1oc4qWbucZkkGXvO5S4ruVgY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:b1:87:7c:81:46:bb:8a:61:24:cf:d0:a7:73:65:7a:e9:b7:
7f:75:13:74:d3:f4:6b:07:af:f4:ca:aa:91:a3:c7:a2:de:a9:
69:6f:fb:9a:7b:67:74:31:74:ac:f4:d3:17:1c:5f:e4:f1:fc:
29:f4:53:59:66:6f:7c:b9:39:0f:54:7e:02:9f:ef:4b:ca:e2:
d8:0a:26:8c:1a:e9:3d:ec:a1:2c:9d:10:35:4c:a1:04:1c:e1:
29:fe:6e:21:ef:75:64:dc:3a:97:7f:66:b4:c7:16:01:92:59:
37:44:5a:42:64:78:dc:d7:90:39:4b:6a:76:a3:ab:30:57:be:
ac:c8:4d:27:a6:37:1f:22:4c:3f:8c:5d:6b:1d:66:df:5b:32:
14:69:0c:0e:35:85:3e:3c:cf:8a:e4:aa:f8:2e:7f:90:e2:b8:
56:02:a6:f8:b6:0e:2f:12:b2:c6:f7:52:ba:92:42:05:e2:8d:
1e:05:ad:a1:28:4d:dd:8f:c5:40:bb:29:3f:cd:f5:a1:66:85:
74:07:6d:13:f4:e7:b1:fe:5a:ab:41:f5:0f:ae:e6:c7:1a:f3:
fc:e6:0e:35:cb:0c:7c:3a:47:1b:a5:8a:e7:8f:89:77:3d:9c:
f5:b4:5e:7e:43:a5:e2:63:60:f8:a0:4e:28:e4:22:fc:e0:c2:
0b:85:81:d7
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMw
OTU0MDBaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDc3OUEzNUExQ0UyQTU5
QkI5QzY2NDkwNjVFRjNCOTRCOEFFRTU2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtMNVijeJ2nDv154KXE6qoLIxUp2T6S2HFc12aq5vBnHOB7xkX
DpGCttpxK8aIlPbUopmE/YYLNktb+NU0oPKHCZNRUaDYc4Tyxk8kKojk4+n1Q7gY
Q3x/bUoMfyB2cZWGwVltXNN2T1XagX0+3Ng/mrjFAH/WrQaBgcfTIDfMxUTmuOh9
3nR6Q1sVsR4cM85oFiT/qgVc+V8TyFFml7GsH8d1vK0WHvykVDw2BDVaccq5T3C5
Iw++63cg2VKS3NhZZMwxeMCoYIw/1LqM632FoKUlBZX3c/ppUofjC2TpAz+AqGK/
iWd2el1ZM/KYFZYvwfGe3BFHhSj3Wkvx13NZAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUd5o1oc4qWbucZkkGXvO5S4ruVgYwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvZDVvMW9jNHFXYnVj
WmtrR1h2TzVTNHJ1VmdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAs7GHfIFGu4phJM/Qp3Nleum3f3UT
dNP0awev9MqqkaPHot6paW/7mntndDF0rPTTFxxf5PH8KfRTWWZvfLk5D1R+Ap/v
S8ri2AomjBrpPeyhLJ0QNUyhBBzhKf5uIe91ZNw6l39mtMcWAZJZN0RaQmR43NeQ
OUtqdqOrMFe+rMhNJ6Y3HyJMP4xdax1m31syFGkMDjWFPjzPiuSq+C5/kOK4VgKm
+LYOLxKyxvdSupJCBeKNHgWtoShN3Y/FQLspP831oWaFdAdtE/Tnsf5aq0H1D67m
xxrz/OYONcsMfDpHG6WK54+Jdz2c9bRefkOl4mNg+KBOKOQi/ODCC4WB1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org