Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/dJ5fFl2oTss1njc67Sxo6-cROiw.roa
File: dJ5fFl2oTss1njc67Sxo6-cROiw.roa (raw, json)
Hash identifier: KT62IpyP+36N+2MT15agksEMG9f2nNfHgkXGUvyG0J8=
Subject key identifier: 74:9E:5F:16:5D:A8:4E:CB:35:9E:37:3A:ED:2C:68:EB:E7:11:3A:2C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0818
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/dJ5fFl2oTss1njc67Sxo6-cROiw.roa
Signing time: Tue 13 Jun 2023 22:54:01 +0000
ROA not before: Tue 13 Jun 2023 22:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 22:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=749E5F165DA84ECB359E373AED2C68EBE7113A2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:67:ea:12:36:4e:f3:70:61:5f:17:58:c6:
84:93:ea:ce:fa:e3:f9:d2:c5:e6:ee:fe:c4:c0:85:
c8:85:c0:89:a3:f3:b6:d4:3a:d6:af:cd:58:ff:df:
cf:00:cd:24:d5:38:fe:88:dd:63:99:66:d8:aa:ee:
db:e3:84:7f:fe:63:ad:1b:7b:4b:ef:1e:16:f2:c7:
82:9a:c2:79:a0:84:3a:29:02:1b:f7:10:cd:93:e1:
43:13:05:5f:1e:96:10:8b:44:39:4d:4d:a2:ba:f6:
4c:1d:5d:3a:9d:b2:85:bd:64:21:34:64:9b:d4:56:
8d:f4:b5:d5:99:45:2e:4a:2c:07:40:51:df:5a:45:
74:94:14:cc:28:c3:e2:e2:14:45:a9:29:c7:34:14:
a7:7d:65:9c:ca:58:b0:fb:00:f6:4a:ad:3c:e5:bf:
bc:0f:03:e4:ba:a7:43:b6:ab:de:3b:09:25:a4:9b:
55:0f:24:fa:ef:5f:aa:26:12:f3:34:04:57:77:2a:
0f:62:ef:5b:43:ab:ff:7e:c7:e1:f7:96:4c:f0:b5:
22:38:97:5f:10:67:e0:9b:62:02:a2:e3:ba:87:37:
5b:59:50:0b:be:c3:88:0d:fd:5d:bb:69:f6:3a:7c:
0b:a1:5e:3f:0d:01:d6:14:27:44:49:2f:90:cd:17:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:5F:16:5D:A8:4E:CB:35:9E:37:3A:ED:2C:68:EB:E7:11:3A:2C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/dJ5fFl2oTss1njc67Sxo6-cROiw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:97:aa:db:ba:9c:92:46:9c:85:1b:05:c6:e3:8a:af:33:52:
71:45:19:7b:d8:ae:ee:4d:93:f0:87:81:c5:dd:10:66:fa:c1:
a1:37:d6:f0:f1:96:74:cf:9a:2a:7b:b0:dd:10:28:51:53:df:
bd:7c:fa:ae:02:4a:8d:63:9a:33:92:de:ed:d9:4d:c7:d7:f2:
f6:70:83:10:37:85:82:3f:f2:93:cf:c6:f8:f2:31:cb:41:d8:
4d:4b:14:ab:05:b3:c9:48:93:be:ff:49:22:a9:ec:96:8f:fc:
3d:0c:b7:16:96:b8:83:1b:14:50:d1:19:3a:a9:30:a2:0e:91:
32:c9:ed:af:bd:37:26:6a:80:48:4b:1f:4b:05:ce:1d:d0:a3:
83:00:f2:23:55:ad:dc:c8:ff:72:67:90:76:4a:05:cd:64:bb:
80:ae:39:b1:d4:6a:67:1d:f0:e3:5b:3b:b4:fa:77:65:ad:74:
7c:0f:c3:ca:d6:e4:2b:44:7c:58:2b:01:c3:a8:54:7b:d0:98:
80:0a:37:e5:cd:27:45:d4:06:68:b1:85:af:5a:f1:e6:a2:ed:
b4:5f:f4:79:7e:3d:da:d0:ba:66:a3:20:9f:cc:e3:f1:58:2a:
71:6b:05:92:60:2f:be:f1:85:1d:c3:52:ad:91:ba:45:e4:3b:
81:0a:67:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:01 2024 by rpki-client on console-fra.rpki-client.org