Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/f9lKvygvWczZHSrT8zCUqJCwslY.roa
File: f9lKvygvWczZHSrT8zCUqJCwslY.roa (raw, json)
Hash identifier: 8by4kuoCCJJue4xmp4ndtkB+f0+LhSaHsVPGMBgXvOM=
Subject key identifier: 7F:D9:4A:BF:28:2F:59:CC:D9:1D:2A:D3:F3:30:94:A8:90:B0:B2:56
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0820
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/f9lKvygvWczZHSrT8zCUqJCwslY.roa
Signing time: Tue 13 Jun 2023 23:54:03 +0000
ROA not before: Tue 13 Jun 2023 23:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080 (0x820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 23:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=7FD94ABF282F59CCD91D2AD3F33094A890B0B256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:62:7a:47:a0:7b:57:c2:eb:bb:aa:11:76:
7c:28:1d:f0:a1:77:88:f3:12:4a:fc:4a:2e:9a:29:
0b:61:d3:f9:8b:3e:04:58:18:bb:c1:45:7c:d4:58:
06:df:14:8f:bb:6a:4e:55:35:ec:86:c5:fc:eb:66:
9d:52:f3:f7:4f:1f:d9:72:44:75:c3:6e:c8:0b:c1:
f2:ad:98:bd:00:84:7e:47:d4:ca:bb:49:8b:c7:fc:
e2:d7:00:f5:5d:71:a4:9e:d4:25:c2:cf:90:66:23:
34:3a:80:ce:90:83:7a:2f:b7:a9:b9:e3:20:a7:16:
f6:84:36:b7:8f:91:e4:86:84:ad:c6:97:35:23:ea:
4b:23:81:84:17:22:32:06:2d:1a:04:dd:e7:0b:90:
57:bb:25:3f:6d:94:8b:d6:87:b8:9f:51:d9:2a:91:
5b:54:1d:9b:ac:75:16:ec:a2:cc:98:56:69:62:38:
02:00:18:19:7b:c3:63:80:6a:d7:37:9c:a2:16:85:
b9:a7:9a:8b:0c:a4:60:c8:bc:cb:4b:5a:8c:d2:65:
11:ac:2b:9c:1c:e0:84:e2:30:5e:b2:8e:b4:a3:79:
59:8e:07:59:00:b2:c7:d2:be:8e:82:1e:63:58:9a:
0c:f9:d6:ce:61:aa:5f:a5:45:0e:60:42:68:27:49:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:4A:BF:28:2F:59:CC:D9:1D:2A:D3:F3:30:94:A8:90:B0:B2:56
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/f9lKvygvWczZHSrT8zCUqJCwslY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
80:fc:0b:11:8e:d3:3e:c5:ee:cb:b8:70:00:46:b3:65:6e:c2:
d2:61:29:96:62:4b:c8:bd:32:b2:12:0d:33:ca:59:16:f1:51:
38:f1:7b:bb:86:84:5a:da:48:4e:f2:dc:63:50:2e:f2:ed:df:
af:1c:1d:ff:7a:5d:cb:ec:69:9b:e6:3a:21:29:92:3d:61:e3:
76:f6:f8:3b:25:e8:4b:82:ba:b8:88:1c:27:49:b6:b1:df:01:
ef:6a:37:5a:50:03:92:82:57:6c:25:cf:db:3a:a3:32:f8:9d:
d3:f2:4a:57:5e:00:aa:8e:7a:8a:60:08:88:4e:cc:47:af:fa:
36:c6:c6:40:00:68:ab:56:01:79:3b:5d:67:3d:f0:e1:22:2b:
35:40:7f:1d:b3:7c:8d:f9:75:5c:b3:8d:eb:8d:0e:4d:25:2c:
e3:d2:e3:31:a8:7e:26:59:c9:4b:9c:18:f4:fa:99:7a:9d:3f:
1b:76:4c:0f:82:35:78:a1:4b:ee:1e:0d:35:43:c5:94:c8:64:
0f:42:cd:db:72:c8:f5:47:d2:33:85:f3:b2:d2:44:e4:61:a2:
b5:16:26:e6:88:95:52:98:0e:1a:82:20:c9:35:db:50:36:88:
c6:88:ba:84:93:00:f8:bb:9d:b9:e5:34:8b:5c:79:c4:ec:61:
45:ba:49:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org