Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ksbfITBZlHsJN0gj1HmgD3P4SGU.roa
File: ksbfITBZlHsJN0gj1HmgD3P4SGU.roa (raw, json)
Hash identifier: 3kxkcHvsio8drI1/PA/y2dKfXmElem7VLysYByVCGJ4=
Subject key identifier: 92:C6:DF:21:30:59:94:7B:09:37:48:23:D4:79:A0:0F:73:F8:48:65
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07A8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ksbfITBZlHsJN0gj1HmgD3P4SGU.roa
Signing time: Tue 13 Jun 2023 08:54:00 +0000
ROA not before: Tue 13 Jun 2023 08:54:00 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1960 (0x7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 08:54:00 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=92C6DF213059947B09374823D479A00F73F84865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e5:2e:fa:ef:87:ca:bd:96:3e:2f:e4:53:8d:
bd:ba:74:22:e9:66:b8:31:46:c5:51:25:f2:ba:47:
04:67:70:57:bb:1c:87:8d:7a:2b:76:fd:fc:b1:1f:
af:d6:cd:24:ac:03:91:d0:6d:55:7b:38:b0:a2:91:
1a:3c:06:cc:8d:d1:f3:86:6a:0d:e1:b9:c0:20:9f:
83:3e:21:b4:54:c5:3e:e3:d7:08:90:5f:fa:ba:8c:
23:77:4e:69:98:4c:a5:5d:3b:a7:52:f1:7a:3e:79:
64:d1:81:05:58:80:29:75:4a:d0:c5:c7:cd:6c:e1:
3a:39:a9:ed:87:d2:12:d6:63:3a:2c:21:c6:5b:f9:
50:7b:e9:57:ca:43:65:2a:2d:ff:71:97:40:f4:97:
e0:0d:56:80:fb:1d:d4:99:99:d0:50:5d:e4:36:8b:
17:38:08:41:d9:fb:5d:e4:77:a4:20:19:34:c6:1c:
e8:84:a1:b2:15:f2:db:d2:e2:bf:ee:c0:ae:9c:fb:
3d:5b:49:41:d6:f4:ae:b4:4e:c1:54:7c:80:10:7e:
f2:fb:c3:61:a6:6f:9c:17:e7:56:aa:e5:86:71:61:
49:e2:86:12:c4:e8:9c:ed:c6:aa:2d:fe:0e:59:08:
e7:a6:2f:89:44:45:a2:fc:ca:f9:5e:4f:f9:2f:25:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C6:DF:21:30:59:94:7B:09:37:48:23:D4:79:A0:0F:73:F8:48:65
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ksbfITBZlHsJN0gj1HmgD3P4SGU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
12:16:c7:8b:c7:03:58:d5:9e:ac:9b:1e:79:dc:05:b1:28:2a:
af:6b:74:14:5e:5c:29:2d:70:5b:cb:c7:99:3e:3d:2a:d2:82:
78:a9:c1:0f:af:21:ea:a4:a2:3b:d3:fe:8c:82:35:a9:f8:a4:
8d:40:e6:f8:03:d9:bd:4c:99:c7:62:08:c8:27:3f:56:03:d2:
63:4a:5f:f7:c9:17:64:8b:01:a2:33:42:42:b1:d4:00:ca:c8:
d3:ef:cc:33:27:a7:a9:a4:01:1f:92:8b:1a:3c:2c:81:38:db:
e0:d9:15:77:73:43:f3:dc:75:c9:d7:32:bc:0b:1d:a6:d8:e7:
69:a4:c8:bf:b1:f6:64:53:02:10:fc:7f:84:6e:6a:a9:ad:ce:
d2:d8:2c:4e:aa:89:ea:6d:86:7d:90:51:80:b0:8b:36:58:7e:
ff:e1:1a:d6:75:e7:bb:8b:53:e0:95:4c:be:3f:8f:bf:08:be:
1a:dd:2f:8e:0d:02:d1:ce:3f:d5:a2:dd:95:01:d5:71:fe:90:
eb:45:7a:6c:72:2b:78:ed:00:cc:3d:63:b8:59:ae:59:85:8b:
a6:1b:51:72:61:f9:1f:2a:50:a5:9b:84:d8:1c:fe:d7:7e:5e:
54:5a:56:b9:7d:af:f2:ed:31:08:a7:4b:a0:04:c1:f0:8f:64:
0e:c4:3a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org