Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/uSRPu_I6Ri3sEZWv4KyNTOxEjH0.roa
File: uSRPu_I6Ri3sEZWv4KyNTOxEjH0.roa (raw, json)
Hash identifier: nz9deTyCD71OAVIstYUzP++/xrlmYCKEJKmTjFYJ6PE=
Subject key identifier: B9:24:4F:BB:F2:3A:46:2D:EC:11:95:AF:E0:AC:8D:4C:EC:44:8C:7D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08B8
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/uSRPu_I6Ri3sEZWv4KyNTOxEjH0.roa
Signing time: Wed 14 Jun 2023 18:54:04 +0000
ROA not before: Wed 14 Jun 2023 18:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232 (0x8b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 18:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B9244FBBF23A462DEC1195AFE0AC8D4CEC448C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:c1:80:4a:07:bf:2b:22:98:48:08:42:3b:
ee:bf:c9:ca:ed:46:df:e7:ca:61:a7:e1:5a:56:3b:
33:28:a3:14:9b:06:33:ca:b3:55:62:34:dd:35:a8:
54:cd:7a:c2:f3:3e:52:13:df:4f:e7:74:19:81:1a:
67:d2:11:e6:cc:5f:bd:d0:2c:1c:07:92:06:5c:48:
4a:4f:6f:24:28:7d:d0:ed:4c:dc:c5:a7:e1:24:ff:
0e:e8:9a:f2:5a:62:71:74:66:f2:a2:d0:94:16:40:
63:6f:31:1b:cd:5c:17:19:79:5c:94:75:ef:3b:5d:
93:d5:90:3f:1d:ae:42:66:3c:02:52:cb:1e:ac:f8:
3f:6c:bd:83:4d:94:e2:0e:08:47:19:5e:a4:46:87:
06:97:29:6e:8e:a3:53:9b:f1:97:79:8d:b7:45:91:
87:5d:8a:50:be:a2:de:e3:50:f1:86:2e:50:77:24:
78:24:a0:c4:c2:b4:30:4c:21:18:19:3f:1c:49:5e:
22:06:e0:1c:04:43:7e:6e:bc:87:d6:a7:b7:ad:ff:
15:5b:d3:89:24:91:0d:cf:2b:58:60:f8:aa:53:68:
22:a5:fb:67:22:92:9b:8b:3a:a5:ab:91:12:03:ad:
82:64:da:7a:2b:a3:d7:98:c8:6a:9e:23:35:1a:d0:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:4F:BB:F2:3A:46:2D:EC:11:95:AF:E0:AC:8D:4C:EC:44:8C:7D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/uSRPu_I6Ri3sEZWv4KyNTOxEjH0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
40:40:0e:f2:f1:f5:33:c8:49:1f:ad:17:c8:e6:a2:96:7d:3f:
f1:7c:63:41:13:43:45:ef:05:d9:54:05:45:4f:93:4f:01:f3:
6c:64:17:98:17:ed:c4:42:7f:d3:8b:f5:3c:41:8e:e5:e1:3b:
7a:c9:da:fc:23:a9:ea:cf:45:c1:ef:ca:86:7b:17:e3:bd:93:
f9:9e:42:90:ef:ad:4e:7d:45:f3:ad:23:72:1a:4e:49:bf:fa:
de:7d:80:52:52:a7:ae:2d:a1:2d:b1:09:7b:47:ea:fb:d6:00:
4c:39:aa:68:f2:60:0f:41:f1:98:6a:05:91:29:c5:14:44:14:
c9:1e:2a:1f:e4:69:25:b0:ea:0a:39:a4:f5:8d:b9:1e:2f:b2:
73:bd:e5:3d:bd:90:22:64:b3:3c:8b:de:d8:27:a3:56:b9:8f:
61:08:85:52:19:39:bb:7c:2c:b6:7b:0c:e6:25:f2:cc:8c:3d:
c2:d8:b0:22:6a:ae:43:a7:c9:4d:d6:18:4f:7b:5f:ef:a9:74:
17:ab:4d:5c:70:9b:0c:10:37:a6:31:ca:81:13:4a:1c:8c:2f:
68:94:37:d1:e5:55:97:d4:95:17:fc:5a:fa:c7:64:7f:05:ad:
4e:4b:c1:6a:c4:00:e7:b3:79:cb:f7:32:39:c5:24:44:cc:8f:
e3:a3:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org