Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/kmvUbr4QBCar_8PPi4YQ3Wa1uoE.roa
File: kmvUbr4QBCar_8PPi4YQ3Wa1uoE.roa (raw, json)
Hash identifier: UylunJd9CAt2SDljBctsqffX77qFXwFMSPVo0Nz4RHk=
Subject key identifier: 92:6B:D4:6E:BE:10:04:26:AB:FF:C3:CF:8B:86:10:DD:66:B5:BA:81
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0808
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/kmvUbr4QBCar_8PPi4YQ3Wa1uoE.roa
Signing time: Tue 13 Jun 2023 20:54:11 +0000
ROA not before: Tue 13 Jun 2023 20:54:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 20:54:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=926BD46EBE100426ABFFC3CF8B8610DD66B5BA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:79:a7:16:35:d7:e9:02:e3:26:d7:d8:a5:
bd:9d:c6:b4:a6:75:50:52:c8:92:a9:00:47:df:c5:
2d:45:44:4c:4f:29:60:a0:fb:bb:68:a7:e1:d4:c6:
2f:a8:0a:78:a1:63:d6:89:ec:95:3b:3d:b5:96:b2:
4a:36:bc:a1:cd:6c:27:8f:32:4b:dd:62:9a:c9:c0:
0f:ec:70:25:0e:5e:73:7c:97:84:fd:7e:32:a2:5d:
bb:c6:31:bf:c0:80:a3:25:17:35:79:90:bf:7c:9b:
b9:43:b4:a2:1c:2f:f6:b5:dd:e9:db:ff:fa:00:dc:
2f:8d:c7:63:c6:40:76:0c:49:9c:98:1c:1d:c9:38:
df:25:e4:d7:91:1a:f4:99:70:4c:0e:f5:81:04:d8:
d7:87:7e:38:e9:01:1c:a2:ef:eb:6b:cb:17:57:51:
68:57:69:bf:c3:71:ab:d3:0a:8d:a2:47:b6:a7:03:
03:50:35:b4:ca:9c:52:37:25:a1:61:ed:b4:a5:81:
93:84:69:16:63:18:0c:5d:41:f4:e1:9d:06:fe:13:
b8:65:25:7c:d4:bd:44:95:90:fd:8d:08:67:ec:2f:
6d:bb:2b:68:4d:0d:13:84:7f:ef:6a:49:21:4d:fe:
8e:7a:a5:b5:1e:bc:5f:cc:11:8c:90:c4:97:2e:7e:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6B:D4:6E:BE:10:04:26:AB:FF:C3:CF:8B:86:10:DD:66:B5:BA:81
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/kmvUbr4QBCar_8PPi4YQ3Wa1uoE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:a2:dd:00:af:18:b3:1e:7b:a3:8d:2c:6a:60:98:ca:ff:bc:
c3:8f:a6:e9:72:5a:4a:c2:c2:a4:ea:89:b7:33:fa:48:c8:17:
b5:6f:e7:5d:20:1a:1c:1e:c4:16:a8:8a:2a:4f:be:48:2f:db:
9f:b1:2e:30:68:c9:55:7d:85:f5:b2:47:0e:e1:02:7d:81:a2:
37:90:74:c3:01:09:df:b1:90:7b:75:3d:5d:88:36:2f:92:c6:
23:6e:6d:9a:18:03:99:29:ad:4f:98:c8:09:95:62:eb:10:07:
7e:12:eb:d5:f3:41:20:77:53:0c:e8:60:c7:34:e4:c3:5b:66:
1c:ac:97:33:a7:1a:59:81:fa:89:5f:08:26:18:36:da:19:92:
ba:81:c5:9a:41:5f:62:07:cb:21:bb:d4:05:cb:57:b8:cd:8e:
c2:70:90:1f:91:ae:ba:06:51:70:4b:9a:07:a1:e7:f0:18:4b:
52:57:e0:13:29:bd:aa:fc:ca:dd:11:a8:67:b6:95:0e:b8:14:
9d:94:52:3c:83:2b:6d:2a:19:b3:eb:5e:32:73:bc:62:e3:a7:
0d:e9:7e:72:41:5b:09:75:41:35:63:ae:c7:db:28:d8:26:c1:
c0:76:42:2a:5d:05:80:d0:c5:6e:6b:76:0d:51:59:60:9b:f4:
62:98:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org