Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/tfZqiHTmx2-y9KLaz1IlFRibl3E.roa
File: tfZqiHTmx2-y9KLaz1IlFRibl3E.roa (raw, json)
Hash identifier: pNJs5mx31tVi0GLYSFOc5Ql/rmw0rSQyBXZNa4WRvIs=
Subject key identifier: B5:F6:6A:88:74:E6:C7:6F:B2:F4:A2:DA:CF:52:25:15:18:9B:97:71
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08E0
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/tfZqiHTmx2-y9KLaz1IlFRibl3E.roa
Signing time: Wed 14 Jun 2023 23:54:06 +0000
ROA not before: Wed 14 Jun 2023 23:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 23:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B5F66A8874E6C76FB2F4A2DACF522515189B9771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:3d:75:4c:f2:2c:3b:a4:46:33:90:b1:ba:
4d:e8:7f:a2:c8:b0:7d:05:b1:98:70:59:28:9f:d4:
17:0a:00:49:b3:fe:bb:b8:0a:41:4d:a5:4e:cc:a5:
e3:ad:22:38:4f:94:42:71:b0:fe:05:4f:0a:4f:17:
26:58:9a:09:76:ee:1b:d2:b0:17:4a:70:50:93:f6:
fa:71:d0:95:cb:54:42:67:07:66:89:1d:fa:66:18:
07:81:48:d2:63:8b:d4:da:20:28:17:df:99:7d:b3:
63:af:61:85:a9:a6:29:56:d8:9d:3a:dd:f0:f0:c2:
c9:e0:c2:d9:3a:6c:0e:a6:56:cb:11:85:6c:0e:73:
dd:14:71:2f:c2:f1:01:2d:43:6d:31:cd:bb:dd:b9:
54:59:c4:f8:f3:99:ba:01:b3:ff:13:c6:61:f3:a1:
ef:ed:01:c9:b9:b0:5d:be:8a:d7:b3:41:b5:45:55:
96:03:c8:6e:7e:18:84:ca:38:e6:26:ee:3b:e8:b8:
93:6b:f9:55:ea:13:e2:58:63:93:4c:94:8c:cc:0c:
e5:65:05:97:e3:04:12:ab:54:b7:ad:08:12:e4:10:
9b:a1:64:7e:74:8d:11:f2:8d:df:2c:3a:b6:fc:65:
9e:7d:d5:53:7a:9d:40:60:e9:18:77:3e:de:1f:a4:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:6A:88:74:E6:C7:6F:B2:F4:A2:DA:CF:52:25:15:18:9B:97:71
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/tfZqiHTmx2-y9KLaz1IlFRibl3E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
03:9f:0e:55:10:f1:80:1d:63:ef:f8:05:33:c9:59:f8:fe:e8:
bc:9e:19:be:fb:86:2e:7d:1b:3c:72:13:1b:03:f5:9b:4f:30:
0e:26:a5:e2:e1:10:d1:c8:9d:15:e9:56:2f:b4:c5:ef:e6:5c:
0e:d6:52:7e:b7:3c:82:a3:fb:f2:b9:c3:22:b4:56:b8:e0:f2:
f5:38:11:1c:b8:a4:a7:90:82:d0:c3:30:62:0b:1d:96:9b:8f:
b9:e4:23:ff:64:10:2e:79:87:2a:6e:29:a2:ba:ad:73:cb:5c:
29:af:df:bb:aa:1a:5d:25:af:27:18:04:f5:99:d2:56:36:cc:
7d:32:93:4d:4e:e5:77:15:15:e5:8a:20:9e:f5:bb:59:01:cc:
59:89:94:79:f5:ce:7b:96:64:5a:b1:d5:68:9f:7f:0b:16:7c:
9f:63:64:60:d0:a8:0c:d0:f0:b4:18:f1:13:60:b0:75:3b:be:
33:e4:e7:33:33:d0:50:78:93:da:75:14:e2:d8:16:35:26:02:
71:c4:f2:bc:a8:22:c0:4b:56:db:b1:46:f6:62:03:47:e7:ac:
f8:d4:6f:89:54:ea:64:e4:76:e8:e8:da:ef:3e:cf:c5:05:60:
56:c6:26:f3:28:89:d1:0c:46:73:69:7b:3c:23:e2:5a:8a:ba:
7f:f9:c3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org