Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/sfGG5Vc1ZPgkHESYMFamH93MS4g.roa
File: sfGG5Vc1ZPgkHESYMFamH93MS4g.roa (raw, json)
Hash identifier: IfcriNfS829oEXOudULEvTNKoDPRYrBA6q0SdxUM/g8=
Subject key identifier: B1:F1:86:E5:57:35:64:F8:24:1C:44:98:30:56:A6:1F:DD:CC:4B:88
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0834
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/sfGG5Vc1ZPgkHESYMFamH93MS4g.roa
Signing time: Wed 14 Jun 2023 02:24:02 +0000
ROA not before: Wed 14 Jun 2023 02:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100 (0x834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 02:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B1F186E5573564F8241C44983056A61FDDCC4B88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:a9:d1:64:31:ac:63:0d:ed:75:9e:c0:9a:
19:65:3a:b4:7e:b1:0a:a6:52:ac:9a:0d:c3:ac:d3:
c5:11:b1:c2:13:bf:76:13:28:67:48:34:01:3e:b1:
08:ef:f3:0a:31:49:56:c5:27:ae:4a:cc:64:a6:51:
10:c3:a7:cf:1f:6e:ca:f4:a7:be:2e:6c:28:fb:97:
7c:10:49:d1:f3:4e:cc:c4:24:05:40:de:02:bc:7e:
58:04:56:1b:6e:58:90:81:c7:fa:55:ac:a0:20:ae:
05:07:fc:a1:8b:fa:19:8b:43:27:fe:a5:42:42:d6:
99:4d:b1:00:0f:ae:f4:75:01:cb:74:b2:fb:d3:08:
4d:f7:21:6f:56:3e:a0:ef:ad:0d:e0:2d:b5:e6:1f:
71:d2:dc:0a:58:2f:21:7b:19:b1:29:41:6f:81:5d:
8d:9a:66:0d:f3:e8:fd:c6:5d:7b:99:a8:46:cf:53:
5c:c8:63:11:df:d8:ec:3b:ae:98:75:e0:85:0c:af:
42:f7:a3:48:0b:39:e7:34:29:f8:64:f5:52:47:46:
3f:d2:5d:6d:c2:b6:44:8a:4a:59:dd:b9:3d:03:81:
7c:b7:d0:39:60:0d:5f:71:02:32:00:a7:de:cf:da:
9d:c6:10:3d:51:9f:6f:b0:99:cb:55:1e:0c:c2:06:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F1:86:E5:57:35:64:F8:24:1C:44:98:30:56:A6:1F:DD:CC:4B:88
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/sfGG5Vc1ZPgkHESYMFamH93MS4g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
17:e0:52:b8:73:89:b4:35:c7:7f:c9:50:c3:76:b5:9a:a4:b6:
a5:5b:85:4a:a7:21:3f:66:34:e9:67:72:87:d7:43:c8:11:3d:
64:2d:ca:74:be:2d:db:b1:d1:ad:08:c1:d7:99:db:6c:30:0b:
1c:41:88:f1:a4:f5:4e:38:8e:ed:23:d2:7d:be:01:92:87:1a:
d3:40:42:21:2f:92:65:5b:ce:82:fe:a4:3d:8b:f7:ec:22:e2:
11:4d:4c:16:e2:f2:d3:09:a8:28:51:0d:23:31:08:f2:b9:ba:
24:c4:fc:8c:6f:10:e0:6e:c3:a5:29:1c:50:b3:3d:22:9e:8f:
36:23:14:78:16:8d:8e:77:03:20:58:51:60:e9:02:86:31:61:
46:86:f8:42:ab:65:a8:0a:da:99:65:2c:4d:b5:31:48:e8:a1:
8d:b5:57:ce:8a:0c:64:2a:a1:a9:0a:b8:93:dc:86:f4:07:e0:
0f:4b:2f:7e:2e:04:89:6f:0d:b5:77:16:c8:f6:d7:39:b7:3c:
47:bb:4b:f0:04:b3:b7:a5:7a:36:ce:31:c3:ec:3c:26:64:f6:
ef:69:0c:6b:b0:ce:db:9f:66:0e:03:af:39:93:38:be:3f:e0:
c2:21:6c:f6:7d:9d:57:bd:93:04:c0:41:a5:70:6f:4a:89:b4:
de:c2:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:23:15 2025 by rpki-client