Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/iUsAMJ9ZNQyPsVvJ6E1BUZxIiCo.roa
File: iUsAMJ9ZNQyPsVvJ6E1BUZxIiCo.roa (raw, json)
Hash identifier: CTtDF2QY+Pv1XIjHpWM4WyzoSz1xz9VsGjfF4uYe+sM=
Subject key identifier: 89:4B:00:30:9F:59:35:0C:8F:B1:5B:C9:E8:4D:41:51:9C:48:88:2A
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 0977
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/iUsAMJ9ZNQyPsVvJ6E1BUZxIiCo.roa
Signing time: Tue 07 Jun 2022 10:10:17 +0000
ROA not before: Tue 07 Jun 2022 10:10:17 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 132168
IP address blocks: 2402:1440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Jun 7 10:10:17 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=894B00309F59350C8FB15BC9E84D41519C48882A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:a3:ec:da:d6:a6:3c:0b:30:8a:00:92:e3:
6a:7c:41:74:1b:c5:cf:1e:1c:54:60:27:00:7a:f8:
df:a8:4a:17:95:c4:17:d0:f7:07:76:f0:85:e7:a9:
cc:1c:34:fb:40:c5:d2:66:83:01:81:ed:df:48:86:
7e:38:49:74:f0:e7:04:a5:6d:c4:33:79:b7:30:aa:
b8:9e:90:2f:f9:af:48:3f:47:df:a3:98:4d:01:7d:
0d:68:ae:5f:67:a2:e2:35:a6:ba:38:fc:30:3c:c7:
ba:b8:02:e9:9b:c4:ac:6f:b8:22:76:e2:9e:85:ca:
e7:0c:48:90:df:0c:59:c7:48:f0:94:0e:e9:9b:d5:
38:d2:3d:9b:e2:15:e0:e0:80:ae:8a:a1:0b:11:a3:
3f:90:c0:5c:ff:ab:d5:50:cd:81:cd:5f:cb:9c:7d:
c2:6c:22:8f:4b:8a:3f:69:f7:86:6f:16:5a:f3:5b:
3b:69:ce:8f:c4:c8:7e:8c:9a:d3:1f:a6:a9:ed:48:
5b:e8:40:62:ba:05:52:5e:54:b9:01:0d:da:cb:1a:
ea:a3:13:77:0e:44:7f:5c:d0:1e:55:5b:8c:72:80:
12:d0:7a:60:1f:a5:c7:15:b2:11:49:87:51:07:82:
37:aa:ae:27:2e:36:71:8a:5c:33:9c:83:08:56:f8:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:00:30:9F:59:35:0C:8F:B1:5B:C9:E8:4D:41:51:9C:48:88:2A
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/iUsAMJ9ZNQyPsVvJ6E1BUZxIiCo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
02:53:b9:0d:58:d4:6d:fd:aa:0a:f2:74:82:57:7d:ee:b8:81:
4b:46:e0:e7:0c:51:18:be:2a:30:f2:64:87:e7:66:51:9b:a8:
e6:0d:8c:9c:93:83:75:56:59:69:ae:eb:e7:4e:d4:53:8a:6d:
6b:d7:b8:d1:7f:2b:cc:86:52:3a:b4:cf:ef:16:d6:9c:a5:4e:
55:34:01:07:53:1e:ad:6d:87:9e:8e:2b:fa:d4:c3:97:e3:77:
2d:a9:35:6e:7b:42:d5:2b:a1:17:98:2e:b7:95:e5:cb:fb:1a:
e3:3c:9f:53:77:9a:f4:73:f4:41:05:9f:55:ab:76:bc:7e:d8:
06:64:b5:a5:bd:9c:74:2d:7b:c3:45:49:27:a9:89:3b:e1:af:
d5:8d:a7:84:53:47:07:46:21:de:67:a2:53:65:e5:e5:ac:65:
7d:f0:a8:da:1b:df:35:9a:f5:93:e1:94:9a:31:b7:2f:ba:b5:
25:05:fb:60:0b:88:ad:f7:80:e8:b2:c4:c6:cd:7c:d9:a7:3c:
53:d9:72:d7:42:e7:97:3f:18:4c:33:87:43:b0:44:c1:86:61:
83:f8:77:b2:ad:cc:cc:f6:35:ad:72:ee:d6:3f:c7:b9:2a:80:
d8:5a:91:9d:30:e7:9e:e2:0d:0e:67:3c:cb:bd:dd:d4:c0:61:
f7:70:2d:2d
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF
MTRGMkFDN0YwMjM4MTM3MDUyRUFBMzE1QzVCRDY0MzEzNDAyMjAeFw0yMjA2MDcx
MDEwMTdaFw0yMzA2MDcwMzM0NDNaMDMxMTAvBgNVBAMTKDg5NEIwMDMwOUY1OTM1
MEM4RkIxNUJDOUU4NEQ0MTUxOUM0ODg4MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMx6Ps2tamPAswigCS42p8QXQbxc8eHFRgJwB6+N+oSheVxBfQ
9wd28IXnqcwcNPtAxdJmgwGB7d9Ihn44SXTw5wSlbcQzebcwqriekC/5r0g/R9+j
mE0BfQ1orl9nouI1pro4/DA8x7q4AumbxKxvuCJ24p6FyucMSJDfDFnHSPCUDumb
1TjSPZviFeDggK6KoQsRoz+QwFz/q9VQzYHNX8ucfcJsIo9Lij9p94ZvFlrzWztp
zo/EyH6MmtMfpqntSFvoQGK6BVJeVLkBDdrLGuqjE3cORH9c0B5VW4xygBLQemAf
pccVshFJh1EHgjeqricuNnGKXDOcgwhW+LPFAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUiUsAMJ9ZNQyPsVvJ6E1BUZxIiCowHwYDVR0jBBgwFoAULeFPKsfwI4E3BS6q
MVxb1kMTQCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4
Ny9MZUZQS3Nmd0k0RTNCUzZxTVZ4YjFrTVRRQ0kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xlRlBLc2Z3STRFM0JTNnFNVnhiMWtNVFFDSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvaVVzQU1KOVpOUXlQ
c1Z2SjZFMUJVWnhJaUNvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQCFEAwDQYJKoZIhvcNAQELBQADggEBAAJTuQ1Y1G39qgrydIJXfe64gUtG
4OcMURi+KjDyZIfnZlGbqOYNjJyTg3VWWWmu6+dO1FOKbWvXuNF/K8yGUjq0z+8W
1pylTlU0AQdTHq1th56OK/rUw5fjdy2pNW57QtUroReYLreV5cv7GuM8n1N3mvRz
9EEFn1Wrdrx+2AZktaW9nHQte8NFSSepiTvhr9WNp4RTRwdGId5nolNl5eWsZX3w
qNob3zWa9ZPhlJoxty+6tSUF+2ALiK33gOiyxMbNfNmnPFPZctdC55c/GEwzh0Ow
RMGGYYP4d7KtzMz2Na1y7tY/x7kqgNhakZ0w557iDQ5nPMu93dTAYfdwLS0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org