Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/AaK63Jk8_umGPWT8JJhdIscxILo.roa
File: AaK63Jk8_umGPWT8JJhdIscxILo.roa (raw, json)
Hash identifier: J9VCbGVEGryLEHLgYTM8CytizQDmZgX44jRSA4bX/vg=
Subject key identifier: 01:A2:BA:DC:99:3C:FE:E9:86:3D:64:FC:24:98:5D:22:C7:31:20:BA
Certificate issuer: /CN=E3992C73E3EE4E1C7524E79BAA22CF954879AF97
Certificate serial: 1959
Authority key identifier: E3:99:2C:73:E3:EE:4E:1C:75:24:E7:9B:AA:22:CF:95:48:79:AF:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/45ksc-PuThx1JOebqiLPlUh5r5c.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/AaK63Jk8_umGPWT8JJhdIscxILo.roa
Signing time: Mon 07 Jun 2021 20:28:53 +0000
ROA not before: Mon 07 Jun 2021 20:28:53 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 59022
IP address blocks: 2400:ebc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6489 (0x1959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3992C73E3EE4E1C7524E79BAA22CF954879AF97
Validity
Not Before: Jun 7 20:28:53 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=01A2BADC993CFEE9863D64FC24985D22C73120BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:5a:67:13:f3:39:3e:7c:b1:5b:e7:03:13:
54:ea:b2:81:c8:75:41:c1:8d:ae:b9:68:79:94:89:
90:58:27:63:92:db:8b:01:1b:bd:5a:17:ec:79:b4:
74:bf:75:37:52:7c:0d:be:02:3d:2f:e5:d7:a8:e3:
97:2f:5b:20:3c:74:0f:9d:49:0a:08:d7:e5:27:05:
2c:3a:9f:69:cf:5a:83:93:38:52:5e:95:09:d6:e6:
63:44:a3:56:86:0d:91:48:8e:b8:4f:23:46:14:e5:
f2:13:6b:64:21:66:f6:fa:04:ac:d9:77:b9:9d:53:
13:8e:62:47:13:32:58:30:bb:d2:37:5b:c5:cd:d5:
85:ae:a4:d0:65:dd:33:cf:26:09:22:50:f5:de:aa:
7a:34:bb:02:77:58:60:32:cd:1b:84:9e:fb:ce:f3:
bd:d9:4a:4f:ae:e6:39:38:6c:30:06:5c:c2:08:ec:
a3:6c:b6:0d:38:7c:e7:fd:81:0c:e7:f5:5b:8c:5e:
15:14:7b:54:59:a9:cd:d2:42:08:69:60:1f:67:83:
d1:ce:61:a9:65:31:ee:fc:e6:40:3b:3c:e7:4e:a7:
2c:a5:ea:ce:a5:89:67:b6:e8:f1:5e:bb:c7:92:c6:
4e:01:f3:c6:e0:e7:43:fd:a9:ad:a4:e6:eb:4d:93:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:BA:DC:99:3C:FE:E9:86:3D:64:FC:24:98:5D:22:C7:31:20:BA
X509v3 Authority Key Identifier:
keyid:E3:99:2C:73:E3:EE:4E:1C:75:24:E7:9B:AA:22:CF:95:48:79:AF:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/45ksc-PuThx1JOebqiLPlUh5r5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/45ksc-PuThx1JOebqiLPlUh5r5c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/AaK63Jk8_umGPWT8JJhdIscxILo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:ebc0::/32
Signature Algorithm: sha256WithRSAEncryption
9a:21:ac:b1:23:46:b6:5d:e1:44:e1:84:93:fc:4d:92:a5:e1:
5f:62:58:e3:24:d1:11:30:4a:68:c0:48:c6:b0:80:da:ed:7e:
4c:9e:7a:87:e2:38:b8:0c:6a:8f:ae:1c:eb:21:18:35:3b:15:
5a:98:95:e9:30:9c:bf:3a:84:13:1f:81:94:89:ee:09:f9:34:
7e:ed:fe:c4:09:7f:d0:94:bf:61:31:8b:85:a7:2b:76:33:d6:
80:a0:75:b8:61:06:bd:a8:fa:8f:ce:2f:a5:cc:4a:1c:b9:c8:
aa:50:74:dc:39:b7:73:8b:45:5e:d1:d5:bc:31:f5:97:f5:48:
51:43:5f:93:c5:91:fa:21:1a:99:1b:74:6a:cd:d6:2d:00:27:
a1:2f:1c:33:bd:62:60:c2:74:e5:b4:70:9e:4a:77:df:cb:30:
af:96:5c:68:eb:99:67:69:c8:eb:32:2c:ec:2a:56:53:76:92:
08:32:51:8b:12:38:c1:ca:cc:f8:c9:2e:70:fa:3f:a0:5f:c9:
73:83:b7:ca:cb:70:86:35:14:6f:52:2b:b0:f4:b3:bc:92:4e:
8e:46:0a:14:a7:5b:40:23:a5:9f:21:ef:63:56:5f:fc:3a:d9:
f6:e9:ad:e9:48:7d:ff:26:a7:91:a9:8a:a3:55:9c:f6:18:47:
a8:4b:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org