Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/U3sRjO0T-V3IQGvMy5z3l6_aLA0.roa
File: U3sRjO0T-V3IQGvMy5z3l6_aLA0.roa (raw, json)
Hash identifier: CeeGCMyrR95F9IPnVpkaIny6swOQBnLPEUr6lv4ohbg=
Subject key identifier: 53:7B:11:8C:ED:13:F9:5D:C8:40:6B:CC:CB:9C:F7:97:AF:DA:2C:0D
Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial: 04
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/U3sRjO0T-V3IQGvMy5z3l6_aLA0.roa
Signing time: Wed 01 Jun 2022 07:09:34 +0000
ROA not before: Wed 01 Jun 2022 07:09:34 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 59022
IP address blocks: 2400:ebc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Validity
Not Before: Jun 1 07:09:34 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=537B118CED13F95DC8406BCCCB9CF797AFDA2C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:cd:1b:44:83:81:d4:43:cd:0a:28:46:d9:
42:7b:4a:1d:19:47:6f:ad:62:14:8b:94:07:8a:e8:
1e:3b:5e:69:9d:fa:c7:b4:8f:4a:2f:26:42:2e:93:
e0:bc:15:c0:d5:46:d5:8c:db:f3:ae:7b:6d:09:db:
35:46:ce:a3:ff:15:6b:1a:90:71:15:52:16:01:c0:
2c:d1:72:09:a4:d5:60:3e:30:9f:e7:7c:90:58:50:
01:d1:0b:8f:41:1f:e5:06:1d:5a:ee:d6:69:58:32:
63:08:e3:fe:f4:55:20:e0:20:bf:ed:01:ac:2a:d8:
82:60:7b:f7:76:68:8d:59:36:b1:7a:c7:ea:e6:a5:
e4:79:45:f5:0f:63:3a:de:a9:9c:e4:a0:d0:64:2c:
4b:6d:94:07:70:65:ab:11:81:e0:13:22:26:0e:03:
08:21:f8:6c:55:09:c9:dc:f7:99:a7:65:67:a6:1c:
62:5f:0c:ef:05:63:70:49:e2:93:de:0b:51:e3:91:
94:03:48:e5:2d:cd:48:bb:02:e4:d6:ce:b4:b5:ce:
0a:0a:73:41:15:0e:c2:ad:a6:06:9f:46:84:d5:ec:
a8:73:05:2d:e0:3c:e5:b4:8f:0d:07:a4:98:f3:fc:
8d:88:0f:6c:e0:78:27:01:80:a7:3c:5b:de:33:3b:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7B:11:8C:ED:13:F9:5D:C8:40:6B:CC:CB:9C:F7:97:AF:DA:2C:0D
X509v3 Authority Key Identifier:
keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/U3sRjO0T-V3IQGvMy5z3l6_aLA0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:ebc0::/32
Signature Algorithm: sha256WithRSAEncryption
4e:8a:fe:b7:df:41:de:92:6c:68:c1:69:50:e5:28:17:47:00:
46:10:d2:58:d0:bd:f9:72:4c:94:57:0d:81:88:98:0e:96:c7:
7d:d2:c2:83:71:52:c3:f8:49:42:4f:de:04:a0:db:d5:1d:6e:
56:ae:8c:83:3e:77:bd:86:8b:84:5c:86:be:ec:2e:c3:a9:b4:
04:18:72:4f:95:83:b1:4a:61:12:b9:39:e3:7c:81:14:1e:d8:
61:ff:a9:db:f2:43:62:86:a6:50:a7:1e:15:a1:e9:2c:08:76:
6b:72:16:3e:41:a6:75:39:21:18:66:e8:31:76:a5:20:a2:36:
a5:cf:2c:78:dd:41:50:09:d5:b5:8d:81:f0:8f:6f:25:22:57:
91:07:78:75:f0:f3:52:c4:79:16:e4:d2:fa:11:2b:82:0f:df:
11:4e:d2:c7:9d:6a:96:e6:f5:13:8b:4c:d4:c7:d9:b1:0e:14:
23:7f:3e:d0:0b:8e:c7:6d:d9:df:17:83:a5:37:df:7b:0a:14:
6b:b6:68:97:0d:26:21:20:43:a0:b6:f7:d4:2c:44:2c:2f:77:
9c:54:2a:bc:fb:90:ae:d3:5b:64:4b:d7:96:8e:8e:f2:6c:75:
7b:5f:45:52:00:16:ce:2e:3f:24:f2:f5:a8:74:c9:65:a6:aa:
58:5a:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org