Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/zr3I9h2d5UMOFAGPhT594AfgbrM.roa
File: zr3I9h2d5UMOFAGPhT594AfgbrM.roa (raw, json)
Hash identifier: mhii2Zz9JN9v/oY0YMs7il83Aupc76SoEhVzpbZan1c=
Subject key identifier: CE:BD:C8:F6:1D:9D:E5:43:0E:14:01:8F:85:3E:7D:E0:07:E0:6E:B3
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1051
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/zr3I9h2d5UMOFAGPhT594AfgbrM.roa
Signing time: Wed 24 May 2023 03:53:38 +0000
ROA not before: Wed 24 May 2023 03:53:38 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 63689
IP address blocks: 2402:1440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4177 (0x1051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: May 24 03:53:38 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=CEBDC8F61D9DE5430E14018F853E7DE007E06EB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:39:57:24:90:1b:44:98:ae:8d:5a:c7:c7:
ba:c3:c0:e6:2b:5b:fd:89:03:64:d0:14:df:a0:fa:
ce:46:86:e3:24:21:ea:ce:77:70:3a:2d:7a:9e:76:
55:0b:ab:14:f9:8d:b6:19:af:b6:e3:da:21:d3:d6:
0f:72:fc:66:4e:6e:84:a3:a8:fc:c7:13:8d:38:6a:
49:22:94:31:dc:1c:ba:d9:8e:12:6b:da:80:ba:fa:
0d:97:2d:2e:56:f6:cc:5d:5f:ae:47:c4:59:9b:69:
50:42:a8:3a:2c:68:42:f0:16:ff:dd:4e:2f:50:f0:
9c:5a:d5:02:58:5e:72:12:5e:c8:1c:1f:ce:65:38:
2f:fc:8c:a1:40:60:4f:7d:54:a9:71:c5:35:4e:d3:
ee:a3:1b:2f:74:f4:36:b7:c4:ec:18:5f:aa:8b:be:
04:e9:65:66:57:06:7d:d9:e1:21:b8:cb:df:a2:93:
78:ed:42:20:80:71:67:be:24:f7:ab:34:da:2a:79:
e5:4b:25:ba:64:7a:cf:a1:52:07:94:2b:b2:a7:9d:
0b:9c:c1:45:1a:c0:c2:51:45:00:67:66:75:0a:e4:
5a:fd:18:8a:ff:b3:04:0d:97:ff:c7:d0:e7:fa:91:
de:2d:6a:b3:b7:d1:fc:32:d1:72:54:9f:d6:c3:d5:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:C8:F6:1D:9D:E5:43:0E:14:01:8F:85:3E:7D:E0:07:E0:6E:B3
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/zr3I9h2d5UMOFAGPhT594AfgbrM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
81:d3:11:95:6c:23:f3:76:0e:99:21:5b:8e:44:7c:ea:d9:63:
46:3b:fe:61:3d:ba:94:57:06:58:d7:35:73:aa:dc:33:db:55:
58:7b:be:04:0c:55:43:74:53:b9:3d:f1:41:c2:30:50:62:16:
e4:7c:db:74:d0:7c:02:4e:fd:15:c8:be:72:ef:a2:bb:00:76:
1a:3e:86:1c:03:e6:72:bb:5b:a6:ec:01:e6:64:de:1b:79:9c:
0c:4b:45:00:a0:c4:1b:d8:c1:c8:cd:6d:88:85:11:9c:55:c3:
1a:cf:a5:c5:73:93:5e:fa:a5:2e:b5:77:f4:be:84:77:b8:5e:
47:00:6b:2f:e3:5a:87:45:e5:fe:aa:9a:84:d2:b5:2d:c0:75:
4f:53:98:9f:b5:62:23:b5:f4:f5:e0:bc:5b:70:05:07:40:b7:
17:a0:8c:90:88:4e:36:3c:68:91:fd:52:b6:3b:25:de:74:cb:
10:dc:cf:7e:6e:73:9a:d8:30:1f:42:bf:94:76:84:cc:be:da:
d6:51:d5:b4:72:4c:77:a1:b8:9f:75:45:b2:28:52:13:30:f2:
43:75:af:f0:cc:08:02:11:87:26:91:ca:c3:a9:9e:3e:53:4d:
4d:db:7f:eb:cf:f7:ae:ab:51:c3:d2:3d:58:10:9f:9b:53:a0:
91:d0:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org