Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/479/f0MX9FFMrRePz5qhEwjTv6cZZoQ.roa
File: f0MX9FFMrRePz5qhEwjTv6cZZoQ.roa (raw, json)
Hash identifier: zPkEw789mpv2nLyBg75ueDberzJz0VLSRSlphJe808M=
Subject key identifier: 7F:43:17:F4:51:4C:AD:17:8F:CF:9A:A1:13:08:D3:BF:A7:19:66:84
Certificate issuer: /CN=025E2D794E6FFAE295BACE491100E3D18B9C7141
Certificate serial: 0AFD
Authority key identifier: 02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/f0MX9FFMrRePz5qhEwjTv6cZZoQ.roa
Signing time: Tue 19 Dec 2023 07:54:46 +0000
ROA not before: Tue 19 Dec 2023 07:54:46 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 139021
IP address blocks: 219.234.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2813 (0xafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025E2D794E6FFAE295BACE491100E3D18B9C7141
Validity
Not Before: Dec 19 07:54:46 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=7F4317F4514CAD178FCF9AA11308D3BFA7196684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:aa:fc:da:94:ff:3d:93:72:69:04:e9:8f:
89:85:47:8b:1b:10:c2:bf:0b:b5:4f:79:c8:b8:47:
63:1d:ea:8e:75:7b:07:29:9d:f3:6f:15:4e:2e:ef:
5d:33:ff:dc:7c:1b:a9:24:40:82:7f:38:6a:bc:14:
53:67:d1:70:ca:81:27:86:c2:bd:cd:62:3f:fd:e6:
7e:1b:48:58:29:37:67:0b:fa:46:40:70:65:06:a2:
d0:af:45:7a:54:e4:a9:64:a7:20:ac:c4:6c:d0:22:
ae:9f:32:46:f5:b4:69:17:2f:4e:ae:b0:34:13:42:
f4:61:b7:66:0e:53:91:9d:d3:26:57:95:40:4d:5f:
4d:b9:3e:f8:8e:c5:e8:31:d0:18:58:86:0b:83:51:
df:e0:2c:d8:81:1f:66:6e:58:c4:b1:7d:99:08:8d:
fb:f0:2b:dd:78:d7:b6:82:b6:a0:a0:13:0c:3f:a9:
66:a6:72:af:dd:51:61:55:ee:d7:59:4e:14:c1:f6:
ff:bc:41:86:22:6a:32:5f:2f:74:41:84:6b:42:b8:
b4:7e:c5:aa:14:43:22:09:bf:e3:16:1f:07:61:04:
0f:e5:51:8e:5b:cf:34:7e:61:f1:2b:ab:13:12:ca:
84:e6:db:6f:85:56:75:b9:f8:23:26:16:83:3d:4f:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:17:F4:51:4C:AD:17:8F:CF:9A:A1:13:08:D3:BF:A7:19:66:84
X509v3 Authority Key Identifier:
keyid:02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/f0MX9FFMrRePz5qhEwjTv6cZZoQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.0.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:c2:f0:76:4d:19:6f:d3:e8:1c:f4:7d:c7:ac:a9:71:cd:c3:
bb:41:77:e6:ea:79:b3:ec:97:e8:a8:f3:1b:31:4e:b9:bc:a8:
29:8f:2d:a7:ae:00:5b:5e:b1:03:e8:1c:f2:ff:b2:6c:a2:7b:
4c:d4:73:ae:8f:d1:a9:18:bd:9e:50:f7:7b:fe:90:8d:95:be:
de:c5:29:63:10:7c:12:1d:d2:0f:4a:1e:b4:36:e0:44:5c:9f:
cd:ef:8a:11:fc:e2:b2:90:e8:45:c2:71:ae:ad:ab:1a:b1:43:
a3:52:36:6c:db:04:74:82:d9:d7:b5:d6:4d:2e:69:34:07:b6:
70:77:c8:7b:f3:80:49:84:78:ac:2b:78:4a:cf:cc:52:e6:1f:
fe:fc:ac:6d:97:13:63:a8:43:6a:99:92:2a:40:e5:1f:c6:63:
9e:d6:50:b7:5b:82:4f:de:4d:0a:8f:16:e7:c8:e9:84:65:31:
9c:37:3e:89:0b:ee:2b:18:9d:e5:e1:34:bf:03:54:23:86:17:
d8:11:9c:ac:6b:e2:d0:01:b3:be:ec:a1:65:4a:2a:a9:ef:6d:
9d:94:72:8a:87:bc:db:8c:31:af:56:01:3e:57:00:98:0b:28:
fe:48:46:32:43:2a:cc:5a:b9:ba:34:19:e9:64:2f:de:2b:9f:
24:77:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:10:30 2024 by rpki-client on console-fra.rpki-client.org