Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ivgB4MyWCj71ULZkMjtWkeA4IuM.roa
File: ivgB4MyWCj71ULZkMjtWkeA4IuM.roa (raw, json)
Hash identifier: t9tQVbGo2jf9rW635RqtSWz2uK50nHCg3vKuqWFkAKQ=
Subject key identifier: 8A:F8:01:E0:CC:96:0A:3E:F5:50:B6:64:32:3B:56:91:E0:38:22:E3
Certificate issuer: /CN=11EF7AFED17B7B1DC7CFD1427288D01E5BEBE947
Certificate serial: 03
Authority key identifier: 11:EF:7A:FE:D1:7B:7B:1D:C7:CF:D1:42:72:88:D0:1E:5B:EB:E9:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ivgB4MyWCj71ULZkMjtWkeA4IuM.roa
Signing time: Thu 27 May 2021 05:05:35 +0000
ROA not before: Thu 27 May 2021 05:05:35 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11EF7AFED17B7B1DC7CFD1427288D01E5BEBE947
Validity
Not Before: May 27 05:05:35 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=8AF801E0CC960A3EF550B664323B5691E03822E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:74:bf:6d:59:7f:29:69:46:ed:7e:c6:71:
2a:f3:c7:53:27:f5:50:3b:83:86:fe:24:9e:8b:b6:
68:51:0c:f1:ad:ad:d6:30:ff:a8:43:bd:7c:8b:5e:
5c:d2:f8:22:6b:55:59:a8:6c:17:3e:73:2d:21:96:
c4:e4:cb:dc:8c:3d:2b:c3:a1:fa:40:d9:09:d2:88:
0c:6e:25:5f:a3:6f:37:9f:3a:d3:27:0f:9c:f8:99:
04:b5:ec:13:3a:a3:3e:db:73:92:0b:42:04:3e:a2:
f3:2b:9a:1a:a2:b9:13:89:0d:c6:4f:e8:88:70:cb:
19:db:cb:7f:55:6b:84:55:72:1d:3c:1c:55:d7:c6:
60:a3:a2:8c:b3:5b:29:9b:f4:8c:1b:f6:3b:f6:7a:
0b:08:e1:16:8c:5d:3c:5e:5c:14:ea:e4:8e:da:42:
8e:de:7e:8d:a8:cf:fd:5c:41:86:76:cd:3c:e2:19:
6b:45:38:b9:6f:e1:c7:8e:84:b9:84:d3:cd:11:9a:
d7:eb:04:b5:60:98:5a:51:cd:b0:8a:3a:02:da:2a:
01:f3:22:d6:8d:66:2e:88:ec:91:cb:c5:1b:63:3b:
62:fa:5e:44:13:9a:4d:7a:99:12:96:28:af:77:cb:
bf:90:bd:ca:c8:64:20:60:e3:8c:ed:37:36:a4:73:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F8:01:E0:CC:96:0A:3E:F5:50:B6:64:32:3B:56:91:E0:38:22:E3
X509v3 Authority Key Identifier:
keyid:11:EF:7A:FE:D1:7B:7B:1D:C7:CF:D1:42:72:88:D0:1E:5B:EB:E9:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ivgB4MyWCj71ULZkMjtWkeA4IuM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:57:da:35:86:53:38:d3:88:2c:f4:88:26:65:01:61:41:98:
d2:88:38:2c:5a:dc:8b:a7:d1:1b:55:3a:db:31:da:aa:52:a5:
a2:fe:3d:d4:8c:ee:0d:e1:b1:aa:5d:a0:ff:78:58:05:ce:80:
57:ee:49:cd:8f:f5:7b:1b:91:7b:ff:d5:67:b3:6c:04:f8:08:
52:59:56:eb:4d:5e:b4:b2:b7:c4:b9:25:00:8f:6e:e5:6a:03:
31:2a:d3:6e:78:7f:a1:b0:b1:c5:1f:f1:99:93:9b:a7:51:f7:
99:bf:cc:12:7e:1e:46:34:21:4f:97:fc:b3:b5:fe:c7:fa:98:
54:8a:3d:b5:f2:9a:98:f5:ab:76:c2:6c:f4:6d:1d:ed:b5:98:
26:a4:3b:e4:3a:7e:1b:ef:6e:22:98:ac:cd:61:96:93:ac:af:
eb:dd:63:26:41:28:c5:d8:6a:21:4e:1b:53:18:d0:bd:2a:a9:
17:ab:3a:d8:bc:f8:ca:6e:63:59:f5:6f:6d:bd:c9:76:8b:a1:
06:e8:da:95:07:74:80:08:1e:9b:67:ce:4f:37:d8:f4:25:f9:
00:ab:41:3a:34:bf:22:3f:18:4e:be:27:6f:9a:21:3c:b5:77:
7f:60:9d:8b:a0:0c:5d:10:dd:27:ab:0a:ed:55:fb:81:54:3a:
12:a1:99:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org