Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/gyamY9IsGBgMepbQclJSZurGakY.roa
File: gyamY9IsGBgMepbQclJSZurGakY.roa (raw, json)
Hash identifier: Z/qSQxIudCZrQw0jWQYj+sYGdGbedYCAnTutSJBidaY=
Subject key identifier: 83:26:A6:63:D2:2C:18:18:0C:7A:96:D0:72:52:52:66:EA:C6:6A:46
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 091D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/gyamY9IsGBgMepbQclJSZurGakY.roa
Signing time: Thu 15 Jun 2023 05:54:04 +0000
ROA not before: Thu 15 Jun 2023 05:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333 (0x91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 05:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=8326A663D22C18180C7A96D072525266EAC66A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:31:b4:f6:0b:42:87:34:a2:8c:e2:8d:3f:c9:
d4:7a:ba:da:c6:25:16:7e:d6:ae:9e:0e:c1:87:fc:
62:23:b0:5f:ea:30:43:fd:de:4c:b0:b8:e6:5b:de:
22:26:53:9c:0b:20:1d:61:c7:d2:48:d3:37:8e:92:
22:51:ae:d1:31:6d:6b:16:f7:be:7e:8d:f8:33:80:
24:45:02:6d:cf:24:43:cf:9a:27:e8:14:05:03:a6:
89:ca:3c:cb:15:4e:5a:25:96:ab:98:cc:22:b1:38:
02:42:6b:31:a3:d9:fa:f5:92:1b:d7:98:5b:98:51:
eb:a9:aa:7d:1e:50:e6:d1:3c:b4:89:da:7b:af:75:
38:9a:5c:88:30:cb:2c:01:09:be:a4:5c:5c:c2:2f:
4c:51:82:5f:91:1b:8a:20:09:d2:81:5a:a5:d5:33:
b2:20:16:2a:65:bf:92:dc:45:c4:c4:96:06:77:9e:
51:e6:ce:0c:cd:85:0f:c2:24:b0:a5:53:e5:97:a2:
16:97:8a:d0:9c:fd:f9:09:09:90:73:f2:b3:f2:a3:
2e:63:bf:45:64:66:aa:7e:94:44:57:58:a7:9d:90:
52:6f:02:51:dc:8c:3b:76:70:f5:b2:05:18:58:c2:
42:bb:af:79:fb:09:4e:52:7f:58:3f:57:0e:ad:37:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:26:A6:63:D2:2C:18:18:0C:7A:96:D0:72:52:52:66:EA:C6:6A:46
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/gyamY9IsGBgMepbQclJSZurGakY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
10:9d:cf:54:53:22:36:72:8b:20:95:75:8d:3d:21:94:69:7e:
07:47:f4:a5:15:92:c1:f9:e9:bc:45:21:73:d8:84:19:8d:37:
d5:56:53:45:0f:02:a2:e3:b7:ed:fd:e0:e9:8d:59:f5:8b:f3:
a9:2f:59:2b:05:0e:e0:8b:da:b8:93:14:3b:04:8d:b2:58:08:
16:7d:6f:ef:23:55:9b:e5:83:1e:03:9d:b7:92:bd:0b:d5:8c:
d6:fc:70:c4:c2:8c:dc:3e:b1:d1:a1:1c:bc:9b:27:b1:76:12:
00:99:c0:1a:67:57:c4:7a:d1:1e:59:69:fa:7d:27:27:4e:c1:
a2:d0:63:9c:06:2f:4d:8d:ec:5e:7f:02:5f:15:2f:33:ff:a2:
c5:af:70:a8:f3:6b:22:ef:16:9b:5d:4a:10:e7:4f:70:68:ea:
c0:b4:e5:d4:3d:2e:90:db:2b:01:be:5e:4a:96:d7:c5:26:38:
73:d1:d7:3c:7b:ea:2b:0e:69:93:ed:f8:10:79:76:32:dc:71:
c6:64:6c:48:42:65:28:29:03:d5:a1:6b:74:50:f7:a0:ee:f0:
a7:08:f1:d7:f7:b9:90:50:b7:5e:8f:da:17:11:98:3f:8f:54:
4f:49:e8:f2:86:d7:d8:e8:dd:db:a1:45:96:c4:be:1b:83:9c:
95:ee:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:42 2025 by rpki-client