Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/VChtSAWZerfm1oUcpZ8O9Jb7-x4.roa
File: VChtSAWZerfm1oUcpZ8O9Jb7-x4.roa (raw, json)
Hash identifier: /nKQKpW1draS34OmQBnxGHS2Qmu53qqdI1+r90WAbZ8=
Subject key identifier: 54:28:6D:48:05:99:7A:B7:E6:D6:85:1C:A5:9F:0E:F4:96:FB:FB:1E
Certificate issuer: /CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Certificate serial: 07
Authority key identifier: 81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/VChtSAWZerfm1oUcpZ8O9Jb7-x4.roa
Signing time: Thu 27 May 2021 05:02:10 +0000
ROA not before: Thu 27 May 2021 05:02:10 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 132168
IP address blocks: 2402:1440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Validity
Not Before: May 27 05:02:10 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=54286D4805997AB7E6D6851CA59F0EF496FBFB1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:aa:fe:c6:6b:22:3f:f4:ab:af:94:9b:fb:
1c:fc:75:6a:86:37:31:4d:cc:16:6b:6d:fe:df:c4:
91:da:a9:2e:f5:5f:09:0e:2c:5a:ed:4d:f0:d2:44:
83:ec:9f:82:03:ff:7c:b1:e5:01:83:bb:97:af:3a:
3b:f1:69:33:11:ed:40:38:3a:a9:98:d0:bd:a3:57:
7e:9a:04:83:ac:c7:e8:1d:4b:14:5d:43:ef:5b:b6:
30:0b:ff:d8:df:31:0e:b0:ed:c3:5f:c6:c5:2b:df:
00:cf:5e:68:e7:f6:73:68:d2:58:ab:c3:82:c0:73:
97:36:e5:77:63:aa:90:16:50:ff:c5:73:67:9d:ce:
d3:22:89:14:b0:ea:75:81:39:5b:89:40:2e:f6:42:
4b:2e:d2:d7:ff:41:54:96:0d:a0:41:38:5b:23:3b:
1d:45:f0:6b:68:ee:b0:64:58:4a:59:52:fd:b6:94:
2d:21:f6:00:28:95:84:86:2d:f2:d7:ee:c3:86:34:
0f:6c:ac:92:f2:41:e2:bd:51:08:69:f5:99:13:ca:
10:fc:30:6a:91:ea:25:e5:30:aa:12:5e:55:59:b8:
0d:97:6b:e5:5d:af:93:c6:bd:33:23:02:3b:5d:bf:
f2:60:1b:ad:2c:ce:42:7d:58:7f:a5:f6:98:09:83:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:6D:48:05:99:7A:B7:E6:D6:85:1C:A5:9F:0E:F4:96:FB:FB:1E
X509v3 Authority Key Identifier:
keyid:81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/VChtSAWZerfm1oUcpZ8O9Jb7-x4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
39:cb:1a:79:32:10:1f:ca:10:df:f7:0e:9b:d9:6b:72:62:82:
61:56:17:2a:c1:48:7e:9c:89:a4:f9:b4:3d:5b:e7:d4:56:89:
23:66:04:80:db:16:b9:c2:76:c7:eb:e9:e5:87:17:77:8a:55:
f7:70:8b:b4:73:2a:01:d0:13:22:2d:22:d3:24:cd:64:40:d3:
d2:f3:21:65:b4:52:1e:93:2e:0a:44:fc:f3:b7:1d:7c:8c:cb:
1e:f8:29:0a:72:a6:f5:f8:e3:b3:62:44:a1:00:ec:9f:d2:c9:
32:28:f6:97:12:ed:df:f5:26:7a:41:1c:ec:73:02:72:9d:49:
c4:0f:da:d0:35:1e:e4:e8:a8:a5:fc:dd:93:8e:9a:e7:a7:b7:
92:c9:62:5b:6c:5e:59:e2:7a:7e:5d:cd:d4:94:a2:e8:08:35:
cf:f8:74:56:24:47:e9:50:2e:47:05:85:7b:1e:18:82:68:e2:
76:cb:a2:65:ec:7a:4b:39:61:ec:3d:a7:34:c0:96:41:70:0b:
3b:78:e8:e9:02:19:eb:b3:20:96:40:16:0e:43:73:42:f3:48:
73:f6:15:e5:f5:77:c4:0b:1f:48:82:7d:70:d7:5a:7f:25:1d:
28:c5:19:f5:4d:f5:47:b6:99:90:1b:8e:eb:9f:f8:b8:74:b2:
3f:61:13:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org