Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/dvhjFPnkfTMajl7iTEdwAaMDp9k.roa
File: dvhjFPnkfTMajl7iTEdwAaMDp9k.roa (raw, json)
Hash identifier: RE29s+iUbhWhIuuOwvE6VC8bi4eCBH78bG4q7wXO1Ac=
Subject key identifier: 76:F8:63:14:F9:E4:7D:33:1A:8E:5E:E2:4C:47:70:01:A3:03:A7:D9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07C0
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/dvhjFPnkfTMajl7iTEdwAaMDp9k.roa
Signing time: Tue 13 Jun 2023 11:54:01 +0000
ROA not before: Tue 13 Jun 2023 11:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984 (0x7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 11:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=76F86314F9E47D331A8E5EE24C477001A303A7D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:5e:47:7b:42:6b:0d:44:0f:2d:2c:10:16:
35:1c:02:38:b7:2c:e5:9b:85:7f:d6:d8:50:79:39:
f1:60:84:53:8e:e8:6f:4e:28:a5:99:f3:ca:11:1a:
b4:75:c5:96:f7:45:4c:d2:92:03:31:89:ba:e7:8e:
12:71:dc:eb:7c:00:03:21:84:b1:8c:5a:fe:a5:84:
7a:9b:cb:e3:18:ab:8c:61:5f:08:ca:4b:97:0b:82:
47:68:a2:38:4a:50:bf:43:a6:39:bb:60:bd:57:71:
8d:ba:94:24:a6:60:e1:18:7a:57:22:b9:a4:07:fc:
28:b4:e0:0f:0d:cd:f7:b9:a7:ca:01:b1:3b:2c:5a:
e7:6d:64:aa:21:c4:94:9a:2e:8d:c7:51:82:21:90:
8f:b7:79:fc:63:6e:26:47:c6:05:81:ef:28:65:17:
ea:b7:4b:b3:12:8e:df:2e:d0:78:24:97:02:22:45:
d6:56:ef:1b:91:63:15:b4:ab:b9:ea:7c:b1:52:43:
22:42:b2:5d:ce:ec:c1:c5:df:65:97:b7:7d:1d:df:
e6:35:02:73:44:12:28:41:c3:30:65:10:9e:56:54:
21:13:a9:de:55:44:ba:ed:ba:d0:a5:cc:9b:a0:46:
2b:b3:9d:99:52:a3:3d:aa:dd:c3:94:31:78:6d:43:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:63:14:F9:E4:7D:33:1A:8E:5E:E2:4C:47:70:01:A3:03:A7:D9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/dvhjFPnkfTMajl7iTEdwAaMDp9k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:c5:92:63:79:5a:12:19:36:e0:37:56:ce:c3:25:53:ca:43:
26:a7:af:39:40:0e:e7:51:55:ec:11:6d:92:0a:9e:35:4b:43:
5a:d5:7c:61:36:29:3a:40:d3:cc:f1:67:62:c3:f5:09:9f:07:
1a:9d:94:c6:ac:28:25:0a:00:40:73:ce:f7:f0:8c:7e:de:a7:
ad:d4:9b:75:c9:ec:42:90:d6:f3:b9:33:f4:1c:c0:8e:de:61:
70:d3:76:66:6d:50:2f:c9:a8:e3:a0:a3:fa:7f:48:29:2f:55:
be:46:86:ea:71:5a:d7:7e:f2:f5:66:57:61:61:68:d3:02:59:
19:bf:5c:1a:5d:10:bd:ca:54:1a:a0:aa:e0:66:8f:4d:5d:8b:
66:1f:1c:45:ca:04:14:51:e0:c9:8e:57:a4:a6:c4:90:34:56:
a2:52:22:ac:b0:62:62:24:6b:18:8d:23:0e:4c:54:22:1e:51:
be:3e:4e:01:b1:f7:d4:94:c7:e4:3f:80:50:bc:f1:d0:47:ff:
f0:ea:d0:d7:97:52:3c:08:79:23:4a:e0:e0:ad:fc:66:b0:c5:
be:83:bc:3a:32:ad:0a:db:38:47:72:7a:0e:27:25:f7:0c:0c:
9e:81:33:be:ce:17:70:a7:e3:03:12:fb:4e:16:cf:8c:98:bd:
53:35:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:01 2024 by rpki-client on console-fra.rpki-client.org