Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/lb5Om6yZfQATc_ufQZ6C55-LxOo.roa
File: lb5Om6yZfQATc_ufQZ6C55-LxOo.roa (raw, json)
Hash identifier: BVt3ZU4gtyhKusHXprXQdKZJMgbhevJ61o8ufmsdB3M=
Subject key identifier: 95:BE:4E:9B:AC:99:7D:00:13:73:FB:9F:41:9E:82:E7:9F:8B:C4:EA
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0860
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/lb5Om6yZfQATc_ufQZ6C55-LxOo.roa
Signing time: Wed 14 Jun 2023 07:54:04 +0000
ROA not before: Wed 14 Jun 2023 07:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 07:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=95BE4E9BAC997D001373FB9F419E82E79F8BC4EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:98:98:c8:34:3f:e2:70:e2:1c:9f:e1:dd:
8a:57:b7:f6:c9:4c:ad:2b:13:1f:4c:1e:05:ea:ba:
52:8c:4c:aa:10:4b:f6:4e:a2:f0:c2:29:7f:6c:19:
6e:79:96:9c:74:32:3a:57:22:0f:0c:c9:a7:6d:1f:
8f:0a:c6:0a:1f:89:6f:9c:f9:cd:4f:e1:52:6e:b5:
5d:e8:bb:3c:ca:e7:02:99:99:86:ba:27:0e:4b:37:
9b:91:4f:86:45:1d:a5:ce:41:f9:29:f2:da:75:2e:
49:fa:76:ab:09:27:d7:58:e2:d4:cc:0e:14:25:0b:
f4:92:b4:01:5d:ab:9e:51:9d:04:2d:65:4a:1b:6f:
b8:fc:5b:54:91:26:48:81:c8:0e:35:cd:47:f5:93:
7d:73:a7:9c:5b:a9:4f:11:9c:58:07:c0:6c:a2:75:
f2:f4:08:8e:40:8d:c5:33:97:8a:ca:d4:c5:56:cf:
88:c5:1a:af:8d:3e:8d:71:fc:40:60:cd:10:25:4c:
e4:71:5a:eb:18:d9:ef:3c:72:5a:40:8a:a0:4d:7b:
aa:3b:d2:98:66:6a:e2:6e:6a:9a:f2:c8:0e:6b:72:
e3:ab:a8:62:ab:90:4f:13:76:6e:fd:e4:41:99:f5:
0b:d2:fa:74:e6:49:65:4a:88:3b:00:15:f2:7d:fa:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BE:4E:9B:AC:99:7D:00:13:73:FB:9F:41:9E:82:E7:9F:8B:C4:EA
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/lb5Om6yZfQATc_ufQZ6C55-LxOo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:0c:45:34:a5:2e:a5:cc:1c:dc:92:1a:92:1a:90:e3:f9:7d:
51:21:bc:e7:0e:a1:97:97:ef:8e:1d:65:26:7d:2d:c0:21:63:
d4:60:da:01:97:4d:f3:1f:3f:0b:08:e5:b7:41:88:04:64:0d:
3b:ce:e3:61:56:a6:17:4f:d2:f9:15:3a:bc:af:3f:0d:2c:95:
1b:9f:0e:53:5f:41:08:3f:a7:5e:a2:42:d3:28:3b:1f:75:ee:
fa:ef:e1:02:c2:c7:de:b6:8c:7c:89:13:7f:a7:b1:36:c0:f1:
a0:5f:a2:53:48:b9:0f:6d:bf:40:a0:ae:51:41:c7:fb:d0:a7:
57:23:bb:2f:43:b2:74:26:f8:f1:47:bc:46:96:fd:3a:60:cb:
53:03:1a:4b:d9:e6:0e:92:4a:05:4b:14:c1:09:09:9f:0e:53:
04:74:8f:45:c1:a6:ba:0e:60:22:c3:0f:ab:56:8f:0b:d6:85:
58:66:9a:1b:a2:5b:05:47:37:f9:7d:b0:4b:90:a7:a9:42:2d:
dd:30:0f:24:d4:b3:b9:94:f9:a2:2e:39:2e:a2:36:4e:30:41:
bd:c0:6b:65:10:85:1a:ca:e2:ba:ed:df:52:bf:cb:c8:25:6d:
36:e9:b1:61:60:bf:b1:59:04:f6:73:fa:ef:46:82:42:87:13:
79:db:4a:a7
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQw
NzU0MDRaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDk1QkU0RTlCQUM5OTdE
MDAxMzczRkI5RjQxOUU4MkU3OUY4QkM0RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC/5iYyDQ/4nDiHJ/h3YpXt/bJTK0rEx9MHgXqulKMTKoQS/ZO
ovDCKX9sGW55lpx0MjpXIg8MyadtH48KxgofiW+c+c1P4VJutV3ouzzK5wKZmYa6
Jw5LN5uRT4ZFHaXOQfkp8tp1Lkn6dqsJJ9dY4tTMDhQlC/SStAFdq55RnQQtZUob
b7j8W1SRJkiByA41zUf1k31zp5xbqU8RnFgHwGyidfL0CI5AjcUzl4rK1MVWz4jF
Gq+NPo1x/EBgzRAlTORxWusY2e88clpAiqBNe6o70phmauJuapryyA5rcuOrqGKr
kE8Tdm795EGZ9QvS+nTmSWVKiDsAFfJ9+j3dAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUlb5Om6yZfQATc/ufQZ6C55+LxOowHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvbGI1T202eVpmUUFU
Y191ZlFaNkM1NS1MeE9vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAsAxFNKUupcwc3JIakhqQ4/l9USG8
5w6hl5fvjh1lJn0twCFj1GDaAZdN8x8/Cwjlt0GIBGQNO87jYVamF0/S+RU6vK8/
DSyVG58OU19BCD+nXqJC0yg7H3Xu+u/hAsLH3raMfIkTf6exNsDxoF+iU0i5D22/
QKCuUUHH+9CnVyO7L0OydCb48Ue8Rpb9OmDLUwMaS9nmDpJKBUsUwQkJnw5TBHSP
RcGmug5gIsMPq1aPC9aFWGaaG6JbBUc3+X2wS5CnqUIt3TAPJNSzuZT5oi45LqI2
TjBBvcBrZRCFGsriuu3fUr/LyCVtNumxYWC/sVkE9nP670aCQocTedtKpw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org