Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/nga1Wquy_5muFi3EIBCZwarsyj0.roa
File: nga1Wquy_5muFi3EIBCZwarsyj0.roa (raw, json)
Hash identifier: LNMJ1ku+znozt6SOCEG83HibwptSn1yi0qS5aIJKW2M=
Subject key identifier: 9E:06:B5:5A:AB:B2:FF:99:AE:16:2D:C4:20:10:99:C1:AA:EC:CA:3D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07A4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/nga1Wquy_5muFi3EIBCZwarsyj0.roa
Signing time: Tue 13 Jun 2023 08:32:01 +0000
ROA not before: Tue 13 Jun 2023 08:32:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 08:32:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=9E06B55AABB2FF99AE162DC4201099C1AAECCA3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:fc:43:2c:72:57:82:b4:44:d3:2a:64:ec:
51:4a:c0:d9:66:fc:ee:0d:59:c7:89:5d:02:83:dd:
a3:00:17:44:d0:5d:af:a2:f2:33:4f:e9:aa:58:1f:
68:e4:5e:64:e7:01:81:2d:ff:78:ad:e5:33:82:54:
e4:17:d2:b2:42:50:f8:7d:5b:4e:ca:3f:82:2c:d2:
f4:47:aa:44:9f:01:45:32:8e:51:f4:bc:87:1f:bc:
89:7c:5c:ff:de:7e:d9:75:a9:d9:a4:40:21:e8:48:
96:3f:44:1e:d4:bd:40:6e:03:ef:4b:55:f8:5f:17:
a7:0e:94:1d:06:2f:cf:98:0f:c6:be:9a:14:8c:91:
60:a9:8c:f5:b7:6a:89:ae:aa:fb:44:ee:c5:c1:0c:
15:9e:28:94:3b:df:f0:9a:ab:cc:ca:ed:51:02:71:
43:c3:45:57:c6:c6:63:de:29:15:d8:64:8a:85:b3:
70:40:9f:a8:06:63:f5:f7:96:58:22:dd:1b:19:30:
62:46:33:23:d0:06:e1:b9:05:c6:4d:54:c0:7a:ce:
34:4a:5f:24:74:e0:5d:48:cb:57:7b:b3:90:f8:c7:
df:9d:1e:00:ab:68:5b:3a:6b:ce:35:45:fe:ea:34:
84:ea:0b:e6:3f:be:d4:88:23:46:cf:db:7f:4f:1f:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:B5:5A:AB:B2:FF:99:AE:16:2D:C4:20:10:99:C1:AA:EC:CA:3D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/nga1Wquy_5muFi3EIBCZwarsyj0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:58:32:a9:05:75:2d:f8:56:72:f5:dc:99:62:30:e5:7c:2c:
bc:08:b1:1c:f4:80:89:03:42:8a:0e:78:b5:c9:63:9c:13:44:
80:1d:e8:63:ab:af:cb:41:cd:4e:2f:ff:2e:ec:6a:6e:e0:a3:
0d:15:ed:29:d5:e5:e8:f0:3d:ce:08:bc:63:af:55:5a:00:08:
82:54:b9:d2:f9:7f:a6:39:14:00:b3:51:21:d7:06:08:b2:59:
7d:1d:87:9c:e2:15:63:28:f6:74:01:57:42:ad:76:17:24:c2:
25:ed:11:71:54:d4:39:3a:50:1d:06:ca:f0:b6:f9:4f:e8:67:
1f:a7:48:e6:68:f7:ee:bd:d5:ed:d9:28:45:84:5a:e3:0f:fe:
a7:98:1e:96:a9:bf:88:0c:ce:dd:10:9a:70:6a:4c:73:b0:4a:
a5:fc:77:b0:e2:ac:98:cd:2a:35:0f:8e:0e:4f:11:5b:f1:17:
a7:26:98:dc:b3:34:0e:b2:1e:6e:da:dd:a2:d0:68:b4:0f:02:
24:20:c0:33:71:83:6f:4f:e2:e1:cd:5b:56:8e:03:6b:98:a8:
1d:92:fc:fb:eb:75:f0:c8:11:c3:9c:5f:75:99:71:85:96:41:
7c:b6:91:e6:4f:68:63:17:d5:56:bc:0d:ab:e0:cf:dd:6a:0b:
9f:ee:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org