Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/oLnd7wk53ngjezCR_xqFhp9anAI.roa
File: oLnd7wk53ngjezCR_xqFhp9anAI.roa (raw, json)
Hash identifier: k4lnjkb0GrYel8FI03on4Kki1gbYkYZUpjBBrMYhfb4=
Subject key identifier: A0:B9:DD:EF:09:39:DE:78:23:7B:30:91:FF:1A:85:86:9F:5A:9C:02
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07EC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/oLnd7wk53ngjezCR_xqFhp9anAI.roa
Signing time: Tue 13 Jun 2023 17:24:02 +0000
ROA not before: Tue 13 Jun 2023 17:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 17:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=A0B9DDEF0939DE78237B3091FF1A85869F5A9C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:64:27:1d:5b:60:d8:1d:0c:a2:58:db:03:
11:ff:fc:cc:40:39:db:53:a4:e7:f0:48:5b:f5:ed:
2d:e8:32:06:98:ad:a7:c9:e1:d9:aa:41:1e:ec:25:
33:41:07:a3:0b:21:e3:38:48:02:4c:8e:e5:b5:ec:
cc:22:dd:8e:98:5c:ca:59:df:a2:39:4c:5f:2c:f2:
82:64:9a:b6:4b:27:ba:3b:bf:7b:fa:fa:1a:88:2d:
70:ba:22:3f:5a:92:7d:0c:10:91:27:8d:2e:7b:f2:
2b:17:bd:b6:9d:0f:04:93:d6:5e:ed:ed:0e:d3:39:
05:40:54:c2:85:f3:fd:5f:1d:ff:09:90:3e:ab:6c:
69:99:17:91:b4:90:02:6b:5d:60:a2:31:87:ce:e7:
0d:13:31:25:53:39:54:7a:72:08:1b:52:ae:c8:4a:
ad:60:bd:d3:85:23:01:55:71:15:f4:b5:f0:c2:19:
6f:f5:8e:5c:dc:3e:91:0c:ca:c4:f6:bc:77:40:31:
8c:95:63:fe:1b:a3:83:d3:06:b2:e7:50:c0:ce:47:
63:e9:aa:47:c1:3f:7f:dc:b0:16:2e:ad:33:71:ac:
8b:34:c9:e8:6b:bb:b7:39:71:5f:15:d2:65:23:e9:
83:e3:01:ef:ab:9c:6e:43:12:0e:90:c7:31:56:8f:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B9:DD:EF:09:39:DE:78:23:7B:30:91:FF:1A:85:86:9F:5A:9C:02
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/oLnd7wk53ngjezCR_xqFhp9anAI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
76:df:41:7a:9d:9b:bf:59:ed:a7:f5:8d:e5:54:70:01:e0:ec:
5e:66:e9:a0:54:47:92:fe:2a:ae:14:41:7f:27:30:db:fb:26:
ec:f3:37:1e:83:28:31:78:7c:46:fa:a7:c9:4b:85:a1:3b:e0:
05:e4:2a:37:2a:7c:49:86:9e:36:a3:77:af:82:4b:8e:a2:a4:
3f:52:82:bf:cd:5d:9c:2f:27:59:5d:c1:48:b4:57:57:72:a0:
0d:75:44:b0:11:a6:8e:75:6e:34:74:8d:99:17:09:e5:76:1d:
ff:6a:e1:5b:6d:74:ed:43:e0:1e:48:b1:fc:98:67:8b:11:f5:
17:b0:90:d7:80:aa:d5:cd:8b:3b:f8:cf:ab:b2:2b:0d:9d:38:
d6:f4:a8:9e:f5:5d:76:0b:f0:51:86:e7:0f:73:09:41:31:e6:
a5:4d:ec:fb:4d:0e:e5:62:5b:41:19:82:cc:55:73:0b:75:0c:
ae:f6:2c:08:18:f0:b3:91:e7:af:cb:97:ad:65:0b:5d:80:16:
db:87:de:66:31:57:34:77:68:37:93:01:8b:3b:e2:eb:b7:1c:
d6:bd:9e:ac:61:20:45:b6:7b:27:09:4e:00:32:ab:de:fb:0e:
a5:0d:44:fa:1c:8f:28:5c:e8:a3:e1:0b:c3:b2:c5:52:79:29:
f3:bb:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org