Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/wWWJcyjBtHjjjUp8XAfQqu8Ihao.roa
File: wWWJcyjBtHjjjUp8XAfQqu8Ihao.roa (raw, json)
Hash identifier: dF44hnlNsvV0Gp/Mx9GsCFN5qcGrFQG65hWkZ4zITBg=
Subject key identifier: C1:65:89:73:28:C1:B4:78:E3:8D:4A:7C:5C:07:D0:AA:EF:08:85:AA
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0800
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wWWJcyjBtHjjjUp8XAfQqu8Ihao.roa
Signing time: Tue 13 Jun 2023 19:54:02 +0000
ROA not before: Tue 13 Jun 2023 19:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 19:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C165897328C1B478E38D4A7C5C07D0AAEF0885AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:1a:66:86:b1:51:44:f5:a9:34:69:b4:bd:
5d:25:3a:f2:20:eb:f8:1a:d6:c7:4f:5a:df:4c:c4:
76:69:42:f4:b9:fc:08:fb:e0:32:21:8e:f5:a0:e1:
cf:48:d4:d2:76:7e:12:e3:fd:02:c6:e9:95:dc:d1:
39:31:ef:8b:19:b2:38:4b:c6:d4:f7:71:ad:aa:20:
a7:61:f1:9e:47:e9:a8:34:62:e4:1e:15:f1:51:99:
04:5f:fe:98:c9:a6:91:7a:2a:e6:6b:d2:c8:88:3d:
df:6f:9a:d9:46:9e:49:80:40:8d:19:42:c1:a5:1a:
65:e8:82:f0:2d:fb:f4:50:2f:76:af:8d:8c:3f:eb:
fe:19:42:57:57:e0:05:d8:c2:d1:8d:d8:81:bf:09:
95:eb:98:4f:53:71:40:58:88:bd:68:1a:68:74:b2:
b0:1c:79:43:fe:0c:c3:7f:5d:82:64:71:cf:a4:5d:
72:83:06:a3:93:5c:ae:8b:83:ae:87:04:9b:c9:af:
47:f8:8f:ca:97:93:97:d0:3d:7f:d8:8f:67:8a:2f:
00:d3:aa:9a:4a:f6:ba:57:0f:ff:50:ab:5b:e2:15:
71:e2:d0:b0:18:62:13:52:44:b5:9d:4b:5d:4b:d9:
d4:cd:6d:f3:04:20:f4:aa:b7:d9:00:56:8e:e3:ad:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:89:73:28:C1:B4:78:E3:8D:4A:7C:5C:07:D0:AA:EF:08:85:AA
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wWWJcyjBtHjjjUp8XAfQqu8Ihao.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:87:9e:fa:1c:08:1a:3e:fd:20:2d:1d:77:38:3a:b3:1e:b1:
f6:4e:dc:3b:7c:cf:e1:7b:21:56:6b:da:03:35:f1:68:5b:2a:
ba:63:50:29:57:79:13:19:c3:60:e7:a7:18:f4:49:60:e6:37:
7e:80:20:79:a7:ce:ef:1a:b9:42:06:45:e6:4a:8f:9b:ef:02:
0b:da:a5:8b:be:d1:bb:0c:d3:47:e8:6b:c2:6d:f5:ba:86:f9:
5b:b3:57:b4:c1:1d:d5:95:4d:80:94:7d:f6:9d:15:df:12:56:
62:9f:22:f3:0b:57:ca:a8:cd:29:90:6f:c0:9e:6a:1d:f7:cb:
6f:9e:79:44:d3:be:d8:c2:62:00:81:3e:07:2c:93:1d:24:9b:
5c:69:3b:80:b9:09:1e:f9:eb:99:4c:b1:97:37:8e:90:c8:0b:
46:3b:84:61:68:e9:c7:28:c3:ef:f1:d5:1b:49:52:89:50:6c:
02:c7:9f:21:85:d1:e7:6d:8c:98:51:ae:69:32:1e:7e:97:a3:
0f:7d:5b:3a:59:52:ab:63:32:10:e0:6a:bb:b8:50:e3:55:0b:
ad:2d:f5:e6:79:8e:c5:ba:48:b2:d5:31:77:da:5a:91:df:48:
68:6c:31:22:cc:01:c3:1f:32:f6:cc:4b:19:e1:60:fb:91:64:
2c:cc:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org