Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/xTQHhSVJnWFEjM7w5oZJsGTjX2k.roa
File: xTQHhSVJnWFEjM7w5oZJsGTjX2k.roa (raw, json)
Hash identifier: 9qTwHzZZjzwOlWPAvxeOQ+SAcDZVDvnp3b7DutdnlUo=
Subject key identifier: C5:34:07:85:25:49:9D:61:44:8C:CE:F0:E6:86:49:B0:64:E3:5F:69
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07C4
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/xTQHhSVJnWFEjM7w5oZJsGTjX2k.roa
Signing time: Tue 13 Jun 2023 12:24:01 +0000
ROA not before: Tue 13 Jun 2023 12:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1988 (0x7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 12:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C534078525499D61448CCEF0E68649B064E35F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:24:e5:1f:96:cc:30:44:bf:fd:e5:0d:ff:
81:83:5b:ae:91:6c:d6:03:ec:01:42:8a:ad:fd:0b:
ab:ce:fe:cf:cb:16:ea:f5:51:d0:2b:51:d5:f8:a3:
91:2c:af:62:a4:7b:88:87:9e:f5:b4:26:13:a5:66:
33:31:7f:05:44:27:cc:0b:00:e1:71:0d:dc:c7:72:
e5:d6:8b:d3:6d:ce:35:cb:7e:96:db:c4:4a:d9:c5:
55:9d:fa:b7:91:c3:b7:8d:d6:99:68:e5:38:75:52:
86:e0:10:48:52:1a:27:ac:81:71:83:0a:e3:a9:42:
d3:aa:bd:c4:4b:c1:f4:d6:82:16:a4:0f:9b:86:1f:
cc:87:8e:26:84:91:85:a7:8e:bc:82:03:fc:ac:fe:
2d:cc:fe:ef:f3:2d:f9:4b:5e:4a:96:61:40:45:3d:
37:0b:60:45:e5:53:92:ee:eb:04:4c:a5:56:c5:86:
c7:8a:2f:f5:9f:b5:a1:c9:fc:00:10:7a:46:dc:d9:
1f:87:ed:73:b4:2c:1f:92:b9:9e:26:17:9c:43:82:
87:b7:4d:99:52:01:fa:6d:91:3a:b6:88:a2:15:d1:
4f:7a:93:c3:03:d6:62:7a:bc:2a:54:2d:7f:6a:f9:
31:ed:8b:2f:1e:cf:23:b0:54:db:a7:05:03:3c:16:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:07:85:25:49:9D:61:44:8C:CE:F0:E6:86:49:B0:64:E3:5F:69
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/xTQHhSVJnWFEjM7w5oZJsGTjX2k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
25:4b:15:21:43:15:69:46:9b:4b:05:8b:f9:8d:28:2b:b3:a6:
3d:26:41:7c:ee:80:fa:89:97:ed:cf:c6:f8:40:47:16:59:ba:
bb:ef:94:b6:d7:2d:62:19:a4:d9:95:26:5f:45:e2:8f:4e:c0:
78:92:4f:53:63:df:ae:24:36:27:cf:3f:a6:d9:d6:3b:45:0e:
47:38:5f:8c:ac:f7:cf:58:c6:70:c8:9d:98:31:a5:a5:13:94:
95:30:85:af:43:38:0c:4f:c5:9d:bb:65:7b:a4:fc:2c:27:8c:
73:31:1e:00:93:19:8a:4e:d9:12:98:09:bc:e0:11:76:e3:9b:
b9:b0:90:8b:a4:c9:d2:41:67:dd:29:f7:3d:e3:de:9d:bf:9a:
cb:17:dc:89:7f:83:3c:cd:80:02:b9:12:2d:a3:e3:b9:7e:51:
f3:d4:cc:f8:0a:65:a1:2b:62:58:ae:cb:48:e8:b3:9f:7a:cd:
7c:5e:b6:41:6c:ac:81:15:f3:b4:94:f7:70:f0:2a:ba:a7:d3:
d8:65:6b:81:98:df:ec:df:f5:ce:1d:fc:f5:34:d0:13:aa:e7:
a4:ec:06:a1:fe:87:62:4d:58:3c:ec:0e:f2:12:d8:68:91:fb:
d9:3c:95:bc:f9:00:22:3b:06:f6:79:01:62:f4:64:c4:a0:ef:
ca:8a:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org