Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/o5O2oQtDmYf1RAT3M_4OGvrUoCA.roa
File: o5O2oQtDmYf1RAT3M_4OGvrUoCA.roa (raw, json)
Hash identifier: 0JUNHV931LrG2BapcW+3z/cuNX/98mHk205VLyJmfxo=
Subject key identifier: A3:93:B6:A1:0B:43:99:87:F5:44:04:F7:33:FE:0E:1A:FA:D4:A0:20
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08F8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/o5O2oQtDmYf1RAT3M_4OGvrUoCA.roa
Signing time: Thu 15 Jun 2023 02:54:05 +0000
ROA not before: Thu 15 Jun 2023 02:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 02:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=A393B6A10B439987F54404F733FE0E1AFAD4A020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:18:fa:59:68:2d:45:69:d6:f7:73:68:47:
bc:e9:33:52:74:bb:cb:95:c9:68:96:62:d1:76:83:
d9:80:14:48:82:0b:19:5c:33:6b:10:36:d0:98:9b:
77:3a:03:b6:b9:b2:24:46:04:8a:43:26:52:06:63:
a5:4b:53:8f:34:f6:fd:32:f7:8e:d9:33:a4:de:1b:
9e:6a:d6:25:d2:75:50:2c:b0:89:6c:0b:d6:17:a6:
39:b1:2a:31:38:79:ed:8f:b4:15:20:5b:c4:49:fc:
18:90:06:c4:62:a3:d7:e0:6d:ec:5b:41:0e:37:1a:
b4:b4:c5:40:a6:7f:b4:45:10:7b:fd:c7:4a:b2:ba:
94:eb:6c:78:5d:1e:ee:21:71:71:e9:9a:fe:e3:57:
33:69:de:46:4f:70:1d:d5:30:a9:2f:45:78:49:84:
84:97:be:5f:ad:3f:f0:74:cb:d5:c7:bb:a5:b3:8d:
1b:59:da:9e:23:a5:d4:a8:3a:04:9b:52:74:1e:39:
19:1f:dc:45:70:01:d0:51:22:58:52:d8:20:f9:a0:
92:e2:62:42:cd:95:db:e3:57:3f:b9:70:7b:76:41:
08:0f:b2:42:8e:c0:e1:f7:ab:e6:95:9e:cb:47:89:
48:57:17:00:b3:7e:93:5e:1d:cb:ec:38:1c:ed:18:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:93:B6:A1:0B:43:99:87:F5:44:04:F7:33:FE:0E:1A:FA:D4:A0:20
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/o5O2oQtDmYf1RAT3M_4OGvrUoCA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
89:0f:34:73:85:6d:17:01:15:c7:f8:93:b9:8b:56:52:de:67:
73:94:e7:8c:17:4f:a7:6a:80:cf:3e:69:09:ce:77:f9:20:36:
c4:5d:a4:c3:1a:62:b5:86:de:f4:77:8d:28:71:a3:a1:5e:f3:
9b:0f:ff:0f:ba:2a:61:7b:e9:26:62:be:4b:41:7c:9c:cf:21:
c7:24:32:b5:b4:a5:74:c0:62:6d:7d:62:32:0e:05:ed:0e:0c:
48:94:43:c9:47:7d:b5:94:71:05:e2:94:e1:a6:59:04:ab:fe:
a0:86:7a:18:b9:d7:77:91:35:25:05:31:a7:a8:7a:63:d8:96:
17:51:e4:f5:88:c7:b4:bc:bf:38:30:42:a6:ee:7a:96:2d:50:
8f:5b:b3:9a:69:b3:63:4d:5a:0f:c1:68:74:18:17:d7:77:c2:
d7:99:36:4e:ca:41:fe:83:f1:f3:86:c4:eb:c2:3f:49:2a:50:
e4:e6:75:ae:3d:86:bb:48:ca:30:24:9f:99:15:b4:76:41:89:
4a:cc:67:37:87:91:63:a1:ba:4b:b0:bf:fa:62:ea:6c:72:84:
ca:d6:93:42:fd:dc:b9:85:f9:d8:72:64:b3:b7:09:a4:06:95:
97:e1:a4:08:af:4a:b0:76:e7:de:2f:24:13:22:33:91:85:21:
16:63:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org