Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/udyoChm9fMWl6Rswe7yCI_Q8MD8.roa
File: udyoChm9fMWl6Rswe7yCI_Q8MD8.roa (raw, json)
Hash identifier: YE+Ma23x8zMH/X1FHlB0/UjlF6XpD5WxUDfh4sg+dBI=
Subject key identifier: B9:DC:A8:0A:19:BD:7C:C5:A5:E9:1B:30:7B:BC:82:23:F4:3C:30:3F
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08DC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/udyoChm9fMWl6Rswe7yCI_Q8MD8.roa
Signing time: Wed 14 Jun 2023 23:24:07 +0000
ROA not before: Wed 14 Jun 2023 23:24:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 23:24:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B9DCA80A19BD7CC5A5E91B307BBC8223F43C303F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:06:6c:50:12:04:bf:6e:8a:ac:9a:65:65:
a8:94:b3:63:f8:49:db:a0:f8:2e:4a:e2:65:74:c3:
bf:3f:4d:36:57:02:d5:de:45:17:6b:d1:1e:2f:53:
03:53:b8:97:bc:62:d6:ed:78:ff:33:4f:29:2b:9a:
f9:dc:8a:9d:40:a5:ba:e9:05:19:92:28:3e:18:f1:
3b:d9:07:d8:09:44:7e:75:89:f7:56:32:88:6f:66:
3e:a1:21:1d:50:d0:08:d3:2e:d0:b2:1e:a2:7b:82:
5a:50:e3:bb:c4:16:9e:c1:c8:07:38:95:31:91:d2:
9c:d7:89:d7:40:69:59:ac:8b:cf:cd:49:07:2f:e8:
9f:1f:bb:fc:94:eb:fc:dc:52:f2:f0:64:6d:4b:b1:
97:6a:77:ef:aa:dc:0d:2b:c8:74:13:c2:fc:ec:f6:
42:0b:18:19:e3:bb:0c:f8:5a:0d:f5:db:1b:d3:dc:
53:b7:48:d8:08:fd:6e:36:be:b4:54:bf:be:2b:7f:
ff:48:fd:51:71:d7:9e:2e:57:e2:e8:14:a6:09:ad:
b6:cf:8f:47:a9:75:b8:0d:f5:97:0f:76:6c:aa:8d:
14:28:07:ad:6d:26:a2:3b:dc:c9:74:5f:42:ad:c1:
a7:fd:68:b3:a2:8e:e4:aa:1c:de:0b:09:ee:55:fb:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DC:A8:0A:19:BD:7C:C5:A5:E9:1B:30:7B:BC:82:23:F4:3C:30:3F
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/udyoChm9fMWl6Rswe7yCI_Q8MD8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
99:ee:84:48:1a:96:b4:c8:12:c7:8c:9c:f1:cb:8a:4d:c0:f2:
a9:a7:a2:0e:8d:d3:99:d0:e5:58:fb:d1:22:c7:a5:58:a5:ff:
92:86:1d:fa:f0:91:9d:6e:99:0a:9d:fc:ea:02:cb:fe:df:d6:
ad:08:33:10:87:dd:71:02:0e:de:ec:4a:8e:26:18:43:07:36:
8c:cb:74:8f:89:39:a2:ce:1e:1a:35:6d:bc:3a:0d:5f:7b:b3:
1f:be:eb:c9:9e:0e:2f:3a:a8:27:b0:35:2d:1c:84:fd:ea:d4:
8e:65:6e:8c:09:28:32:66:d4:a8:ef:ed:33:14:e7:29:b4:b2:
04:27:aa:e5:87:4d:20:d6:fc:8d:28:74:42:94:dd:3d:8d:51:
2d:a1:92:c3:95:75:6c:f9:6c:8d:d8:9d:a0:f0:f0:bd:6d:28:
0b:ca:d2:af:9c:20:4d:7e:5f:cd:2f:22:da:a6:4d:43:30:ea:
c2:8f:3f:8b:b6:1a:ec:08:88:ab:5d:e2:2c:c7:a8:6d:40:52:
0d:61:98:f5:12:ff:3b:cb:f4:cd:c9:fe:ac:a0:2e:75:c0:7c:
c4:5a:ff:9c:1a:37:9a:77:d9:9a:83:8c:49:9a:95:66:d1:4a:
c7:69:8d:28:c6:1e:06:ef:a3:a8:a9:10:a6:52:27:f6:64:b6:
0c:0a:14:57
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MzI0MDdaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEI5RENBODBBMTlCRDdD
QzVBNUU5MUIzMDdCQkM4MjIzRjQzQzMwM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO8QZsUBIEv26KrJplZaiUs2P4Sdug+C5K4mV0w78/TTZXAtXe
RRdr0R4vUwNTuJe8YtbteP8zTykrmvncip1ApbrpBRmSKD4Y8TvZB9gJRH51ifdW
MohvZj6hIR1Q0AjTLtCyHqJ7glpQ47vEFp7ByAc4lTGR0pzXiddAaVmsi8/NSQcv
6J8fu/yU6/zcUvLwZG1LsZdqd++q3A0ryHQTwvzs9kILGBnjuwz4Wg312xvT3FO3
SNgI/W42vrRUv74rf/9I/VFx154uV+LoFKYJrbbPj0epdbgN9ZcPdmyqjRQoB61t
JqI73Ml0X0Ktwaf9aLOijuSqHN4LCe5V+wXxAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUudyoChm9fMWl6Rswe7yCI/Q8MD8wHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvdWR5b0NobTlmTVds
NlJzd2U3eUNJX1E4TUQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAme6ESBqWtMgSx4yc8cuKTcDyqaei
Do3TmdDlWPvRIselWKX/koYd+vCRnW6ZCp386gLL/t/WrQgzEIfdcQIO3uxKjiYY
Qwc2jMt0j4k5os4eGjVtvDoNX3uzH77ryZ4OLzqoJ7A1LRyE/erUjmVujAkoMmbU
qO/tMxTnKbSyBCeq5YdNINb8jSh0QpTdPY1RLaGSw5V1bPlsjdidoPDwvW0oC8rS
r5wgTX5fzS8i2qZNQzDqwo8/i7Ya7AiIq13iLMeobUBSDWGY9RL/O8v0zcn+rKAu
dcB8xFr/nBo3mnfZmoOMSZqVZtFKx2mNKMYeBu+jqKkQplIn9mS2DAoUVw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org