Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/ZlRu8JJEC20VIzjILHzL_sclfYo.roa
File: ZlRu8JJEC20VIzjILHzL_sclfYo.roa (raw, json)
Hash identifier: gX4G2bkcR6Uld2aGIrPmLhHhkUu4+V5PPYm5Y1uNVjo=
Subject key identifier: 66:54:6E:F0:92:44:0B:6D:15:23:38:C8:2C:7C:CB:FE:C7:25:7D:8A
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 0D54
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/ZlRu8JJEC20VIzjILHzL_sclfYo.roa
Signing time: Tue 07 Jun 2022 02:16:46 +0000
ROA not before: Tue 07 Jun 2022 02:16:46 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 212237
IP address blocks: 2403:6380::/40 maxlen: 48
2403:6380::/44 maxlen: 48
2403:6380:10::/44 maxlen: 48
2403:6380:11::/48 maxlen: 48
2403:6380:12::/48 maxlen: 48
2403:6380:20::/44 maxlen: 48
2403:6380:30::/44 maxlen: 48
2403:6380:31::/48 maxlen: 48
2403:6380:32::/48 maxlen: 48
2403:6380:40::/44 maxlen: 48
2403:6380:50::/44 maxlen: 48
2403:6380:60::/44 maxlen: 48
2403:6380:70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3412 (0xd54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jun 7 02:16:46 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=66546EF092440B6D152338C82C7CCBFEC7257D8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:65:e6:9c:62:3e:2d:12:b8:38:3e:05:54:
71:d8:3c:7b:4b:35:cd:54:ef:55:cd:be:52:90:54:
06:28:82:82:be:40:ef:cc:43:98:98:a9:63:fb:fa:
d0:9d:9e:f8:03:ae:00:8b:5c:a5:52:18:39:44:e2:
f6:6e:81:1c:cd:d3:63:7f:5b:6b:27:28:cf:36:a9:
94:ce:d5:54:44:9c:88:b2:06:38:e6:1a:12:9d:36:
98:84:7d:cf:51:c3:6d:42:c9:e9:b8:c1:4c:f8:8a:
f1:0f:9e:af:93:a3:4e:24:04:54:6d:bb:1c:2d:e8:
93:ed:3c:de:56:c7:d4:a1:9c:39:8a:90:ab:07:c7:
a1:25:3e:b5:5f:46:f0:f6:6b:2c:38:d0:fe:f5:54:
9e:31:20:9f:eb:e0:ec:f7:7b:4b:e7:e7:55:95:e3:
d4:c4:39:1e:70:1b:48:c5:c6:9d:30:54:21:9a:63:
63:fb:a0:a7:0d:52:aa:d9:4c:01:e5:c8:51:75:9b:
85:17:71:02:90:f9:66:da:48:4d:f0:13:e3:9c:c6:
54:77:1c:d7:a8:09:ad:85:f8:65:a7:08:30:4a:1a:
87:1f:ff:a7:6e:d7:42:59:1f:23:cc:db:e1:6f:d4:
2c:e5:36:f2:b2:51:16:47:2c:6e:f3:b8:8b:ac:64:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:54:6E:F0:92:44:0B:6D:15:23:38:C8:2C:7C:CB:FE:C7:25:7D:8A
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/ZlRu8JJEC20VIzjILHzL_sclfYo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:6380::/40
Signature Algorithm: sha256WithRSAEncryption
d5:c7:c1:86:28:7e:db:11:36:3b:95:5e:0e:f5:87:c1:af:94:
84:4a:e5:ab:ea:de:57:7f:d7:dd:8f:ec:ab:e3:d5:6a:99:fa:
30:71:1b:19:e7:7c:c5:16:af:8d:f3:17:74:d3:03:f8:51:31:
33:3b:c5:fc:f5:2f:12:1f:11:e6:fa:19:9e:a4:72:db:86:99:
96:0e:9d:78:96:ba:a1:37:3c:e6:91:77:e9:1d:a1:5c:42:02:
aa:c7:a0:b3:25:6c:ef:f8:c4:d5:db:b9:66:86:2b:18:0d:8a:
4a:ca:2a:f3:d1:6e:c4:e5:44:f0:75:f7:67:5f:dd:cc:fb:50:
32:46:2e:71:de:93:91:48:6e:56:a9:a9:b7:41:14:e1:77:4c:
c9:5d:3e:38:10:c9:e8:42:ce:64:3f:3a:51:8e:5d:b8:64:60:
c4:c6:9e:3a:81:8e:40:bf:63:5e:dc:43:5c:b6:e0:2a:41:f1:
6d:de:55:6c:28:20:4e:b2:68:23:a1:62:5b:24:54:8a:fd:6e:
bf:f6:42:88:1b:8c:e1:73:ed:a5:e3:c0:27:ae:87:c3:4f:7f:
7f:61:1e:cd:67:82:05:a0:0a:3d:7e:bd:84:5e:e4:d4:a7:a0:
17:42:c6:35:dd:0e:b5:eb:8d:d4:6b:ea:f1:50:e1:f5:35:ae:
82:3b:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org