Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/MTiwgrlZdGKPyl_ONO1BPI7yW-k.roa
File: MTiwgrlZdGKPyl_ONO1BPI7yW-k.roa (raw, json)
Hash identifier: SmnPDp/4ZEjuiL56U3713/ZV/AdoLSDzjLv5MCzn9Tw=
Subject key identifier: 31:38:B0:82:B9:59:74:62:8F:CA:5F:CE:34:ED:41:3C:8E:F2:5B:E9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07D0
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MTiwgrlZdGKPyl_ONO1BPI7yW-k.roa
Signing time: Tue 13 Jun 2023 13:54:01 +0000
ROA not before: Tue 13 Jun 2023 13:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 13:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3138B082B95974628FCA5FCE34ED413C8EF25BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:af:2a:ac:eb:58:ef:e8:53:34:6e:83:1b:
75:55:0e:89:42:ec:17:73:04:1e:dd:fc:0d:6f:83:
c9:dd:07:3e:38:05:81:61:e7:8f:94:1c:c2:66:64:
78:1e:39:98:99:18:ab:aa:d6:7c:1f:35:78:f4:06:
3a:bd:0e:09:b3:78:0d:cc:eb:f5:89:36:89:79:d9:
cf:1e:1f:f0:a2:1d:17:0d:df:80:86:56:ec:32:a5:
ff:d5:21:46:12:60:17:e7:72:80:c4:5b:90:99:55:
95:86:49:9c:a3:d6:65:56:00:9e:4e:04:3a:f8:23:
dc:4a:18:9b:c7:74:cb:a3:61:0a:02:b8:15:de:cb:
c6:d5:c7:fb:2c:7a:85:3f:24:d8:4f:00:7f:be:69:
9a:2a:f6:a8:b9:2a:84:01:db:9f:fb:82:3b:3c:2d:
3b:d3:da:3e:5c:76:c2:b4:26:5f:42:20:be:3c:1f:
0b:5c:fe:a5:ea:62:f3:aa:98:ae:6b:61:b0:db:f4:
dc:c4:d4:a1:47:41:96:90:62:5c:82:e9:f5:9b:95:
80:71:5e:e4:0e:83:eb:e0:fd:17:a9:2e:26:07:08:
6d:9a:03:21:ad:c5:98:bb:a9:1f:4b:ee:c0:46:51:
8b:7b:56:93:54:aa:be:39:c5:50:d8:b5:53:d4:d9:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:38:B0:82:B9:59:74:62:8F:CA:5F:CE:34:ED:41:3C:8E:F2:5B:E9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MTiwgrlZdGKPyl_ONO1BPI7yW-k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:44:c2:0a:8b:68:c3:3d:20:4a:5f:c2:69:64:a6:0c:89:49:
5d:79:57:96:70:82:7f:43:80:9e:65:73:cc:a3:a1:de:68:19:
ef:fc:a6:82:6f:7e:41:56:ad:f9:76:da:fb:1f:ac:43:6e:86:
fe:e3:4b:c2:73:ca:80:b5:e4:7d:60:25:bf:68:d7:f5:10:bd:
2c:3b:a5:fb:21:eb:ec:1c:85:d7:de:80:14:26:95:61:47:90:
29:c9:f2:14:62:cd:e5:43:3f:dc:92:ce:cf:7f:49:57:d3:6b:
36:fd:78:18:e5:63:55:c6:1a:f4:7e:f3:63:ce:96:83:e3:ba:
6d:bb:71:a6:40:e7:1e:37:e3:24:a0:4d:6e:1a:fb:3d:23:37:
45:5d:de:28:b9:74:e2:0b:82:19:41:47:6c:b5:2e:c3:9a:b5:
11:68:f9:54:31:90:0f:56:7d:30:97:51:ea:8e:09:b5:bb:1b:
d3:db:69:2a:55:15:b0:48:b4:1c:25:29:bd:ec:a6:53:d8:97:
5d:79:d2:42:59:41:5c:d1:c9:3b:48:5f:ad:4b:3d:c8:6a:d3:
89:fb:ec:d8:25:74:a6:35:bd:64:4f:eb:e2:21:cd:8b:6a:e7:
eb:a8:bc:d5:fc:e4:cd:6b:68:76:15:27:ab:43:04:88:07:1f:
c1:8a:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:31 2025 by rpki-client