Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/q1jgcvSeut6gmuFTrWuGvAgXglM.roa
File: q1jgcvSeut6gmuFTrWuGvAgXglM.roa (raw, json)
Hash identifier: ghuAVZIPsvqK7mjlnsW8kUL+WsXFrqm1NnbxduJfAxY=
Subject key identifier: AB:58:E0:72:F4:9E:BA:DE:A0:9A:E1:53:AD:6B:86:BC:08:17:82:53
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 0974
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/q1jgcvSeut6gmuFTrWuGvAgXglM.roa
Signing time: Tue 07 Jun 2022 10:10:16 +0000
ROA not before: Tue 07 Jun 2022 10:10:16 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 63689
IP address blocks: 2402:1440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420 (0x974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Jun 7 10:10:16 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=AB58E072F49EBADEA09AE153AD6B86BC08178253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:da:74:b2:59:dc:5d:c0:c5:f8:78:d0:df:
2b:95:a4:6e:a5:bb:c5:6e:63:0b:fd:13:5d:09:02:
8e:17:0c:01:9b:58:a5:bc:34:fb:7a:48:61:44:fe:
2d:18:f5:8d:8b:fc:f4:3a:43:94:9e:1f:9f:5c:7f:
46:1a:8e:ce:54:03:8b:e1:72:bc:55:9f:ad:97:88:
99:45:70:dc:9c:52:f4:4f:19:1c:8c:19:f7:8c:b9:
ba:11:b9:46:90:c8:e8:cf:57:5c:d6:4a:ac:5b:e4:
cb:0e:31:7e:a8:1a:d6:d5:e4:c5:60:59:be:20:19:
21:65:fa:36:ad:19:64:74:61:8b:93:84:3f:0c:46:
ae:1e:f3:3d:51:c5:22:ee:99:2f:75:7d:17:d3:23:
d4:3c:c5:f6:a0:a5:78:c6:d4:09:f7:28:68:40:8c:
d6:b9:88:f6:2f:bf:9a:48:fc:2b:a7:43:fd:e4:42:
ab:90:cd:32:df:64:6e:37:13:a3:dc:4e:e7:b4:9c:
ba:18:8f:3a:cb:a5:c2:83:bd:d7:b1:b7:32:73:28:
34:e9:94:a3:be:fd:80:7c:9c:41:d2:ba:55:0b:60:
11:87:46:90:06:29:e8:96:21:a1:4e:fa:15:ca:9e:
6c:03:20:45:bb:cf:8f:1a:61:45:e8:c2:1e:e9:2c:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:E0:72:F4:9E:BA:DE:A0:9A:E1:53:AD:6B:86:BC:08:17:82:53
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/q1jgcvSeut6gmuFTrWuGvAgXglM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
95:88:ce:6a:54:0f:8e:fa:c9:9a:a4:2a:c7:b8:a7:96:30:5e:
44:c1:aa:7c:4d:6f:a8:78:71:60:35:3f:c8:42:a7:bf:01:a7:
72:fb:54:91:22:40:16:5b:bb:70:93:f8:e9:dc:95:ef:a1:90:
0b:b6:ee:bb:1a:46:48:51:3f:0e:e6:38:ea:c7:7a:bc:7f:cb:
b4:7a:d0:0b:5c:2f:95:bf:f9:2a:89:59:db:54:4b:b0:03:ab:
f5:ab:c2:af:c6:9b:b5:34:51:a8:8e:96:52:f9:de:e5:59:8a:
76:94:74:fc:16:9a:57:84:79:51:b4:74:b6:44:6f:79:a5:16:
f7:31:e8:ee:57:e6:53:1c:70:f3:aa:13:9f:83:92:bb:43:53:
71:83:14:5a:06:85:de:2a:56:76:54:37:69:63:6f:f0:f5:74:
01:9e:90:16:94:7b:d3:c4:ce:57:36:53:35:88:70:63:c4:2d:
82:05:20:68:d3:81:bd:8f:a1:61:9f:e4:57:28:19:70:c1:13:
f0:b3:58:36:e6:9b:91:83:ed:b5:f8:43:b2:69:56:b8:eb:d1:
35:d9:f2:e3:5a:d7:b6:f2:fa:8b:9f:4c:9d:f5:3e:19:5e:94:
36:62:e9:f6:21:7b:b2:2e:4b:aa:e5:ca:34:ba:23:09:93:dc:
c7:42:cf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org