Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/iOK7iEHVmTthJLqrRqKLNn8k510.roa
File: iOK7iEHVmTthJLqrRqKLNn8k510.roa (raw, json)
Hash identifier: wsNH6vBFfemFOuL0BBzpYDy3FCzhheSqa6VIDTJfNL4=
Subject key identifier: 88:E2:BB:88:41:D5:99:3B:61:24:BA:AB:46:A2:8B:36:7F:24:E7:5D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0904
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/iOK7iEHVmTthJLqrRqKLNn8k510.roa
Signing time: Thu 15 Jun 2023 04:24:07 +0000
ROA not before: Thu 15 Jun 2023 04:24:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 04:24:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=88E2BB8841D5993B6124BAAB46A28B367F24E75D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:1c:d0:13:d3:2a:52:f0:ec:17:7a:69:f9:
93:c9:35:09:ca:43:0d:02:a0:76:3c:55:24:87:c6:
b6:94:a7:da:1f:15:d0:7c:ef:b7:cc:d8:09:18:e5:
25:72:bc:47:58:5d:cd:25:a0:ea:dd:25:35:6d:ad:
2d:09:a8:f0:66:c5:9e:af:7e:76:5a:0d:90:1d:8d:
eb:4d:4a:e6:de:5a:cd:e7:43:90:e8:4e:25:f6:ad:
9e:70:af:48:c1:ad:da:46:07:08:61:b8:8e:cf:2e:
f2:37:d9:c5:a6:28:7c:a0:ea:5b:73:18:d9:a1:a5:
f9:3f:95:60:cb:95:c6:8d:df:b0:e5:4f:c8:0a:42:
cc:31:bf:3c:65:5c:73:db:ab:03:7e:c1:27:c6:d6:
a3:f0:00:42:14:35:2a:6f:0a:31:dc:91:46:ff:16:
6a:4c:0b:78:77:19:02:54:f3:3d:b7:10:db:4d:0d:
3e:a0:05:63:f2:29:36:17:7e:d8:6b:ca:75:8a:c4:
77:f8:f6:be:3d:68:66:c4:b6:f7:7c:87:b9:c0:44:
d2:61:2c:ef:79:49:28:fd:36:7b:bb:e6:fd:5e:c6:
a2:5c:da:85:06:78:cf:e8:12:8b:54:fe:54:b0:4c:
58:7d:ab:c3:89:68:f0:95:db:10:bf:83:00:71:6a:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:BB:88:41:D5:99:3B:61:24:BA:AB:46:A2:8B:36:7F:24:E7:5D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/iOK7iEHVmTthJLqrRqKLNn8k510.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
93:74:64:b1:87:1d:47:f3:36:aa:96:aa:4e:54:5e:19:c7:cb:
e6:67:20:2c:d9:29:aa:57:42:b5:a3:5f:44:58:27:f9:d1:ec:
56:e2:37:d9:72:b7:71:ec:5e:ba:4c:3f:96:54:4b:bf:dc:95:
86:80:84:2c:08:8f:d7:e7:50:7b:69:89:fc:66:e4:f1:5c:ae:
fa:ec:8e:8c:25:d1:c5:d6:8f:eb:82:50:20:c1:06:af:a5:fc:
15:32:43:6f:2d:7c:8c:e7:16:26:9b:b3:ca:fa:c6:2a:fd:54:
7a:96:8b:9b:80:1d:43:64:bc:2f:00:8f:62:48:40:68:c4:be:
de:54:d6:88:81:af:0c:92:c8:89:a2:3c:55:4d:28:70:81:b3:
93:7c:be:d9:31:16:c5:ed:f5:7b:e1:31:d5:85:e7:d3:93:08:
41:e4:4e:bf:32:77:08:81:9f:d5:85:78:bc:12:28:a9:ca:02:
99:7e:fc:26:d9:b5:0d:46:56:94:db:e2:4e:2c:26:3d:c4:ed:
00:12:35:c7:2f:c9:91:bd:61:ad:63:52:68:1c:9f:a7:55:66:
51:7c:95:a5:49:3a:a4:2e:15:87:e8:e0:01:56:35:28:54:d9:
76:4d:ad:a6:25:5d:1f:cd:22:3d:ad:30:04:37:de:5f:56:f2:
b5:68:c4:bb
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTUw
NDI0MDdaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDg4RTJCQjg4NDFENTk5
M0I2MTI0QkFBQjQ2QTI4QjM2N0YyNEU3NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChmRzQE9MqUvDsF3pp+ZPJNQnKQw0CoHY8VSSHxraUp9ofFdB8
77fM2AkY5SVyvEdYXc0loOrdJTVtrS0JqPBmxZ6vfnZaDZAdjetNSubeWs3nQ5Do
TiX2rZ5wr0jBrdpGBwhhuI7PLvI32cWmKHyg6ltzGNmhpfk/lWDLlcaN37DlT8gK
QswxvzxlXHPbqwN+wSfG1qPwAEIUNSpvCjHckUb/FmpMC3h3GQJU8z23ENtNDT6g
BWPyKTYXfthrynWKxHf49r49aGbEtvd8h7nARNJhLO95SSj9Nnu75v1exqJc2oUG
eM/oEotU/lSwTFh9q8OJaPCV2xC/gwBxarnLAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUiOK7iEHVmTthJLqrRqKLNn8k510wHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvaU9LN2lFSFZtVHRo
SkxxclJxS0xObjhrNTEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAk3RksYcdR/M2qpaqTlReGcfL5mcg
LNkpqldCtaNfRFgn+dHsVuI32XK3cexeukw/llRLv9yVhoCELAiP1+dQe2mJ/Gbk
8Vyu+uyOjCXRxdaP64JQIMEGr6X8FTJDby18jOcWJpuzyvrGKv1UepaLm4AdQ2S8
LwCPYkhAaMS+3lTWiIGvDJLIiaI8VU0ocIGzk3y+2TEWxe31e+Ex1YXn05MIQeRO
vzJ3CIGf1YV4vBIoqcoCmX78Jtm1DUZWlNviTiwmPcTtABI1xy/Jkb1hrWNSaByf
p1VmUXyVpUk6pC4Vh+jgAVY1KFTZdk2tpiVdH80iPa0wBDfeX1bytWjEuw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org