Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/rKjl7He5KBA9pioJFNSPuVXdCOo.roa
File: rKjl7He5KBA9pioJFNSPuVXdCOo.roa (raw, json)
Hash identifier: MmhePqozhWKuqi3xh2WQDcYa+kkKRYSAv5DQqxiuZc4=
Subject key identifier: AC:A8:E5:EC:77:B9:28:10:3D:A6:2A:09:14:D4:8F:B9:55:DD:08:EA
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0850
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/rKjl7He5KBA9pioJFNSPuVXdCOo.roa
Signing time: Wed 14 Jun 2023 05:54:04 +0000
ROA not before: Wed 14 Jun 2023 05:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 05:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=ACA8E5EC77B928103DA62A0914D48FB955DD08EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:12:ed:66:21:5d:0b:7a:ef:e0:78:5b:69:
e6:da:58:2e:ef:33:31:38:08:b8:51:2a:83:e8:37:
dd:07:ad:87:46:42:4f:33:0e:a5:b2:9e:2b:04:39:
9b:6f:5a:67:69:40:4f:94:ec:14:44:42:fd:b6:a7:
f5:ab:d7:66:ee:7d:e9:c2:a8:5d:a1:85:66:e4:61:
8a:c1:70:73:5a:93:a7:3e:c8:2b:99:fe:3a:d4:49:
86:33:63:63:35:ab:5c:8e:b3:18:6e:40:84:7a:e2:
11:9c:6a:e1:ee:d9:44:b8:b4:ca:7a:01:76:71:a9:
d2:70:95:d1:f7:66:33:77:95:45:93:3c:e4:84:15:
3b:b8:d3:92:38:59:8b:0c:31:87:2f:f2:84:21:1d:
56:53:d4:2a:1d:7c:7d:b6:a6:a0:ee:bb:e4:65:bf:
8f:16:d8:63:bd:26:94:37:8f:24:bc:f1:42:75:1d:
ce:81:8c:a7:cd:66:08:99:5e:6e:30:78:df:98:65:
43:e1:44:47:9c:2d:7f:3b:2c:ae:0a:c2:76:34:aa:
bd:e1:87:85:52:a8:46:3a:d9:2e:d2:88:33:f4:a9:
87:d2:b3:ea:5d:3c:13:c1:66:4c:90:42:cd:65:ad:
31:c1:98:df:19:be:fe:0a:ac:15:07:15:23:32:79:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A8:E5:EC:77:B9:28:10:3D:A6:2A:09:14:D4:8F:B9:55:DD:08:EA
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/rKjl7He5KBA9pioJFNSPuVXdCOo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:ae:d3:bf:74:c9:83:d9:a1:6a:65:23:2c:b7:97:8d:07:93:
e9:5b:a5:04:e1:ae:d1:37:6f:92:19:d8:64:3a:49:f4:78:59:
1e:be:36:a4:e7:f2:77:e3:9f:0f:02:c6:b8:0c:f0:e4:78:3d:
7a:fd:4c:23:0b:b0:ef:10:71:f4:36:46:07:f5:32:02:2f:41:
9c:12:75:42:e2:e8:2b:32:60:00:63:d3:70:c9:9f:dc:18:44:
12:31:18:7e:44:06:ad:18:ca:8e:42:42:8d:91:63:00:dd:97:
ec:42:2c:75:54:e8:1b:3a:d6:f7:be:6f:65:a7:15:a2:53:ab:
3d:4e:19:b5:64:fb:f1:72:1d:be:6e:1c:4d:27:82:e9:67:2e:
d7:6a:8d:d0:cb:3f:5e:a7:84:8d:38:dc:d9:dc:31:16:50:1a:
7d:3c:bb:d6:5e:0e:60:62:75:8b:36:9d:27:ef:c8:9c:ed:1a:
3c:b5:5b:9e:95:e1:86:77:c9:db:da:ff:d5:6f:6a:31:27:f8:
67:bf:83:44:ac:14:d8:06:bc:64:95:fe:5d:45:73:c4:ef:fc:
2d:d1:23:f2:09:ac:f9:2a:4d:8f:c6:b2:76:7e:57:cc:7b:30:
f5:db:b9:80:c2:70:0d:0b:b3:88:70:0e:f8:98:fb:2f:ee:c6:
0e:a1:8f:58
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQw
NTU0MDRaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEFDQThFNUVDNzdCOTI4
MTAzREE2MkEwOTE0RDQ4RkI5NTVERDA4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2txLtZiFdC3rv4HhbaebaWC7vMzE4CLhRKoPoN90HrYdGQk8z
DqWynisEOZtvWmdpQE+U7BREQv22p/Wr12bufenCqF2hhWbkYYrBcHNak6c+yCuZ
/jrUSYYzY2M1q1yOsxhuQIR64hGcauHu2US4tMp6AXZxqdJwldH3ZjN3lUWTPOSE
FTu405I4WYsMMYcv8oQhHVZT1CodfH22pqDuu+Rlv48W2GO9JpQ3jyS88UJ1Hc6B
jKfNZgiZXm4weN+YZUPhREecLX87LK4KwnY0qr3hh4VSqEY62S7SiDP0qYfSs+pd
PBPBZkyQQs1lrTHBmN8Zvv4KrBUHFSMyeSdhAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUrKjl7He5KBA9pioJFNSPuVXdCOowHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvcktqbDdIZTVLQkE5
cGlvSkZOU1B1VlhkQ09vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAqa7Tv3TJg9mhamUjLLeXjQeT6Vul
BOGu0TdvkhnYZDpJ9HhZHr42pOfyd+OfDwLGuAzw5Hg9ev1MIwuw7xBx9DZGB/Uy
Ai9BnBJ1QuLoKzJgAGPTcMmf3BhEEjEYfkQGrRjKjkJCjZFjAN2X7EIsdVToGzrW
975vZacVolOrPU4ZtWT78XIdvm4cTSeC6Wcu12qN0Ms/XqeEjTjc2dwxFlAafTy7
1l4OYGJ1izadJ+/InO0aPLVbnpXhhnfJ29r/1W9qMSf4Z7+DRKwU2Aa8ZJX+XUVz
xO/8LdEj8gms+SpNj8aydn5XzHsw9du5gMJwDQuziHAO+Jj7L+7GDqGPWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org