Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/jjUUZbxFHxsNA0rQ2t7nyJ8X6ko.roa
File: jjUUZbxFHxsNA0rQ2t7nyJ8X6ko.roa (raw, json)
Hash identifier: 6olU9DfK3D6Fh+M6o3bemFFux0Qhp+uqmYdPZ73XcKY=
Subject key identifier: 8E:35:14:65:BC:45:1F:1B:0D:03:4A:D0:DA:DE:E7:C8:9F:17:EA:4A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0840
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/jjUUZbxFHxsNA0rQ2t7nyJ8X6ko.roa
Signing time: Wed 14 Jun 2023 03:54:03 +0000
ROA not before: Wed 14 Jun 2023 03:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 03:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=8E351465BC451F1B0D034AD0DADEE7C89F17EA4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:c1:ee:ea:a4:1a:ae:cf:ed:20:db:12:66:
09:ea:6b:0d:fb:00:49:6f:2d:64:1e:d7:53:0f:36:
4b:6d:83:30:7e:b0:b2:bc:f6:e3:91:fa:54:78:08:
dc:25:67:4d:fe:25:7c:08:ab:d0:e9:cb:64:33:f7:
1c:17:50:d5:b2:57:1a:61:3c:63:b9:9d:0d:99:82:
8c:83:92:a2:42:cf:d8:10:c8:08:e6:1b:6e:bc:5c:
88:d3:55:8e:f0:e3:35:ff:83:1e:1c:85:e5:7d:c1:
56:59:25:94:59:af:f0:fe:5f:88:21:cd:ca:1c:10:
75:e6:9c:fc:be:13:15:19:20:25:24:49:84:cf:cf:
82:ed:f3:b4:fb:f6:56:06:90:61:01:0c:13:ee:c2:
b1:f3:1c:d0:95:2d:2a:10:eb:77:49:5c:a1:0a:75:
16:e0:f9:bd:db:b2:99:38:9a:ba:1c:5d:4b:db:e2:
36:1e:9a:4c:a2:bd:62:d0:4e:4a:cb:60:00:84:fa:
84:f9:aa:d4:b0:d7:16:d9:03:6a:8c:1f:72:d2:cd:
fd:bb:01:be:39:b3:9c:50:a6:a9:41:c2:30:0a:d4:
7e:90:d1:bf:c7:83:e1:5e:98:bc:3b:78:bf:03:4e:
d7:41:92:ad:d4:c1:8c:e6:72:f2:2c:6d:3b:66:8c:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:35:14:65:BC:45:1F:1B:0D:03:4A:D0:DA:DE:E7:C8:9F:17:EA:4A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/jjUUZbxFHxsNA0rQ2t7nyJ8X6ko.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
26:82:47:88:99:d0:0a:66:17:be:cc:44:8a:bc:9c:de:b2:20:
ba:0b:c1:6a:e7:de:ce:5b:fe:7e:aa:d2:52:26:1c:c6:75:3f:
7a:cc:73:aa:40:1e:a0:22:22:00:4a:98:6e:81:d2:e8:b3:42:
1a:10:18:c3:1b:42:46:48:04:23:3a:78:a2:1a:33:2b:4d:d5:
79:b8:bd:5e:f8:cf:ec:95:a0:8d:f2:cd:ff:22:d7:f9:95:25:
82:a9:8e:84:4f:a4:31:d3:19:5e:5d:7f:cd:20:25:a2:fa:be:
43:48:81:37:c9:de:38:36:cf:b4:ed:6c:7b:84:bb:2f:b0:13:
12:69:4b:38:2f:a6:92:49:3e:bc:13:ca:13:d1:54:39:f3:e7:
45:6e:ca:d8:f1:5e:ae:d5:7a:74:76:14:fa:40:b2:6c:5f:e7:
c1:d9:85:c8:a1:66:60:1c:13:38:2f:7b:35:8d:72:74:f9:2e:
69:55:2e:e3:98:a7:02:61:1e:4f:d6:b3:33:ae:6f:3e:84:ab:
53:45:4a:58:ae:f4:b3:f4:f0:e9:0d:e7:8a:b6:d5:bb:6e:e6:
0f:cf:64:5b:72:3e:04:03:39:f6:b9:93:0d:a1:67:89:33:13:
6e:a8:a9:94:c0:92:06:0e:c2:84:7f:7f:02:f3:94:9a:c3:b3:
0c:65:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org