Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/y2xBEUb4EizEYg5MJCpX3APSqs8.roa
File: y2xBEUb4EizEYg5MJCpX3APSqs8.roa (raw, json)
Hash identifier: xXKcvrsfnTLOgDLmwwO5VWaHoYom+FM3kSyvj129Bs0=
Subject key identifier: CB:6C:41:11:46:F8:12:2C:C4:62:0E:4C:24:2A:57:DC:03:D2:AA:CF
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 0940
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/y2xBEUb4EizEYg5MJCpX3APSqs8.roa
Signing time: Tue 07 Jun 2022 02:14:34 +0000
ROA not before: Tue 07 Jun 2022 02:14:34 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 24362
IP address blocks: 2400:b600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Jun 7 02:14:34 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=CB6C411146F8122CC4620E4C242A57DC03D2AACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:73:31:65:15:48:ce:4e:50:07:5c:5b:43:
26:3d:96:5a:49:6c:b2:30:cd:c5:9a:5e:1f:27:e4:
41:e3:35:6a:5b:a3:cb:f4:01:76:09:d8:e1:e7:3b:
88:93:bf:48:63:e0:2a:cb:1c:a0:f4:e2:fc:19:b6:
12:b2:50:1b:19:e3:00:02:78:be:d3:6d:15:3c:c3:
61:a3:be:dc:dc:7f:c5:58:21:b8:c9:91:09:4c:aa:
4b:64:15:e8:69:0a:cb:fe:d0:b7:10:8a:0c:56:08:
b7:97:82:11:00:16:84:61:54:83:b7:b1:76:85:8f:
f4:91:47:e7:c3:1b:b7:dd:2d:49:24:aa:10:59:27:
5a:5a:4d:aa:9c:10:93:a9:64:58:07:c1:d1:11:b4:
94:af:80:85:2b:a8:ca:10:87:3f:e5:82:de:34:e7:
fa:36:ff:24:27:de:ee:d8:73:52:0f:72:3c:8a:22:
6a:ae:75:d8:25:89:2c:f2:c2:79:3e:bf:df:37:68:
f9:d6:92:b9:c5:e1:ce:ed:64:28:50:22:d6:6c:d6:
b4:8b:8c:f2:0e:59:d6:bc:ee:20:75:67:14:a5:d5:
41:59:16:57:61:ec:60:18:1d:16:90:ff:1e:19:cb:
a5:c2:61:18:90:24:83:a9:e3:b9:d8:92:73:cb:21:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6C:41:11:46:F8:12:2C:C4:62:0E:4C:24:2A:57:DC:03:D2:AA:CF
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/y2xBEUb4EizEYg5MJCpX3APSqs8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:b600::/32
Signature Algorithm: sha256WithRSAEncryption
6e:46:56:e8:67:60:fd:f7:7f:e1:1c:5a:a3:ba:d5:de:a3:62:
ce:7e:a6:86:92:ad:bd:45:3c:a2:bc:42:b2:28:54:dd:89:4a:
cb:b0:7c:35:8b:b8:28:d0:09:39:b5:d6:e1:c5:19:7f:ad:ae:
fb:80:42:2c:f1:ac:cd:b4:b5:cb:3c:1e:ad:61:09:f5:43:39:
7c:21:43:04:fb:4f:31:15:10:49:1f:86:67:50:21:d2:78:f0:
8b:01:d3:41:0d:7d:83:3e:d6:97:7f:5b:a5:18:a6:bc:9a:ab:
a7:b5:54:6f:d5:5c:d8:90:4f:a0:eb:a2:eb:db:ed:32:81:23:
70:13:e9:31:04:91:45:b9:9e:b2:6c:21:0d:51:2a:7a:e2:60:
fa:d7:2c:ee:d5:b3:95:5b:4e:8b:2e:09:11:f5:f1:fb:53:12:
f4:f6:41:26:f5:97:ae:bf:2c:8c:19:af:15:94:fc:86:33:e0:
d2:46:c1:52:28:ae:8c:73:5b:60:ae:d1:35:c8:44:87:11:c4:
8f:bf:ff:7d:70:48:f1:37:c1:74:60:96:5b:89:da:1a:00:8b:
99:e7:d7:73:23:59:1d:3b:5a:e7:64:b8:cd:ed:4b:02:00:34:
c5:ff:42:dc:01:68:98:4f:87:a6:ec:87:ca:69:e2:87:be:a6:
af:31:0b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org