Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/Ik_gVMZ6Aks9WNgmvux3y2jXZO4.roa
File: Ik_gVMZ6Aks9WNgmvux3y2jXZO4.roa (raw, json)
Hash identifier: vd2X5RcT8tS5ax/pyNqjqqHOaioFao+c7xKJquZO58w=
Subject key identifier: 22:4F:E0:54:C6:7A:02:4B:3D:58:D8:26:BE:EC:77:CB:68:D7:64:EE
Certificate issuer: /CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Certificate serial: 08
Authority key identifier: B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/Ik_gVMZ6Aks9WNgmvux3y2jXZO4.roa
Signing time: Thu 27 May 2021 10:25:07 +0000
ROA not before: Thu 27 May 2021 10:25:07 +0000
ROA not after: Fri 27 May 2022 10:21:02 +0000
asID: 138950
IP address blocks: 2404:6380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Validity
Not Before: May 27 10:25:07 2021 GMT
Not After : May 27 10:21:02 2022 GMT
Subject: CN=224FE054C67A024B3D58D826BEEC77CB68D764EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:22:bb:32:ab:19:7a:f7:d8:97:cb:01:5e:
8c:a6:b7:f8:e5:b3:b1:1f:40:dd:52:48:42:30:69:
a0:a2:0e:5b:92:59:a9:52:2a:46:b5:6a:40:78:d2:
d5:e1:29:03:8a:b5:fd:89:88:c1:86:a6:aa:0a:58:
3a:25:ff:fa:06:6e:53:f0:aa:87:df:e6:2d:c3:91:
22:5d:b8:0c:ec:da:9d:bc:ab:72:e9:57:50:f6:86:
a0:92:f1:c4:e2:ce:07:3e:89:dd:2a:76:44:f4:09:
10:c9:54:bf:8e:ad:af:25:7f:50:ca:19:9a:54:ba:
4a:98:4a:d9:0c:50:89:89:9c:e8:26:9b:4a:50:e7:
89:72:2a:57:7d:97:02:35:c6:e4:00:47:29:84:f5:
af:30:22:d5:62:e8:f6:c3:c2:fb:97:d2:63:59:05:
55:ea:1b:a6:9b:94:00:42:b5:fa:4e:91:33:6e:33:
a7:90:e8:ce:3b:3f:76:13:cc:d4:6b:93:24:cb:c0:
b4:75:60:e6:49:f2:4a:a1:64:92:18:e7:bb:9e:6a:
66:92:a8:35:ef:3b:83:bc:63:5e:72:71:4f:d0:f9:
06:3d:dd:b5:cc:7c:4c:a7:e7:cf:ac:d0:4f:1d:7f:
95:06:b7:66:28:a9:d2:75:b4:6a:cb:59:d0:cd:46:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:E0:54:C6:7A:02:4B:3D:58:D8:26:BE:EC:77:CB:68:D7:64:EE
X509v3 Authority Key Identifier:
keyid:B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/Ik_gVMZ6Aks9WNgmvux3y2jXZO4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6380::/32
Signature Algorithm: sha256WithRSAEncryption
33:b0:23:85:23:35:27:81:13:d1:f6:e1:2c:61:15:9a:75:97:
41:3a:13:2f:f1:ea:82:3c:f3:66:38:c7:09:b9:3e:83:68:f9:
85:5d:e0:19:a7:5d:ae:80:2d:83:9b:29:3d:d1:b3:d5:b1:6d:
49:1b:bc:57:c6:d0:4e:23:ad:09:d2:c1:39:e8:87:a5:b1:30:
2b:a2:11:9d:3b:82:97:b0:19:53:ea:8e:a0:0b:b2:04:fa:d4:
fb:67:6f:3e:70:90:bb:9e:2b:41:0d:df:cb:8b:3c:95:9b:0d:
42:ca:ec:11:d9:2f:61:f3:eb:aa:10:f4:3d:98:f4:0f:4c:6a:
ff:16:69:21:3a:c7:b3:9f:85:8f:23:bb:70:9b:58:82:89:cb:
1e:e1:ea:37:8c:9e:e5:dd:bd:b9:2b:a9:6f:f2:e1:d1:0f:ee:
de:c1:c6:9b:b6:21:04:1f:39:cf:d8:dd:8a:04:79:04:63:d7:
c6:3b:40:0e:26:9e:06:3d:55:f8:0b:9d:ed:be:93:30:48:aa:
02:d4:8a:78:d2:23:ce:a0:17:fd:21:eb:0f:55:cd:85:8d:b1:
1a:aa:18:27:b2:d6:f7:b7:b4:2c:f2:81:98:2e:ef:a3:2a:e2:
1b:d1:d4:fd:68:02:16:d8:19:2a:2a:4a:39:64:e0:31:f1:89:
ed:63:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org