Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/rVtMC3tsQL24tbyh78wKnRMucww.roa
File: rVtMC3tsQL24tbyh78wKnRMucww.roa (raw, json)
Hash identifier: 5o4b9iGJ4Gi1FiIW3ZM8LSuilPcEN8c5+1p4rS+vDzo=
Subject key identifier: AD:5B:4C:0B:7B:6C:40:BD:B8:B5:BC:A1:EF:CC:0A:9D:13:2E:73:0C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0838
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/rVtMC3tsQL24tbyh78wKnRMucww.roa
Signing time: Wed 14 Jun 2023 02:54:03 +0000
ROA not before: Wed 14 Jun 2023 02:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 02:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=AD5B4C0B7B6C40BDB8B5BCA1EFCC0A9D132E730C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:0e:3a:05:f1:3f:a3:58:b5:e2:9f:e6:29:
30:cd:3a:1a:31:3d:e1:65:2a:a9:a9:bb:8c:65:e0:
48:45:7f:47:8b:ef:3c:d3:2d:e8:5c:50:eb:17:2d:
7f:a9:65:9b:22:85:ee:76:14:50:9b:2b:38:97:5a:
60:c3:24:00:90:70:f2:f1:6c:a7:3d:5f:3f:c1:e4:
f6:43:fa:0a:0a:3c:b5:b8:9d:cb:46:d2:1b:fc:41:
3a:3a:91:88:ff:7a:8a:01:30:8e:20:75:13:92:a9:
9d:c3:61:75:ae:a0:c6:ee:32:2e:5e:d9:27:92:bb:
2f:f7:6e:eb:f2:da:50:0b:ce:69:52:8d:27:85:7c:
55:bb:8d:14:e7:da:00:44:5b:9b:1e:1e:c3:72:e6:
85:7d:da:18:3f:f4:15:f4:82:a1:bf:3b:ee:bd:ce:
31:1b:c2:08:a5:8d:4f:04:0f:11:e6:1a:b8:63:4b:
25:09:31:c1:98:e4:28:27:3b:fa:97:85:3c:b8:14:
ad:fc:e4:61:62:4c:32:40:76:ea:78:6c:05:c5:9c:
85:e9:b5:ee:1d:e7:c7:8e:16:dd:c3:b4:87:c6:22:
d2:9d:55:02:87:cb:f9:7f:a4:e1:8e:92:df:2a:5f:
6c:b3:a7:04:15:bb:28:72:2a:0a:9b:5e:67:52:2b:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5B:4C:0B:7B:6C:40:BD:B8:B5:BC:A1:EF:CC:0A:9D:13:2E:73:0C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/rVtMC3tsQL24tbyh78wKnRMucww.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
08:f8:98:2e:c1:ca:c0:b9:d9:09:8e:a5:73:16:73:5d:d8:f0:
7c:b7:c0:7e:c9:e3:25:82:be:0d:75:58:8c:65:b2:09:1b:af:
a8:e8:58:0d:f4:49:dc:d0:e2:70:ba:e9:02:a7:29:af:f6:7a:
96:7a:af:2f:04:c4:68:9b:76:f0:f0:4a:c7:10:0e:34:1f:26:
ed:86:84:f9:f5:29:2f:73:9c:e6:e1:83:88:5e:0b:89:c1:27:
81:94:d8:db:73:44:ba:d7:cc:bc:23:b2:63:2f:24:cc:b5:db:
b9:3b:3d:54:0a:cc:6f:8e:2e:20:c5:89:f9:df:a0:2f:c1:13:
e7:8c:16:1c:d4:43:e4:35:cb:36:28:84:68:a4:0d:1a:34:88:
fb:1b:71:d9:ed:a0:c1:44:b4:74:de:8b:c6:fa:dc:d9:45:64:
b4:67:dd:04:d8:cc:36:62:2a:67:81:75:2d:72:a9:f6:b3:b5:
b8:73:a0:c0:d7:06:86:f0:c6:77:56:af:78:7c:5b:24:e7:37:
66:7f:c6:67:db:84:45:5a:2f:3d:e9:02:3a:33:9e:26:c2:7e:
f1:29:c5:8c:92:ba:9c:4c:ca:da:0f:b7:3e:3e:e2:32:37:7f:
27:65:7d:5b:7a:82:1b:a4:56:a8:92:4a:25:89:30:80:aa:f2:
23:2a:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org