Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/nfv9UdMvG105PSgVWWRfOIIo0ak.roa
File: nfv9UdMvG105PSgVWWRfOIIo0ak.roa (raw, json)
Hash identifier: +GrB7L7cFjbO2axwjM5FrxD2CwSMyFxZbQz3f5mktig=
Subject key identifier: 9D:FB:FD:51:D3:2F:1B:5D:39:3D:28:15:59:64:5F:38:82:28:D1:A9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07F0
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/nfv9UdMvG105PSgVWWRfOIIo0ak.roa
Signing time: Tue 13 Jun 2023 17:54:01 +0000
ROA not before: Tue 13 Jun 2023 17:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 17:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=9DFBFD51D32F1B5D393D281559645F388228D1A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:af:d1:bf:a8:fe:85:cb:9c:05:d7:28:ec:
60:57:78:bc:bc:4f:57:8d:cf:b4:82:59:80:5e:06:
e9:9a:0d:62:f4:e3:82:2f:db:f3:7b:53:b5:e3:37:
6b:40:7a:81:a2:6f:51:6f:ce:36:61:1b:80:83:9d:
47:33:0f:da:09:e9:06:d9:10:46:fa:10:ad:f0:b8:
3e:77:27:72:72:41:30:95:20:ca:b8:e9:43:dc:12:
af:91:94:37:6a:68:9d:5a:18:b7:62:9c:db:0e:4b:
6f:b3:9e:83:01:d9:51:86:cc:70:7a:ce:05:d9:30:
13:d4:e7:96:62:3a:c8:1d:55:a6:84:dd:fc:b1:8c:
7f:df:ec:0b:17:74:e9:69:33:cc:a0:95:a2:ed:44:
1d:7c:95:5a:43:1f:cf:96:ce:fc:b6:83:05:24:22:
a1:9d:ed:ba:08:84:c0:47:48:20:64:5e:7d:6e:84:
f2:31:cb:cc:03:09:59:5b:c7:48:97:f9:7a:05:b7:
1f:fd:6b:37:89:84:26:9f:c8:10:1f:fd:9b:06:4c:
f7:1a:cb:8c:57:ce:a8:55:08:f4:4b:0b:35:3c:4e:
eb:5a:04:1f:5f:c3:b5:6f:a5:fe:d3:19:14:38:ba:
7d:62:eb:6a:40:7d:34:7a:ab:91:99:82:91:95:93:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:FD:51:D3:2F:1B:5D:39:3D:28:15:59:64:5F:38:82:28:D1:A9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/nfv9UdMvG105PSgVWWRfOIIo0ak.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
52:d6:e3:7e:7c:24:36:21:b4:60:da:e3:94:6a:38:e5:b4:dd:
93:44:f8:6b:35:09:ba:21:de:17:08:8f:5c:c3:23:4c:63:bd:
f8:39:62:62:6a:a2:f7:a7:11:27:61:22:2a:1b:ea:5a:0b:64:
1f:7d:44:c9:f3:6c:e1:a3:f2:0e:3d:45:eb:7e:87:c9:af:ee:
10:02:56:48:cb:2d:55:c4:d4:8d:1d:c6:e0:63:77:51:be:c0:
d5:98:04:97:46:eb:11:00:1a:8f:cb:bb:26:d0:cf:96:7c:a8:
50:1c:18:5d:96:ed:05:14:e7:51:9d:cf:5f:5e:b4:3e:7e:28:
ae:42:a1:8b:aa:34:b9:6f:7a:9e:80:c9:6d:c0:c3:5e:2d:0c:
be:a1:1d:3b:ac:65:b1:20:61:45:09:51:51:f9:f6:a3:c4:c8:
95:73:63:e9:ff:22:01:51:cd:3c:31:22:30:b0:7a:25:30:b8:
04:0a:57:90:bc:f4:51:ea:ae:3f:cb:29:71:d3:ce:41:ef:d9:
18:56:e3:aa:cd:15:1d:33:21:81:14:02:5a:78:9c:b4:bc:b1:
11:58:b8:7c:58:fa:3f:f1:03:d2:65:b1:a3:39:1d:d2:17:20:
1e:3b:53:26:c9:52:b4:5f:5f:83:4b:b9:09:bf:e3:76:b2:63:
05:62:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org