Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/M6QYVikMud0sVSZvR0vZa_S106I.roa
File: M6QYVikMud0sVSZvR0vZa_S106I.roa (raw, json)
Hash identifier: sYll+bnya1DT6l0IYBMlVdXJzfgkdP8VxZz+n0D5h9s=
Subject key identifier: 33:A4:18:56:29:0C:B9:DD:2C:55:26:6F:47:4B:D9:6B:F4:B5:D3:A2
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 1420
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/M6QYVikMud0sVSZvR0vZa_S106I.roa
Signing time: Fri 19 May 2023 05:54:09 +0000
ROA not before: Fri 19 May 2023 05:54:09 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 212237
IP address blocks: 2403:6380::/40 maxlen: 48
2403:6380::/44 maxlen: 48
2403:6380:10::/44 maxlen: 48
2403:6380:11::/48 maxlen: 48
2403:6380:12::/48 maxlen: 48
2403:6380:20::/44 maxlen: 48
2403:6380:30::/44 maxlen: 48
2403:6380:31::/48 maxlen: 48
2403:6380:32::/48 maxlen: 48
2403:6380:40::/44 maxlen: 48
2403:6380:50::/44 maxlen: 48
2403:6380:60::/44 maxlen: 48
2403:6380:70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5152 (0x1420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: May 19 05:54:09 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=33A41856290CB9DD2C55266F474BD96BF4B5D3A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:84:30:22:8a:56:5c:43:6a:fe:94:53:ae:
15:52:71:ed:c7:bb:06:ab:36:0d:ae:06:8a:90:9e:
7d:77:9b:98:d7:25:68:87:83:ec:5c:e1:eb:d6:c2:
20:b4:53:f6:0c:e1:51:0a:3f:a4:89:f5:fd:1f:b0:
e5:17:e9:2d:4d:cc:cb:be:db:a5:15:e3:d4:77:b4:
65:db:7c:1f:1e:0a:39:b0:20:3e:65:b3:b8:d4:41:
9e:92:aa:7f:9f:68:f3:69:07:11:4f:b3:5b:fc:1c:
90:44:5b:2a:81:64:02:38:b8:6b:70:50:88:19:2a:
d9:04:9a:8e:95:0f:b1:a7:ea:b9:cb:3e:af:91:76:
b2:b0:f0:f1:aa:f8:ac:ac:0b:1f:84:fa:3d:07:7f:
ff:53:7a:2d:95:07:16:0b:7c:23:6e:a3:6f:9a:88:
1b:e0:97:4b:b1:72:e2:a4:65:96:cf:84:14:d1:92:
99:71:69:c1:df:a5:4a:3f:ea:d1:89:85:fa:c4:d9:
ba:5a:eb:f5:54:4b:03:d2:b4:f3:d9:5b:54:72:a8:
4d:c6:19:a2:82:9c:6c:99:47:81:2a:4b:4d:8f:6c:
95:bd:d6:af:93:fd:f0:4d:4b:19:26:54:9c:f8:1a:
fd:56:99:b8:91:0c:bb:80:dd:be:53:f4:63:83:54:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A4:18:56:29:0C:B9:DD:2C:55:26:6F:47:4B:D9:6B:F4:B5:D3:A2
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/M6QYVikMud0sVSZvR0vZa_S106I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:6380::/40
Signature Algorithm: sha256WithRSAEncryption
55:51:20:3a:09:b3:5a:6c:53:13:53:36:0a:18:22:f3:d7:80:
92:08:38:b6:a6:73:72:8b:ad:4b:45:27:78:6a:f1:d7:09:4e:
38:41:47:c1:91:54:02:75:f1:1e:83:75:64:53:65:f6:ea:75:
61:13:ed:e7:91:f7:aa:8d:49:c8:6b:05:f5:b4:90:eb:58:75:
d9:aa:50:14:d0:34:48:59:c0:20:7a:ab:d1:74:b4:f9:77:3b:
2c:ee:ed:29:66:66:3f:e8:85:9d:a7:ea:1f:d4:1d:d8:ef:e2:
4f:a1:4a:44:ef:87:ce:77:b1:67:14:ec:99:3e:f2:f4:07:0a:
1f:88:a5:e0:fb:25:55:e5:f3:07:83:7a:ef:e1:a3:4c:b0:be:
7c:f9:86:b4:61:65:63:c8:e2:3c:24:89:0e:2f:32:89:51:0a:
bd:00:e1:97:b4:f4:ad:3a:35:43:ea:c9:83:ea:de:a8:00:67:
ab:69:ef:0b:79:25:fd:2b:73:3b:2f:d9:50:fc:49:c1:63:8d:
d7:e0:51:a7:30:24:f6:7e:5b:65:f8:ed:22:4f:a4:28:81:c5:
e1:85:7e:08:85:ad:4e:5d:db:ea:36:2c:2e:da:35:0b:36:6e:
44:30:a1:f1:b0:58:83:9c:de:8e:b8:5d:0a:b1:3a:cd:36:2b:
f5:9c:91:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org