Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/rYEEm1JIIToZA5FdIS36x83PLoc.roa
File: rYEEm1JIIToZA5FdIS36x83PLoc.roa (raw, json)
Hash identifier: M3M2jzTtgUF/lG1MoerO6PgN+4bZ5wFBRoNvJugLysM=
Subject key identifier: AD:81:04:9B:52:48:21:3A:19:03:91:5D:21:2D:FA:C7:CD:CF:2E:87
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08E8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/rYEEm1JIIToZA5FdIS36x83PLoc.roa
Signing time: Thu 15 Jun 2023 00:54:05 +0000
ROA not before: Thu 15 Jun 2023 00:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280 (0x8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 00:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=AD81049B5248213A1903915D212DFAC7CDCF2E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:97:4c:ae:31:29:a7:2f:1c:f2:42:32:24:
fa:ee:7d:a3:7f:33:df:b5:c0:f4:ad:6d:af:62:8a:
00:ec:43:c1:84:82:16:d3:45:3a:fa:8c:8d:0c:62:
b2:00:24:46:c6:17:ac:3e:e8:82:45:67:aa:05:39:
10:c0:c3:3b:67:76:23:47:08:9c:64:e9:e5:2d:9c:
e4:fa:73:0b:63:ae:85:50:78:35:b1:da:5e:c5:40:
93:0c:3f:11:43:23:d1:ea:20:a4:0e:e2:a3:a8:67:
2b:75:b3:66:b9:ae:c7:ae:a0:f6:68:13:4f:d5:e0:
0d:be:d2:b7:0e:e8:d5:ac:34:7b:a6:64:08:f8:fc:
33:a4:ed:69:00:e7:5b:8d:91:0e:53:9a:8d:5b:20:
fc:66:57:61:7e:15:f1:43:42:2b:a0:43:75:53:c4:
33:d4:aa:c3:41:13:54:5e:6b:f7:8d:91:0b:d2:e9:
9b:5c:b6:7c:ad:e9:d3:7e:40:df:ee:36:e3:1a:be:
18:8f:b2:8f:21:ec:e9:48:87:55:68:59:7f:2a:35:
b9:c9:39:1f:87:07:bf:cb:a3:cb:b3:67:0a:d3:78:
0a:67:f7:60:e1:58:d5:25:10:82:57:b3:01:6f:14:
49:86:a7:16:e0:6e:35:78:eb:30:3d:5f:68:60:40:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:81:04:9B:52:48:21:3A:19:03:91:5D:21:2D:FA:C7:CD:CF:2E:87
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/rYEEm1JIIToZA5FdIS36x83PLoc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
05:0b:13:41:2c:39:72:fa:bc:a6:e3:b7:c7:e6:f6:e0:58:2b:
70:63:93:d0:70:59:b5:3c:9a:b8:4f:61:a9:0f:bf:c1:87:3a:
7a:a7:8e:80:da:db:36:2c:2c:fb:78:87:1b:6a:64:86:b7:02:
69:9d:22:ba:d2:4d:28:64:79:ce:30:68:0d:0a:83:43:17:a3:
cc:20:1c:99:7f:d6:89:ac:d3:73:68:3e:53:c5:91:08:e4:df:
06:da:de:42:36:00:a2:03:74:03:86:62:12:90:a9:8b:0b:22:
41:ca:a3:00:25:b3:80:28:43:73:55:d4:91:6c:aa:9d:7f:be:
65:e9:d5:f9:b6:14:3b:1b:4a:95:28:ec:cd:44:ac:46:d8:6d:
67:1d:b5:e3:a8:b5:31:6c:2b:e4:59:b8:4a:70:54:75:6b:40:
69:80:59:99:1a:4e:3a:41:f4:b3:35:2f:b1:70:f9:f4:fb:9a:
9e:40:d1:d8:6e:04:26:04:9a:d3:90:cb:55:a8:e7:e1:ca:b5:
f7:43:ae:7c:9a:58:35:a4:58:ea:57:e9:8d:83:88:ea:46:6a:
93:23:6c:96:34:6e:e3:ef:a8:a5:bc:db:b0:e9:1b:ae:ec:c2:
b4:1c:b1:c0:4a:63:cb:4e:33:ad:4e:c3:aa:f9:1c:a5:e2:f5:
dc:df:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org