Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/J7vXzMpR8CqU-NaudEopTo_HUD4.roa
File: J7vXzMpR8CqU-NaudEopTo_HUD4.roa (raw, json)
Hash identifier: oAlk5snYkh/gaSXrFxyCNNNqgcCyv19eCq5Xl58JV5s=
Subject key identifier: 27:BB:D7:CC:CA:51:F0:2A:94:F8:D6:AE:74:4A:29:4E:8F:C7:50:3E
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0919
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/J7vXzMpR8CqU-NaudEopTo_HUD4.roa
Signing time: Thu 15 Jun 2023 05:50:18 +0000
ROA not before: Thu 15 Jun 2023 05:50:18 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 05:50:18 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=27BBD7CCCA51F02A94F8D6AE744A294E8FC7503E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:62:c8:81:09:f9:a8:59:d4:77:3a:5a:3b:
7a:7a:e6:a4:48:2c:f7:15:e5:42:16:34:04:a4:fd:
31:1c:71:1e:60:5c:82:56:f1:b1:9c:f8:8c:2e:f2:
c8:5e:89:6b:76:bc:34:0b:04:d1:f2:1c:dd:4c:2c:
83:7d:2c:3b:8a:12:d0:43:e1:17:0d:21:2c:76:01:
ce:77:0e:a9:ad:9b:20:42:d3:87:e4:26:08:e1:70:
bc:07:19:08:09:ba:73:7c:98:bf:4d:a5:11:f2:ab:
d2:f8:39:8c:20:a5:73:5c:1d:35:2b:e9:89:3a:e3:
06:45:98:db:c1:84:cf:99:36:b8:e2:b4:45:64:02:
d3:91:5e:c3:84:25:5b:e4:ec:8f:e2:a2:11:76:91:
bf:f6:ef:f3:79:eb:e0:6d:1f:49:db:43:80:5a:74:
1c:6e:71:41:4a:88:d9:b1:26:6d:27:1a:d8:ef:b4:
ab:04:8b:5a:2e:e9:60:70:bd:22:af:ed:08:67:56:
39:88:1f:94:d1:2d:be:ac:9d:dd:e6:f0:77:e7:67:
2d:1c:26:70:eb:47:24:28:92:79:61:5a:25:b2:24:
68:1c:ad:25:4f:87:20:33:7c:78:30:ac:d8:5e:d2:
25:2f:ec:95:b1:b2:d2:27:af:a9:1b:15:88:46:dc:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:D7:CC:CA:51:F0:2A:94:F8:D6:AE:74:4A:29:4E:8F:C7:50:3E
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/J7vXzMpR8CqU-NaudEopTo_HUD4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
00:3d:e4:ac:77:59:a7:0b:08:9d:8e:25:88:82:de:1d:10:3c:
c3:89:01:27:bf:15:84:bb:b9:5a:05:a9:ce:3c:af:44:d3:f2:
47:e9:a7:28:39:54:43:e0:71:3b:f4:32:5a:86:ac:16:fb:f5:
a8:6c:16:d2:a2:29:a0:89:88:5f:df:f7:e4:a9:2c:26:8c:e6:
50:84:58:8a:77:d7:92:a2:1d:15:34:29:ac:f9:d5:7f:46:86:
05:ff:df:07:0f:52:64:77:bf:32:df:df:96:e2:08:b5:de:1e:
fb:94:b2:a4:84:08:7b:3e:81:0d:ef:40:30:38:ce:d7:a0:32:
e0:39:0d:8a:f6:74:9c:65:41:38:18:ed:2f:c2:52:07:2b:e0:
ec:d6:3b:e3:dd:c0:70:f5:bb:e9:13:7b:d6:08:3c:ee:94:b9:
a3:17:24:80:8f:6f:ad:e5:08:aa:32:b3:eb:cf:e3:a0:ed:30:
fc:9f:73:b0:6d:17:b7:30:3b:2a:16:00:81:aa:b3:63:dc:f4:
6a:c9:5c:a8:a2:c1:05:aa:9c:29:b0:f1:17:79:d1:9d:c3:de:
75:e7:c5:a3:90:70:0b:c2:59:22:9e:17:52:4f:dc:1b:40:c6:
78:2a:f1:91:0c:55:6a:d8:d7:0c:e3:cb:32:0c:14:06:04:58:
1c:fa:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:02:10 2025 by rpki-client