Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/rOsNjZ6D62tsTdvYrFDNRDu183Q.roa
File: rOsNjZ6D62tsTdvYrFDNRDu183Q.roa (raw, json)
Hash identifier: x5MYlF+X5IQVivNNm4VQh3JRQ6aKZ4RrCmDQaZXqlWM=
Subject key identifier: AC:EB:0D:8D:9E:83:EB:6B:6C:4D:DB:D8:AC:50:CD:44:3B:B5:F3:74
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07BC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/rOsNjZ6D62tsTdvYrFDNRDu183Q.roa
Signing time: Tue 13 Jun 2023 11:24:10 +0000
ROA not before: Tue 13 Jun 2023 11:24:10 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 11:24:10 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=ACEB0D8D9E83EB6B6C4DDBD8AC50CD443BB5F374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:a2:e4:7e:5f:6e:24:41:6b:1b:e4:82:6b:
54:6d:c1:d8:4d:f9:e3:17:b9:0f:1f:b5:1d:06:a9:
6a:8f:4d:50:68:ee:a0:98:d3:a4:07:21:a2:38:e7:
13:3c:14:b9:c0:8b:53:24:c4:03:52:b9:e5:35:d8:
33:12:5e:0e:f7:71:8c:4b:1f:5a:21:46:c1:5b:24:
1f:b2:07:f3:a5:9c:47:10:01:a1:b2:ac:e4:77:a1:
59:ba:42:73:50:bf:de:2d:6b:76:f1:3d:c1:2e:76:
e6:49:6a:bc:49:ca:07:a6:5f:54:10:d0:1a:dd:e4:
8c:0a:15:0f:35:6f:6c:d5:76:b0:f1:95:44:a1:d2:
f3:85:05:a4:83:7b:d5:7d:30:9d:cf:76:83:8c:d8:
d2:1b:32:24:77:c0:75:7f:d7:99:6f:bc:27:db:47:
2a:af:65:13:13:4f:6f:f3:79:95:21:a3:18:90:bd:
06:89:3f:ad:8e:e9:5d:58:7e:be:c4:fc:39:3c:22:
1c:14:88:fb:77:49:8b:01:ed:a9:d8:f1:06:06:11:
bd:c5:a2:44:da:eb:e8:43:3a:cc:de:d5:d1:c6:6b:
c0:50:8d:1a:d0:4a:aa:46:c2:15:cf:7b:a2:7e:26:
2c:22:28:2f:dd:31:9e:42:ed:07:e3:cb:3c:20:6e:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EB:0D:8D:9E:83:EB:6B:6C:4D:DB:D8:AC:50:CD:44:3B:B5:F3:74
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/rOsNjZ6D62tsTdvYrFDNRDu183Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:ad:5c:20:ae:69:57:50:4c:10:3b:0b:6a:dc:da:de:3a:16:
6d:8c:d4:26:04:c5:08:08:2c:3d:64:03:93:77:a7:5e:a3:a5:
56:af:62:b7:6b:b1:83:b2:a8:48:e3:0f:a6:dd:63:c0:13:10:
95:ee:ed:ae:14:12:a0:d4:b8:b3:29:22:c7:0e:7a:3e:c8:4d:
73:30:fc:9b:82:4b:ad:1f:b4:2b:0a:07:3d:86:49:c9:00:a4:
1c:e9:a2:aa:b5:2a:b7:32:27:fd:06:be:3c:15:b0:43:00:8e:
63:56:e2:15:3d:79:d4:44:e3:6f:2b:b0:54:3c:f6:e7:05:7a:
d2:5b:de:d8:4f:90:61:a2:df:dc:3e:4d:71:d1:72:4e:74:35:
48:9a:1d:00:62:f7:c6:aa:d6:0c:d1:2e:dc:d4:26:4e:71:8a:
43:7a:82:8d:36:0a:82:97:08:3c:5b:05:2a:b5:dd:a5:3b:2e:
29:b4:8a:cb:db:d9:82:10:bf:d8:a0:00:ea:08:62:93:f8:41:
77:b1:5b:47:ba:da:17:4c:4d:fc:5e:60:13:8a:96:55:18:93:
56:6f:32:6f:16:57:5d:82:16:84:0e:66:6b:6f:48:9d:2a:35:
5b:0f:5d:0f:9d:a7:30:13:60:19:23:24:10:b1:47:77:b7:91:
93:8b:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org