Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/psAEaOl5V4TPkAh8FSAAAAWPy1Q.roa
File: psAEaOl5V4TPkAh8FSAAAAWPy1Q.roa (raw, json)
Hash identifier: zUjflb87oH+aieOT7Mhe5wxfQRC5/hLUzUWn4ivZsQM=
Subject key identifier: A6:C0:04:68:E9:79:57:84:CF:90:08:7C:15:20:00:00:05:8F:CB:54
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 06E1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/psAEaOl5V4TPkAh8FSAAAAWPy1Q.roa
Signing time: Thu 18 May 2023 07:23:36 +0000
ROA not before: Thu 18 May 2023 07:23:36 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: May 18 07:23:36 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=A6C00468E9795784CF90087C15200000058FCB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:c3:98:7b:8e:d4:07:09:33:17:7d:e7:34:
d5:6a:7f:ca:50:ee:2f:8b:79:10:93:40:53:b9:04:
6b:de:7e:0a:6e:54:7e:37:04:fb:cb:1e:4d:c4:31:
96:92:24:d2:da:f8:7d:3b:71:12:d1:dd:3b:73:0e:
39:49:c0:d7:90:32:07:5e:fd:d5:49:e1:8b:9a:7f:
15:92:f2:27:39:ca:ca:b0:cd:12:62:62:79:47:c8:
b7:ac:ea:4f:ae:a0:1d:94:e5:0b:f5:08:63:49:ed:
99:0a:4e:ac:23:34:8a:7b:ab:e0:22:02:43:d3:63:
d6:58:9c:11:fe:25:df:a6:cf:5c:f2:f0:f0:bb:36:
fd:8d:e8:bd:5d:b8:fd:74:57:26:f5:25:f2:85:02:
6f:ec:0a:05:a4:f8:1c:24:75:9a:f5:c7:cc:bb:68:
c1:ea:a7:d0:fa:e5:97:8d:2c:d4:c7:57:41:31:a7:
d2:70:9a:5c:78:67:4c:6b:4f:c7:a3:c2:34:7a:a0:
19:7f:79:be:25:8b:de:e2:dc:f6:57:f0:3e:c8:d6:
e5:0e:d9:56:53:03:56:40:00:6c:12:18:60:ca:e2:
ab:51:6f:33:34:e2:fd:c5:5f:07:70:d1:e0:08:34:
42:bb:7f:fb:fe:9d:ac:1a:ae:b4:03:29:15:cb:66:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C0:04:68:E9:79:57:84:CF:90:08:7C:15:20:00:00:05:8F:CB:54
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/psAEaOl5V4TPkAh8FSAAAAWPy1Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:75:ce:5b:62:7e:ee:eb:09:8a:bd:f3:22:3a:c0:33:7b:49:
b5:3e:fa:5e:f1:21:56:49:c1:d8:d2:7e:ea:f0:11:91:ce:b7:
16:8f:6d:ce:67:4d:8b:e0:85:04:8e:7b:48:2a:66:5b:ce:39:
52:ca:30:b3:3c:3d:27:b4:42:1f:d5:40:8c:53:71:b4:36:1a:
74:1e:8c:2e:3a:d7:a9:c9:b5:68:05:30:ed:cc:b1:03:1c:db:
ee:b5:19:2e:af:0d:b2:64:4f:e1:94:78:d1:77:28:2e:99:8c:
42:8d:a5:3d:dd:14:4f:78:ad:20:93:f2:60:ab:19:98:67:41:
9f:a9:bb:2e:a0:5a:b5:af:dd:cd:f0:76:df:64:10:c3:68:06:
c5:2c:20:43:1f:e2:26:46:51:df:b1:4b:06:f5:57:44:f9:0a:
f6:0f:82:5a:ee:32:9e:09:f5:42:fe:15:a9:0b:bc:a5:08:33:
53:f9:a0:73:fa:31:ee:3d:6b:6d:a1:ad:ea:a1:1e:6f:e2:90:
43:2c:9f:cb:89:f3:30:8e:ed:e8:3a:42:56:44:49:ca:15:d8:
82:b4:06:9b:f2:c3:22:f4:b2:2c:6a:09:09:fc:d1:10:88:15:
99:e4:fd:d5:36:64:e5:2c:e3:8e:e3:c3:eb:ce:0a:c4:07:c4:
45:19:3e:0f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA1MTgw
NzIzMzZaFw0yNDAyMTcwMjQ2NTlaMDMxMTAvBgNVBAMTKEE2QzAwNDY4RTk3OTU3
ODRDRjkwMDg3QzE1MjAwMDAwMDU4RkNCNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKvcOYe47UBwkzF33nNNVqf8pQ7i+LeRCTQFO5BGvefgpuVH43
BPvLHk3EMZaSJNLa+H07cRLR3TtzDjlJwNeQMgde/dVJ4YuafxWS8ic5ysqwzRJi
YnlHyLes6k+uoB2U5Qv1CGNJ7ZkKTqwjNIp7q+AiAkPTY9ZYnBH+Jd+mz1zy8PC7
Nv2N6L1duP10Vyb1JfKFAm/sCgWk+BwkdZr1x8y7aMHqp9D65ZeNLNTHV0Exp9Jw
mlx4Z0xrT8ejwjR6oBl/eb4li97i3PZX8D7I1uUO2VZTA1ZAAGwSGGDK4qtRbzM0
4v3FXwdw0eAINEK7f/v+nawarrQDKRXLZozjAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUpsAEaOl5V4TPkAh8FSAAAAWPy1QwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvcHNBRWFPbDVWNFRQ
a0FoOEZTQUFBQVdQeTFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAo3XOW2J+7usJir3zIjrAM3tJtT76
XvEhVknB2NJ+6vARkc63Fo9tzmdNi+CFBI57SCpmW845Usowszw9J7RCH9VAjFNx
tDYadB6MLjrXqcm1aAUw7cyxAxzb7rUZLq8NsmRP4ZR40XcoLpmMQo2lPd0UT3it
IJPyYKsZmGdBn6m7LqBata/dzfB232QQw2gGxSwgQx/iJkZR37FLBvVXRPkK9g+C
Wu4yngn1Qv4VqQu8pQgzU/mgc/ox7j1rbaGt6qEeb+KQQyyfy4nzMI7t6DpCVkRJ
yhXYgrQGm/LDIvSyLGoJCfzREIgVmeT91TZk5SzjjuPD684KxAfERRk+Dw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org