Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/AbY0wACDuGIEizITNOoNiTCXkuA.roa
File: AbY0wACDuGIEizITNOoNiTCXkuA.roa (raw, json)
Hash identifier: lQRAI4yvFJaigOX4ipZ4EQUNIO4ngAnOnh1sPH3hzuo=
Subject key identifier: 01:B6:34:C0:00:83:B8:62:04:8B:32:13:34:EA:0D:89:30:97:92:E0
Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97
Certificate serial: 0D
Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/AbY0wACDuGIEizITNOoNiTCXkuA.roa
Signing time: Thu 24 Nov 2022 05:42:26 +0000
ROA not before: Thu 24 Nov 2022 05:42:26 +0000
ROA not after: Thu 23 Nov 2023 05:43:14 +0000
asID: 63701
IP address blocks: 2402:9a80::/32 maxlen: 48
2407:37c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97
Validity
Not Before: Nov 24 05:42:26 2022 GMT
Not After : Nov 23 05:43:14 2023 GMT
Subject: CN=01B634C00083B862048B321334EA0D89309792E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:e4:26:63:01:27:ef:f4:7f:c0:b4:f3:b4:
f4:50:22:96:d0:7f:a8:65:48:61:40:71:d2:75:32:
48:4a:57:ca:31:92:8c:1a:cd:e6:75:9b:72:99:d7:
92:71:af:83:06:c4:05:4a:7d:2a:7d:50:3c:eb:c1:
4e:7f:c7:70:17:a2:3c:c4:2d:b4:48:ce:01:90:74:
ef:a3:86:48:3b:54:42:43:53:f3:db:68:d7:07:67:
a0:86:fb:93:fc:14:ce:21:80:1c:be:92:07:c6:af:
e8:40:b0:ed:ee:75:1d:9b:4f:a6:c1:bf:6c:82:1d:
36:ac:c7:c4:a0:ac:55:0d:b3:34:0a:a3:c2:58:05:
bb:49:1d:9b:29:84:ba:99:4c:3f:a1:7b:c9:bc:8d:
79:e4:18:d1:59:fe:2c:a8:61:47:4b:97:94:00:20:
df:c0:63:34:0c:c7:13:77:73:99:61:7b:e9:91:f9:
95:3a:d7:90:9b:cb:c4:d9:2a:59:96:d4:bb:13:d7:
b8:a5:1c:fb:7e:fa:e3:14:fc:2b:58:01:65:66:1a:
16:6f:81:c8:65:b9:c1:d6:43:83:99:95:65:89:7e:
e8:c7:69:06:9f:3c:40:b2:30:0e:47:19:ac:0a:2a:
18:8f:e4:4a:ba:a6:b2:de:c7:d2:09:e9:4e:fa:44:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B6:34:C0:00:83:B8:62:04:8B:32:13:34:EA:0D:89:30:97:92:E0
X509v3 Authority Key Identifier:
keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/AbY0wACDuGIEizITNOoNiTCXkuA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:9a80::/32
2407:37c0::/32
Signature Algorithm: sha256WithRSAEncryption
97:34:fc:23:30:d7:4f:05:06:df:98:af:5b:6b:43:76:5c:6d:
65:2b:31:a0:a0:b4:67:7c:fb:12:cd:5b:8f:21:4f:07:e6:b6:
41:9f:c0:f9:50:7d:24:0c:42:81:24:92:35:e8:c1:e8:e2:11:
b2:ae:e2:69:41:0c:0f:b9:ff:cd:44:bd:94:77:c3:c3:22:0a:
61:ed:74:db:62:c9:4e:84:9d:e5:88:11:c0:73:f2:1f:74:42:
fd:b6:c3:d0:99:ec:7b:63:51:06:aa:01:76:a0:2d:4c:6b:e9:
53:cb:8c:35:7d:b6:8b:47:5d:a6:55:ff:59:1d:74:f7:78:5c:
25:9b:4f:f2:f8:f0:a3:6f:1e:bc:fc:51:de:2a:68:af:db:40:
5d:8b:b2:dd:ab:8b:bb:24:7a:db:5c:21:3d:49:b5:5b:c3:8e:
b5:a2:6b:7e:d1:3c:55:48:81:6c:f4:ce:fe:91:d0:dc:00:cb:
4d:93:b3:8e:b6:dc:bf:f5:98:49:66:82:6b:d5:d1:6f:82:b6:
dd:69:65:e0:7c:13:c9:60:29:aa:0d:06:7a:cd:5f:8c:51:ac:
20:e7:a0:f7:62:09:35:02:e1:23:95:9b:06:58:46:1d:af:54:
88:35:5d:3a:e6:55:e6:7a:2c:8b:ce:74:d7:be:48:84:7d:e3:
08:64:7d:04
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxODNE
ODgyMjAxOTQ1QkUxMzk5M0I0QzZEQUM5NTRGOEVFNDI2Qzk3MB4XDTIyMTEyNDA1
NDIyNloXDTIzMTEyMzA1NDMxNFowMzExMC8GA1UEAxMoMDFCNjM0QzAwMDgzQjg2
MjA0OEIzMjEzMzRFQTBEODkzMDk3OTJFMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALL+5CZjASfv9H/AtPO09FAiltB/qGVIYUBx0nUySEpXyjGSjBrN
5nWbcpnXknGvgwbEBUp9Kn1QPOvBTn/HcBeiPMQttEjOAZB076OGSDtUQkNT89to
1wdnoIb7k/wUziGAHL6SB8av6ECw7e51HZtPpsG/bIIdNqzHxKCsVQ2zNAqjwlgF
u0kdmymEuplMP6F7ybyNeeQY0Vn+LKhhR0uXlAAg38BjNAzHE3dzmWF76ZH5lTrX
kJvLxNkqWZbUuxPXuKUc+3764xT8K1gBZWYaFm+ByGW5wdZDg5mVZYl+6MdpBp88
QLIwDkcZrAoqGI/kSrqmst7H0gnpTvpEAmUCAwEAAaOCAfswggH3MB0GA1UdDgQW
BBQBtjTAAIO4YgSLMhM06g2JMJeS4DAfBgNVHSMEGDAWgBQYPYgiAZRb4TmTtMba
yVT47kJslzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjEx
L0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvR0QySUlnR1VXLUU1azdURzJzbFUtTzVDYkpjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIxMS9BYlkwd0FDRHVHSUVp
eklUTk9vTmlUQ1hrdUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAO
AwUAJAKagAMFACQHN8AwDQYJKoZIhvcNAQELBQADggEBAJc0/CMw108FBt+Yr1tr
Q3ZcbWUrMaCgtGd8+xLNW48hTwfmtkGfwPlQfSQMQoEkkjXowejiEbKu4mlBDA+5
/81EvZR3w8MiCmHtdNtiyU6EneWIEcBz8h90Qv22w9CZ7HtjUQaqAXagLUxr6VPL
jDV9totHXaZV/1kddPd4XCWbT/L48KNvHrz8Ud4qaK/bQF2Lst2ri7skettcIT1J
tVvDjrWia37RPFVIgWz0zv6R0NwAy02Ts4623L/1mElmgmvV0W+Ctt1pZeB8E8lg
KaoNBnrNX4xRrCDnoPdiCTUC4SOVmwZYRh2vVIg1XTrmVeZ6LIvOdNe+SIR94whk
fQQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org