Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/WF0r1gQ9lMi-hZYmKFVe3HJKwXc.roa
File: WF0r1gQ9lMi-hZYmKFVe3HJKwXc.roa (raw, json)
Hash identifier: lvXLLIU143ce+zu4fAM1QYY2NVSEQay38vXyJIIkVjg=
Subject key identifier: 58:5D:2B:D6:04:3D:94:C8:BE:85:96:26:28:55:5E:DC:72:4A:C1:77
Certificate issuer: /CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Certificate serial: 04
Authority key identifier: 81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/WF0r1gQ9lMi-hZYmKFVe3HJKwXc.roa
Signing time: Thu 27 May 2021 05:02:09 +0000
ROA not before: Thu 27 May 2021 05:02:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63689
IP address blocks: 2402:1440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Validity
Not Before: May 27 05:02:09 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=585D2BD6043D94C8BE85962628555EDC724AC177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:40:6d:76:82:70:f0:6c:de:ec:97:6a:8a:
3d:1a:ed:83:5b:40:08:e5:81:df:a0:2b:52:60:a4:
50:99:8a:19:ee:03:e4:6e:a9:b2:8d:cc:96:4e:a5:
e9:1f:e5:00:3c:35:a8:03:7f:6d:8b:75:5a:f5:20:
7a:74:9b:2c:af:af:f9:97:8c:2c:18:26:be:9d:6d:
7d:28:92:8e:d9:21:87:db:18:c2:4f:eb:95:24:f4:
1e:10:ef:b1:bb:c5:ed:ec:9f:34:d3:5e:d8:17:dd:
4c:0b:d1:52:1b:53:7e:43:67:37:f7:b1:0f:53:83:
23:60:da:e9:e5:db:1e:1c:53:33:80:f9:5b:86:3a:
3b:61:f7:97:1c:28:bc:99:1d:8a:32:f8:ff:6c:21:
d4:78:d7:f7:2b:b6:c3:c7:e6:82:39:66:91:3e:79:
df:b1:3a:17:8f:27:2f:fb:ac:4f:e1:a0:4c:fb:66:
32:a7:bb:ff:2a:66:6e:76:1c:2d:08:43:44:7e:f7:
4f:6a:f7:88:c7:64:ae:6c:25:82:3e:b9:19:56:bc:
e4:e3:0a:1f:76:05:c8:21:d6:9d:f7:b0:d1:4c:f7:
ea:01:fd:c6:ac:04:45:e6:a0:34:f0:6d:ab:11:e2:
8e:9e:08:db:73:39:5e:6d:01:99:94:a4:ec:e4:95:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:2B:D6:04:3D:94:C8:BE:85:96:26:28:55:5E:DC:72:4A:C1:77
X509v3 Authority Key Identifier:
keyid:81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/WF0r1gQ9lMi-hZYmKFVe3HJKwXc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
a8:6a:bc:db:d4:b0:47:8e:b8:8e:64:8e:7e:9a:a9:d0:69:14:
35:65:cf:fe:0a:b0:2b:94:83:4f:db:07:cf:6c:5b:d8:04:27:
59:5f:7e:c7:4e:40:0a:07:d6:c8:a0:aa:ae:fb:77:2b:8b:68:
9e:1f:94:b1:84:0f:9d:71:86:7c:b9:04:2a:52:11:ab:f5:2b:
2f:a2:19:66:fe:36:8f:a3:7f:cb:17:87:67:5e:ba:d5:f1:1e:
b8:76:ab:30:88:fc:24:4a:e3:dd:dc:42:6f:eb:4c:ad:4d:af:
36:0e:3b:bb:36:7f:a0:27:c2:28:b3:de:d4:78:36:9f:c4:7e:
05:6c:48:21:92:56:4e:0b:57:71:4b:86:88:29:c7:9d:9f:7b:
0a:45:c1:bd:97:e6:ae:80:3c:54:29:13:6d:60:c2:b4:8e:ac:
c3:92:50:e3:54:ca:f4:80:14:8c:c7:69:23:58:37:df:6a:1c:
bd:e7:88:31:e3:dc:a1:5a:4a:7a:ba:97:2b:9a:70:d4:7f:fb:
a4:66:04:15:72:e9:68:13:7b:5d:8a:82:57:5c:18:0c:2d:59:
bc:76:9d:26:e9:2d:75:4a:cd:ff:22:33:13:07:0b:df:40:a8:
32:2c:34:6b:c1:82:14:59:5e:f2:5c:42:08:e7:d3:53:78:f4:
db:ed:65:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org