Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/gnJzJ1ai9qZAoRYSsyyad8y5W9A.roa
File: gnJzJ1ai9qZAoRYSsyyad8y5W9A.roa (raw, json)
Hash identifier: FhwYpa2P9D9Oimt71MfoJZQJaRjfQ2pDX1Z5yHP7TUU=
Subject key identifier: 82:72:73:27:56:A2:F6:A6:40:A1:16:12:B3:2C:9A:77:CC:B9:5B:D0
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08A8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/gnJzJ1ai9qZAoRYSsyyad8y5W9A.roa
Signing time: Wed 14 Jun 2023 16:54:03 +0000
ROA not before: Wed 14 Jun 2023 16:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 16:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=8272732756A2F6A640A11612B32C9A77CCB95BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:12:21:6f:a4:c2:36:27:2d:76:4d:5f:f9:
c8:06:27:29:b1:01:17:7e:b5:80:d2:fb:2a:69:06:
27:bc:08:15:13:be:91:69:21:7e:73:83:56:cb:1d:
c2:ce:3c:e5:5d:f0:35:3c:9d:bf:28:bd:62:5d:bc:
0f:a9:d8:53:7d:c0:6b:2a:dc:ac:c3:5e:c6:1f:1e:
b1:fd:fb:49:f3:62:68:4f:9b:66:fc:81:40:08:e7:
07:c6:ee:e6:d2:1b:8e:24:88:48:ea:58:68:47:89:
0a:2f:dd:4a:54:88:05:32:ec:77:c5:98:c3:c4:e7:
91:c4:7b:61:d8:15:57:a2:2e:15:26:fa:1f:3f:76:
f5:f2:90:87:9d:82:f6:56:3d:58:30:83:ec:79:2a:
67:fe:58:16:11:ea:2b:aa:f3:52:66:35:99:55:dd:
d8:5d:b8:8c:5f:8c:8b:ab:c2:f6:b8:83:d2:92:35:
27:4d:8e:54:25:43:98:d9:c9:12:5a:e1:e9:94:82:
54:7f:bd:00:3f:15:c4:f5:35:a3:fb:c4:aa:ad:d7:
56:2e:95:68:01:25:db:e7:2d:98:ca:26:6f:27:6f:
80:5b:58:d6:b9:59:df:7c:26:82:80:fc:c0:0a:11:
61:8b:c0:be:12:2e:4f:51:d3:99:35:31:06:00:39:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:73:27:56:A2:F6:A6:40:A1:16:12:B3:2C:9A:77:CC:B9:5B:D0
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/gnJzJ1ai9qZAoRYSsyyad8y5W9A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:16:02:49:81:20:b6:5d:4e:78:a4:ac:c8:2a:a4:ce:77:64:
fe:2c:79:bd:23:fe:31:5a:f9:0a:76:0a:79:39:61:14:f5:14:
60:da:9a:e0:69:8f:8f:1a:31:4c:48:1e:29:e2:36:f1:ae:14:
7b:dc:28:f7:a6:39:e2:b0:cd:91:d9:4a:9f:87:10:5f:ae:bb:
ea:7a:e4:2f:b4:c1:bd:d8:8c:09:c4:53:27:15:29:a9:6a:4a:
48:4d:b5:8b:ac:22:e5:48:c0:eb:04:00:98:b0:6b:df:1a:80:
66:e8:b5:1b:74:73:a2:1f:81:5d:f6:17:5d:0a:10:b9:5a:17:
cf:b1:41:a0:ab:62:62:d6:65:34:4e:ab:a0:14:ed:14:a7:71:
95:46:ee:e8:15:e3:51:b2:a8:36:6d:d9:f0:e0:21:59:97:4c:
37:d2:7d:2d:b0:f1:d8:18:74:c7:3a:5d:28:ae:cd:9e:4c:a0:
8b:03:e2:bc:85:63:74:25:b3:e4:32:61:51:10:e4:39:40:b0:
24:c6:f6:2a:8a:68:fc:52:5d:2d:b0:99:f0:e8:91:46:9b:48:
a3:46:45:81:a0:f3:56:41:87:7f:a6:7e:67:c9:f7:ff:b7:48:
cf:86:80:e9:52:4d:b6:98:06:6a:0e:97:10:91:ca:cf:03:7d:
9a:58:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org