Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/w-YsWgOsTLlijjAN8hKzchtLHVo.roa
File: w-YsWgOsTLlijjAN8hKzchtLHVo.roa (raw, json)
Hash identifier: J63Fp2X0fwQC12dlASSDHFXwer+lQzP0q/G3Zc/eVLw=
Subject key identifier: C3:E6:2C:5A:03:AC:4C:B9:62:8E:30:0D:F2:12:B3:72:1B:4B:1D:5A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 03
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/w-YsWgOsTLlijjAN8hKzchtLHVo.roa
Signing time: Wed 01 Jun 2022 07:09:57 +0000
ROA not before: Wed 01 Jun 2022 07:09:57 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 1 07:09:57 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=C3E62C5A03AC4CB9628E300DF212B3721B4B1D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:6c:a4:3f:50:4c:5c:ef:70:91:88:0c:c1:
f9:81:c8:e1:94:a9:8c:a0:83:ea:fe:a9:05:8d:dc:
9a:e6:7e:1e:4f:63:d7:f3:6a:cc:db:bb:4f:40:b5:
b5:cd:b1:27:b1:0a:65:f8:9e:c9:50:a7:e7:f7:3c:
8f:37:c6:06:64:41:cd:17:60:59:65:f0:ca:f1:9b:
06:aa:e6:90:b8:1d:3d:16:1d:70:05:ea:50:96:e4:
70:ca:d4:e8:be:67:f0:02:e3:c8:85:a7:e1:e7:ac:
b7:34:81:6e:65:d6:77:3b:21:7c:b6:e9:62:08:17:
96:53:3b:c0:f9:c0:3c:42:e6:24:a0:4d:20:4f:0f:
9a:53:02:d9:d0:e8:73:b9:04:be:7d:0c:48:db:30:
e5:ef:e0:dc:54:03:49:20:02:09:34:9d:de:70:a4:
7c:e3:f2:a3:1b:48:fd:d9:e3:82:92:e6:e8:eb:05:
f2:13:e4:cb:d5:35:21:79:88:2e:47:73:1b:d4:69:
9b:e2:d7:1c:67:95:75:62:b1:4b:78:fc:24:20:21:
b5:c1:7f:45:64:b4:0d:5b:e4:9a:a4:fd:87:e4:47:
c3:cc:8c:48:16:e1:22:90:c5:5d:cd:40:07:99:99:
6f:52:db:51:c6:cf:44:e6:b9:6a:a9:2a:8d:25:5a:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E6:2C:5A:03:AC:4C:B9:62:8E:30:0D:F2:12:B3:72:1B:4B:1D:5A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/w-YsWgOsTLlijjAN8hKzchtLHVo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:97:46:4d:ab:3c:1e:20:a3:30:39:e6:35:08:1b:76:0e:b9:
26:1e:0a:88:ca:78:f8:23:2a:35:aa:67:a8:78:30:b7:34:93:
6e:ac:60:65:ad:66:51:d2:84:57:df:4f:0b:a2:ff:46:38:f4:
5d:55:c4:e7:fa:31:4b:b2:04:20:1b:65:9e:66:63:f9:4d:2c:
42:77:7a:11:b2:d9:31:19:4e:64:86:61:95:2c:40:15:aa:aa:
5e:8c:bc:d3:13:86:18:b6:87:7b:1f:ae:90:70:4c:c5:e9:d9:
d0:06:43:ad:f1:c7:ad:76:9d:a3:a7:ad:f1:da:06:90:d3:c7:
00:84:64:7b:df:63:30:e7:b8:ad:bc:1c:18:94:69:0f:59:c8:
71:f3:52:a7:15:85:75:bf:7d:c2:75:eb:9f:27:0c:0b:35:73:
3b:4c:02:bb:78:c2:69:a4:66:e2:58:cb:34:93:c3:bb:bc:72:
21:c4:42:2e:a0:6e:56:ca:aa:63:1a:99:ba:d4:e5:eb:02:a9:
cb:e0:03:1a:a7:ca:f8:5b:c1:2f:72:cd:00:29:97:75:d4:99:
d9:de:81:1e:58:41:29:1d:63:62:b0:39:c9:0b:e5:ba:ab:1c:
5a:4b:40:98:dd:35:aa:35:18:6a:aa:fe:b8:b1:da:9c:11:d9:
88:41:fb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org