Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/i2yifVUfzusO8rd-yYU9hh6psLU.roa
File: i2yifVUfzusO8rd-yYU9hh6psLU.roa (raw, json)
Hash identifier: TfuPeeOCeceAaKiwup/mSEZpDfS7xQMOBHmoPFZ20D8=
Subject key identifier: 8B:6C:A2:7D:55:1F:CE:EB:0E:F2:B7:7E:C9:85:3D:86:1E:A9:B0:B5
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0900
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/i2yifVUfzusO8rd-yYU9hh6psLU.roa
Signing time: Thu 15 Jun 2023 03:54:07 +0000
ROA not before: Thu 15 Jun 2023 03:54:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 03:54:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=8B6CA27D551FCEEB0EF2B77EC9853D861EA9B0B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:58:e0:e1:dc:b0:45:db:45:8b:f5:3e:5c:
c9:74:98:c4:30:a3:1a:a0:d2:40:5d:66:d9:c0:14:
50:00:55:b8:6d:3d:4b:d5:a8:83:04:17:7b:f7:6a:
b5:97:05:7b:96:f0:8e:cf:27:4e:bf:90:d5:13:94:
1e:a8:c0:b3:39:97:40:5a:bb:48:24:eb:2d:1e:49:
2b:10:df:56:b6:38:58:db:d6:13:96:57:40:16:80:
ab:39:c3:51:1b:ce:4d:9d:ee:4a:b0:39:e0:65:be:
61:7d:41:34:89:2b:bb:4e:5c:db:4d:88:a1:04:82:
b4:1f:51:bb:c0:3a:a1:2c:7e:95:0b:d1:dc:f0:a9:
dd:95:9e:f1:1f:d2:31:df:8d:62:0b:ca:72:42:a4:
d0:8f:78:84:80:c8:95:b2:9c:77:09:cb:33:73:48:
38:6c:79:00:88:a4:d3:6c:8e:8f:f7:06:10:d9:21:
bc:1d:fb:51:9f:39:59:fa:b4:b4:e8:8a:a2:d5:81:
15:12:60:82:8a:c4:54:ff:12:7b:74:a4:d6:b6:66:
cd:02:da:a2:9e:0a:ae:4c:ca:e3:97:51:77:1e:4e:
32:b0:f2:b1:d2:51:df:87:fc:cf:98:33:7b:ab:ac:
37:18:c8:22:e0:7e:bd:eb:c0:ac:8e:35:53:47:1d:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:A2:7D:55:1F:CE:EB:0E:F2:B7:7E:C9:85:3D:86:1E:A9:B0:B5
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/i2yifVUfzusO8rd-yYU9hh6psLU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
70:f3:9d:cc:25:5b:06:91:0a:80:76:dc:c2:c0:03:65:d0:ff:
41:c2:f9:66:c0:51:93:88:b4:5f:75:c7:eb:d5:97:b5:ad:bc:
d6:a4:2f:f1:fb:14:17:7a:10:96:b3:d6:bb:e7:cb:9f:bc:ab:
dc:d3:52:03:5f:cc:7b:53:ed:42:55:78:a7:ad:e6:07:b7:26:
d6:e0:5e:93:47:37:47:80:16:31:da:23:e6:bb:59:ba:68:ca:
41:5c:18:2a:80:0a:ca:8b:be:7e:8f:b4:d5:d1:37:7f:40:07:
65:fa:f8:3e:8a:5a:9d:84:16:cd:92:e7:82:ac:7e:69:2a:f1:
74:0f:37:eb:7e:24:88:4b:86:d0:0b:98:cb:0a:61:53:08:3a:
42:1d:c8:f2:c1:e2:d5:e9:96:70:4e:f0:db:6c:55:31:a2:3a:
1f:bc:ac:e4:ac:a1:d2:3f:fa:bb:fc:25:d4:f5:a6:dd:00:58:
49:ab:a8:40:17:5b:8b:da:ac:60:4e:c3:90:8f:40:5d:61:e2:
11:80:1e:3e:9b:58:ad:84:bd:31:87:eb:83:16:da:92:00:d4:
53:03:03:2a:72:8a:13:7b:00:51:e4:da:9e:6f:73:37:a0:8c:
f0:8d:19:fc:d3:82:b6:2c:1f:8a:66:38:d8:f2:97:52:fa:2a:
ee:b3:2b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org