Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/hk23X7BvN2fnCFWHsD0A-LHMebg.roa
File: hk23X7BvN2fnCFWHsD0A-LHMebg.roa (raw, json)
Hash identifier: cTou1awJzrPH3WjLBch+AkUz6Hde5jz0JV+4VuVEbjM=
Subject key identifier: 86:4D:B7:5F:B0:6F:37:67:E7:08:55:87:B0:3D:00:F8:B1:CC:79:B8
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08E4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/hk23X7BvN2fnCFWHsD0A-LHMebg.roa
Signing time: Thu 15 Jun 2023 00:24:07 +0000
ROA not before: Thu 15 Jun 2023 00:24:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276 (0x8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 00:24:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=864DB75FB06F3767E7085587B03D00F8B1CC79B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:57:b3:a5:37:5a:82:d9:12:64:2b:ed:08:
db:58:a0:5e:b1:04:dc:c0:d2:e9:9e:c4:42:27:62:
7c:71:37:3f:d8:29:87:0f:ef:f9:17:04:b4:ce:88:
a6:f7:e5:33:36:54:1b:22:62:4b:51:61:17:33:f5:
4e:0b:46:b9:3c:3b:5d:07:68:96:43:2f:28:ea:9c:
e1:d3:cd:25:10:f1:97:6e:3c:43:78:b1:55:9f:a1:
fd:86:6c:93:7d:fc:3d:6a:b3:ec:10:20:80:dd:79:
85:cf:63:af:19:88:8c:96:9c:f3:c6:03:a0:d3:7b:
b7:eb:e1:c8:2c:1e:62:df:f8:ae:29:31:f5:3a:2c:
e6:33:16:d8:8f:f0:46:b9:f9:65:23:28:11:d5:72:
48:a3:65:d0:0a:51:b3:51:be:5d:d2:b7:7b:9e:09:
92:8b:95:a2:9e:a2:45:7f:c0:73:12:83:99:74:a5:
b0:e9:8d:73:22:3a:2a:f6:dd:d6:ac:f7:37:68:10:
86:fc:f6:ad:62:86:5e:eb:90:23:1c:5e:10:06:25:
66:cf:38:00:95:40:91:38:4c:d8:36:a4:fa:08:04:
82:6c:cb:9e:56:34:2e:17:79:62:a6:99:c4:77:79:
bc:09:20:ee:b3:c7:f4:ba:8d:e9:25:e6:55:4b:5d:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4D:B7:5F:B0:6F:37:67:E7:08:55:87:B0:3D:00:F8:B1:CC:79:B8
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/hk23X7BvN2fnCFWHsD0A-LHMebg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:46:7b:9f:29:b2:3d:8a:13:d1:9c:e4:00:04:31:39:d3:55:
aa:c4:d2:13:bd:23:27:1a:59:8d:3e:e0:f4:85:cc:59:7e:84:
d5:92:c9:e9:96:a1:38:af:32:96:b9:dc:ca:b9:36:cc:75:1c:
7e:32:ee:18:37:a3:18:cb:43:a3:94:c2:81:f5:29:8c:57:d6:
8b:44:d9:ef:e6:74:c3:2c:6d:f0:57:cd:3e:cc:59:01:99:ed:
7e:19:05:d9:95:26:a9:5d:72:de:d0:10:2c:30:88:c0:1d:ac:
08:08:05:c4:96:36:31:a4:ff:54:fd:01:e6:8c:48:8b:ce:88:
aa:38:03:03:ae:2d:1a:f3:33:f7:15:73:29:9c:b2:75:70:71:
9c:35:4f:8c:3e:59:95:37:78:8b:05:7b:2c:8f:0c:7c:b2:5d:
c1:30:24:1a:0e:5b:e1:e4:54:59:0a:dd:82:d1:8c:53:39:88:
f6:98:39:5a:61:08:80:63:6d:ce:5c:6c:4a:ee:2d:86:f2:5b:
db:cc:b3:9e:b8:46:38:5a:6e:c0:b6:21:d3:48:ce:8c:04:f6:
3c:2d:22:82:24:25:86:a6:93:94:52:ba:4a:70:e8:59:78:73:
61:0d:a5:88:a5:56:3f:8b:5a:7a:84:1d:56:a6:17:6e:34:23:
ac:65:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org