Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/BZNipAPhpKf9fMAkWueHCjH_mGc.roa
File: BZNipAPhpKf9fMAkWueHCjH_mGc.roa (raw, json)
Hash identifier: rMhgK9Q+vEc/4+g8kGQfuddY+uskJ8+eLpVHAtNDHTs=
Subject key identifier: 05:93:62:A4:03:E1:A4:A7:FD:7C:C0:24:5A:E7:87:0A:31:FF:98:67
Certificate issuer: /CN=DBCEA01717CCD8B0D00CFDBDA23A56C8E94BB546
Certificate serial: 06FF
Authority key identifier: DB:CE:A0:17:17:CC:D8:B0:D0:0C:FD:BD:A2:3A:56:C8:E9:4B:B5:46
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/286gFxfM2LDQDP29ojpWyOlLtUY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/BZNipAPhpKf9fMAkWueHCjH_mGc.roa
Signing time: Sat 23 Oct 2021 02:10:32 +0000
ROA not before: Sat 23 Oct 2021 02:10:32 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 24424
IP address blocks: 2404:280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBCEA01717CCD8B0D00CFDBDA23A56C8E94BB546
Validity
Not Before: Oct 23 02:10:32 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=059362A403E1A4A7FD7CC0245AE7870A31FF9867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:9d:03:f8:af:c7:4f:ff:2b:62:c6:67:c3:
05:86:da:ab:e1:cf:56:68:ff:c7:ad:2f:10:d3:e3:
14:be:d6:fe:c0:97:85:18:6d:1c:53:85:ab:2b:b8:
dc:da:75:73:e8:6d:c6:3b:2d:74:58:75:92:13:17:
19:d4:7b:79:1c:bb:14:62:eb:73:c8:4d:2b:48:8a:
e6:ee:bf:52:22:2c:a9:84:b7:90:de:b0:23:5c:18:
66:e9:cb:a8:28:20:4a:2e:83:61:ad:1f:f3:32:ae:
a8:56:73:0c:20:68:c4:b8:a5:eb:ae:98:d7:73:15:
dc:65:0c:70:89:af:27:2d:ff:7c:cf:b2:2f:31:eb:
db:65:b0:8b:2d:af:5e:86:07:e1:53:a7:05:03:18:
dc:5a:a2:12:06:de:cf:64:6b:38:69:eb:5c:06:3f:
67:7f:d7:9e:51:8a:11:d9:df:3d:29:98:e1:c3:c5:
1f:f4:32:81:f0:3b:df:58:f6:19:11:03:d6:59:e6:
94:25:9f:95:29:42:16:c5:aa:61:db:3e:af:cb:9b:
99:62:30:5f:4e:d6:d2:39:36:86:b8:a2:78:83:7c:
84:86:f1:c9:24:37:17:f6:bb:1a:33:81:99:f7:f0:
c0:3f:52:73:71:82:88:ed:db:52:a7:f5:ef:15:63:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:62:A4:03:E1:A4:A7:FD:7C:C0:24:5A:E7:87:0A:31:FF:98:67
X509v3 Authority Key Identifier:
keyid:DB:CE:A0:17:17:CC:D8:B0:D0:0C:FD:BD:A2:3A:56:C8:E9:4B:B5:46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/286gFxfM2LDQDP29ojpWyOlLtUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/286gFxfM2LDQDP29ojpWyOlLtUY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/BZNipAPhpKf9fMAkWueHCjH_mGc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:280::/32
Signature Algorithm: sha256WithRSAEncryption
b4:73:e4:bc:72:99:02:08:c5:78:dd:9d:e6:8e:0e:88:13:fa:
7d:8d:c5:f3:8a:3a:33:e8:b8:e9:58:37:34:54:9a:47:ed:dd:
81:db:49:bc:75:73:d5:b1:0e:78:af:03:dd:f5:ec:f6:c7:87:
6c:5a:d4:01:42:ff:9a:87:48:6e:0e:60:5c:9d:14:c2:45:eb:
c3:56:0d:96:c6:db:ba:35:da:94:2b:9d:cb:f7:87:d8:b2:80:
26:e2:13:cb:f2:64:25:f9:4c:ea:e8:a6:fe:64:cc:7c:b0:92:
4b:5d:7d:64:d3:1e:60:4e:3c:d6:96:2f:8b:08:5a:de:d4:89:
a7:ef:67:e5:9a:19:23:d8:4b:f2:b4:74:23:89:ee:0d:ef:fb:
03:7f:1f:cf:6d:2f:95:96:9f:0c:8a:bf:cc:49:ea:8c:16:ab:
a2:32:26:60:f4:5c:4d:9e:9c:eb:45:c5:0d:17:46:ee:92:c8:
06:9d:5b:09:0c:ae:3f:85:92:8a:04:a0:34:b1:bc:07:fe:77:
d4:d8:9f:9f:ab:14:53:07:2c:b6:2c:1d:63:c4:95:4f:75:1e:
0e:14:f6:d2:fc:91:38:c7:b5:e6:71:8e:cc:26:6f:e4:65:58:
e7:9e:a9:84:38:b9:c2:cb:40:25:cc:92:45:77:3d:4c:a3:ce:
66:cc:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org