Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/g3aFmKeocgyX9E0pIayj0p5rE1A.roa
File: g3aFmKeocgyX9E0pIayj0p5rE1A.roa (raw, json)
Hash identifier: hM9W5MhrCHfLdbMhr9yHZnDTj6hkx9rEWmfEzyHh8pM=
Subject key identifier: 83:76:85:98:A7:A8:72:0C:97:F4:4D:29:21:AC:A3:D2:9E:6B:13:50
Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial: 06E7
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/g3aFmKeocgyX9E0pIayj0p5rE1A.roa
Signing time: Thu 18 May 2023 07:23:24 +0000
ROA not before: Thu 18 May 2023 07:23:24 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 59022
IP address blocks: 2400:ebc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Validity
Not Before: May 18 07:23:24 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=83768598A7A8720C97F44D2921ACA3D29E6B1350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:49:31:60:ed:f0:97:08:f9:8e:eb:c5:90:
78:ad:f6:cf:61:0e:e4:36:a8:9d:a0:d5:7c:a3:5c:
d7:da:fe:04:72:9b:9b:69:3c:5b:2d:bc:df:bb:0d:
4d:ef:da:eb:d5:57:53:0d:6d:85:0d:a1:a7:82:db:
5f:64:6b:3f:7e:5d:6f:6f:39:c1:59:f5:45:1e:c8:
ac:6f:ab:b1:aa:85:06:a5:6a:53:0f:9d:70:8c:3f:
be:c8:1a:13:09:63:c8:0e:5d:11:a1:5c:75:98:58:
eb:22:e2:bf:d4:9e:e8:ee:00:00:d3:88:ca:78:a1:
ba:c8:5a:32:c3:f6:06:a1:23:0f:13:26:91:88:23:
cb:3a:5b:19:b0:4c:62:5a:7b:c8:4b:21:dd:c2:42:
fa:eb:d2:a1:3b:9f:18:d7:3b:27:2d:6b:4f:71:33:
91:84:8d:c1:b5:dc:80:17:4a:8e:68:0c:f6:a9:f9:
55:84:21:35:d8:6a:e0:e4:5d:56:bd:19:16:67:47:
78:ad:b8:c0:04:9e:8e:3a:04:de:14:ac:ce:bd:32:
0b:08:2e:3b:e2:2a:74:72:41:2a:0f:13:15:f3:a7:
af:48:85:dc:35:d6:74:45:93:2c:af:83:70:86:3c:
4e:04:14:2b:09:06:d2:17:e5:13:57:03:19:a0:45:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:76:85:98:A7:A8:72:0C:97:F4:4D:29:21:AC:A3:D2:9E:6B:13:50
X509v3 Authority Key Identifier:
keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/g3aFmKeocgyX9E0pIayj0p5rE1A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:ebc0::/32
Signature Algorithm: sha256WithRSAEncryption
38:dd:c8:e0:82:5e:af:cc:de:cb:34:17:81:5a:c9:cb:c3:e5:
c5:4f:b9:59:fe:8b:6a:88:4d:0d:f3:c9:c3:79:31:4f:69:e5:
df:8b:ad:b3:50:9b:7f:e9:a9:63:06:1b:cb:67:db:57:a6:b4:
63:7e:82:f9:ed:e7:d7:f0:40:f5:f0:c6:42:2e:c9:a1:ae:09:
a8:c6:42:62:15:a3:ae:15:b5:c9:65:86:00:45:49:33:61:3d:
39:2d:3e:e0:ab:e2:48:6f:46:b5:23:8d:9a:30:47:fe:b0:ca:
50:99:3c:c1:96:0b:a1:86:7d:ff:d7:87:0c:34:28:9a:5f:57:
bf:9c:d4:7c:ba:02:fe:02:6e:89:bd:0d:b4:ed:fa:f6:8f:0a:
fd:97:1e:be:63:a1:a1:5e:93:f9:3d:e2:11:54:41:87:e7:fc:
52:ba:32:67:29:87:97:76:9a:be:31:25:97:20:96:96:ea:8d:
92:cd:46:00:2d:07:0c:db:6e:a8:9a:64:2a:72:20:8f:b5:ce:
1a:48:dd:33:63:19:b2:e4:cc:d6:47:72:b2:55:fc:4c:b3:ea:
38:83:36:49:69:67:97:74:cf:87:6c:91:cc:36:96:06:5d:31:
9a:3d:a6:eb:a1:d6:13:87:21:ba:52:44:ec:44:10:58:06:54:
80:fd:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org