Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/tV0Sgf92mwSuHenA5pTJtv54-64.roa
File: tV0Sgf92mwSuHenA5pTJtv54-64.roa (raw, json)
Hash identifier: s5zsEwHE8Dez2BwqjTiE8vlHdhTDETvFgaaXW0K0U80=
Subject key identifier: B5:5D:12:81:FF:76:9B:04:AE:1D:E9:C0:E6:94:C9:B6:FE:78:FB:AE
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08D4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/tV0Sgf92mwSuHenA5pTJtv54-64.roa
Signing time: Wed 14 Jun 2023 22:24:05 +0000
ROA not before: Wed 14 Jun 2023 22:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 22:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B55D1281FF769B04AE1DE9C0E694C9B6FE78FBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:d3:b7:50:b8:14:39:6c:46:35:68:77:f0:
c3:7b:d4:5f:73:86:6f:6c:33:45:3a:52:cb:34:56:
69:1a:b7:2f:07:63:9f:06:fd:61:5d:8e:12:d1:aa:
c2:6a:36:6d:d1:bd:70:2a:8f:35:3b:9b:78:7d:56:
80:c8:40:d4:09:8b:9b:63:45:ac:0b:d1:84:3e:55:
3b:13:82:df:9d:8b:16:b9:24:41:1b:f5:52:79:24:
80:87:a9:73:0d:07:c8:42:ba:f2:36:4a:47:98:74:
f4:92:da:d4:e0:33:5e:cf:16:41:d8:7f:e2:87:48:
6f:57:bd:07:fa:a6:14:79:1d:d5:36:cc:a0:d7:48:
8e:e3:6a:e2:fe:7c:70:3d:20:40:83:9a:70:b0:8c:
a4:51:00:71:3c:2e:b8:ab:f4:e9:6c:41:a0:4c:78:
16:69:32:2a:d2:29:cb:fb:6f:0d:32:3f:f5:3c:3b:
6b:b6:a0:ae:04:b8:fb:75:a8:00:b9:2c:27:c2:fe:
95:1f:46:94:9d:68:86:88:ae:5d:31:f3:07:61:c6:
6c:af:87:c4:70:10:b8:90:91:34:fd:4e:8e:fc:ee:
8e:eb:43:4d:48:a1:4f:cb:1a:26:77:94:79:69:e4:
c2:84:a6:bd:db:f8:50:56:52:a1:1b:f5:06:45:6e:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5D:12:81:FF:76:9B:04:AE:1D:E9:C0:E6:94:C9:B6:FE:78:FB:AE
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/tV0Sgf92mwSuHenA5pTJtv54-64.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
86:3b:06:84:91:35:92:3d:c6:00:19:47:bf:14:a5:d4:d8:34:
f2:c6:46:67:64:75:02:ab:54:bc:cb:58:a8:98:d2:fa:df:b0:
5a:c4:43:96:af:44:0e:73:4e:f8:97:b9:29:0d:ab:14:64:f4:
8b:05:db:c5:7e:53:55:fe:71:3b:15:e3:14:4c:6f:71:a7:2d:
93:d8:03:c0:c7:61:dd:8b:38:d8:ec:fe:56:f4:bf:07:25:82:
02:fe:e3:77:a6:17:9c:12:0f:4b:ae:a2:86:49:af:80:ad:64:
bb:ee:5c:25:f5:ef:1b:58:cb:43:8d:27:6f:4c:26:a6:8a:0b:
9c:81:37:58:f7:ed:42:29:9b:e6:fc:47:f0:e9:57:c1:53:75:
22:f0:76:62:5c:ed:10:09:5a:20:21:9d:34:87:c7:31:a1:7f:
5b:3b:d8:57:e8:1d:ef:b8:40:28:11:c9:47:4b:c1:43:36:63:
37:c3:e7:88:8f:e6:27:9a:1e:19:78:2e:f0:e7:f8:e6:39:2a:
e8:1d:a1:da:64:b3:50:74:ad:27:29:32:42:68:89:59:10:77:
fc:03:8d:bf:ac:d1:a3:ed:b8:d7:85:96:64:50:26:91:3e:bd:
f0:80:74:8a:b3:48:c3:40:cd:1c:bc:91:15:98:10:71:56:cc:
24:a9:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org