Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/yW8j8-gbiIed09kHSY7nzNzht9k.roa
File: yW8j8-gbiIed09kHSY7nzNzht9k.roa (raw, json)
Hash identifier: p8e3tAro11VTuG6FXzwjpOaRA6m8r0Nx8b3YiTggIaY=
Subject key identifier: C9:6F:23:F3:E8:1B:88:87:9D:D3:D9:07:49:8E:E7:CC:DC:E1:B7:D9
Certificate issuer: /CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Certificate serial: 072B
Authority key identifier: 14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/yW8j8-gbiIed09kHSY7nzNzht9k.roa
Signing time: Wed 03 Nov 2021 06:43:38 +0000
ROA not before: Wed 03 Nov 2021 06:43:38 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 212237
IP address blocks: 2403:6380::/40 maxlen: 48
2403:6380::/44 maxlen: 48
2403:6380:10::/44 maxlen: 48
2403:6380:11::/48 maxlen: 48
2403:6380:12::/48 maxlen: 48
2403:6380:20::/44 maxlen: 48
2403:6380:30::/44 maxlen: 48
2403:6380:31::/48 maxlen: 48
2403:6380:32::/48 maxlen: 48
2403:6380:40::/44 maxlen: 48
2403:6380:50::/44 maxlen: 48
2403:6380:60::/44 maxlen: 48
2403:6380:70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Validity
Not Before: Nov 3 06:43:38 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=C96F23F3E81B88879DD3D907498EE7CCDCE1B7D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:b6:e9:0a:e8:6e:cb:a3:87:83:5c:83:a0:
b0:36:66:2e:93:ca:cf:b3:bc:c1:45:aa:99:6d:ef:
1b:f6:8f:d1:c9:fc:ec:a8:11:82:60:32:98:48:20:
ac:2c:23:f2:13:6d:37:32:8e:2f:00:81:e3:8b:cd:
cd:09:8b:30:b6:92:7b:38:73:9c:e6:7b:bc:fd:71:
a1:44:dc:d8:23:f1:c8:c1:d6:5b:76:89:b3:fb:8b:
9e:59:d3:0b:b4:93:7b:fe:0d:a9:1a:0b:ea:89:c2:
a2:45:b4:9a:b2:24:ae:0d:4e:c7:f4:94:43:13:cf:
6e:6b:54:29:e1:3a:d1:a1:0b:5b:d0:75:50:c8:cb:
8e:a6:6d:85:44:b8:34:c0:a2:d4:f2:e8:ed:e6:94:
97:73:2b:a8:7d:c5:c9:e4:0f:a1:ed:56:19:77:c8:
f1:53:4b:20:d5:b2:36:fa:0a:ad:3e:f4:34:28:7f:
46:4d:d7:7b:7a:93:f6:d9:84:f6:35:e7:f1:a0:fa:
d7:8b:18:e9:99:5c:16:1e:d0:6d:8d:22:c6:d1:40:
cb:41:55:e8:a8:95:4c:78:8a:4d:4c:9c:e9:3f:e5:
94:ff:31:b6:59:d5:54:dd:74:d8:e5:e8:be:90:21:
fe:22:6b:15:c8:a3:4a:a4:76:d5:e8:de:de:70:56:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6F:23:F3:E8:1B:88:87:9D:D3:D9:07:49:8E:E7:CC:DC:E1:B7:D9
X509v3 Authority Key Identifier:
keyid:14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FP89ERRuUxbiP-f4VCysMT_W9RA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/yW8j8-gbiIed09kHSY7nzNzht9k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:6380::/40
Signature Algorithm: sha256WithRSAEncryption
2f:31:f7:bb:17:82:88:ce:30:e5:8e:dc:7a:79:38:2b:99:fa:
ae:3b:5d:fc:42:80:40:da:61:e3:bb:57:bf:b3:c8:be:5a:c3:
6f:07:53:8e:37:1a:f2:fb:c5:8b:4f:01:8c:b5:0c:7c:19:1e:
3e:72:94:bd:a7:5f:34:bb:30:e3:12:cd:8d:94:b7:0f:0c:67:
36:c0:e5:ea:94:5f:93:aa:63:c5:8f:60:dd:24:cb:cf:b3:3c:
23:52:17:d0:5b:c7:9b:de:55:ea:e0:bb:d0:2b:d8:a0:73:89:
40:44:0e:2c:42:0c:26:b2:fa:84:71:32:6d:ab:de:fb:a1:29:
25:d9:15:bc:96:13:ca:69:87:39:a8:9c:d1:78:89:b4:ad:51:
66:d0:42:66:b3:1f:f6:7d:23:32:d6:59:45:e7:eb:10:ed:d1:
4a:d5:11:47:45:6f:ec:92:e7:c6:0c:40:e1:3e:c4:bf:21:83:
1b:03:ba:6e:e5:d7:82:4e:33:14:e9:4b:5b:86:7c:45:7c:d9:
24:41:02:3c:70:7a:32:bc:3e:ab:94:c4:0c:2b:b7:36:6d:60:
f3:12:07:44:63:88:d6:02:c0:dd:54:a4:5a:63:14:ce:83:05:
1f:7f:39:45:7a:35:bc:be:4d:90:ed:89:50:f2:d4:cf:c0:34:
72:e4:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:03 2023 by rpki-client on console-fra.rpki-client.org