Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/QwyzpQFNZC1KXRGH2j96zmv7IFI.roa
File: QwyzpQFNZC1KXRGH2j96zmv7IFI.roa (raw, json)
Hash identifier: fw9CcZdWwjvUTXk7p3LlRXJyDbtu3zlssK+YW2ymwDo=
Subject key identifier: 43:0C:B3:A5:01:4D:64:2D:4A:5D:11:87:DA:3F:7A:CE:6B:FB:20:52
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 101E
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/QwyzpQFNZC1KXRGH2j96zmv7IFI.roa
Signing time: Fri 19 May 2023 05:53:46 +0000
ROA not before: Fri 19 May 2023 05:53:46 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 23650
IP address blocks: 2404:6380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4126 (0x101e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: May 19 05:53:46 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=430CB3A5014D642D4A5D1187DA3F7ACE6BFB2052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:01:fb:ff:66:e8:08:95:85:c0:d5:ab:0e:
eb:6e:4f:29:16:14:13:86:cb:31:29:b7:d4:bd:a8:
e8:b1:12:4d:dd:41:76:3d:52:0b:e8:1a:2e:00:0e:
b6:83:e1:eb:81:f6:0f:1b:12:1c:48:7f:1a:cf:82:
64:48:26:6b:a3:b1:eb:81:e5:26:3a:9d:07:a9:0e:
40:eb:2b:f3:f0:0d:2d:36:58:ef:e2:aa:78:09:1e:
46:02:3d:0e:8f:d1:5d:b3:d5:0b:54:ba:b6:ab:d0:
7d:67:4b:45:66:9b:8a:dc:15:2a:39:ca:ae:b3:85:
18:9d:a9:33:ff:40:07:71:88:f9:b7:17:c6:5e:9e:
61:06:de:bd:3f:31:54:a4:79:a6:d9:ee:56:90:ad:
af:a4:69:a4:4c:0c:77:73:b8:72:f2:69:20:8a:55:
14:cc:a6:48:c0:41:dc:33:7a:f7:a3:0c:78:a7:50:
2a:cb:f9:14:93:af:4f:62:c2:1b:6d:fa:94:f0:90:
60:0b:0d:58:8b:c9:de:66:53:ba:0c:2c:6f:b9:b8:
be:93:02:18:d9:fe:70:ee:84:03:d2:09:c3:66:b9:
da:9c:fa:aa:3e:a4:fa:e8:e1:88:fd:5b:f9:45:84:
4d:23:72:63:b7:5c:1b:77:54:93:1a:06:ad:bf:bd:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:B3:A5:01:4D:64:2D:4A:5D:11:87:DA:3F:7A:CE:6B:FB:20:52
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/QwyzpQFNZC1KXRGH2j96zmv7IFI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6380::/32
Signature Algorithm: sha256WithRSAEncryption
2c:01:35:70:5c:aa:60:5a:41:46:88:03:f7:c6:18:4e:c1:b2:
fd:e4:50:a0:59:43:74:20:da:9b:ed:c0:63:b7:f7:88:13:89:
a5:6e:80:bb:d9:02:6f:6f:c5:81:9a:26:77:5c:a2:6d:1f:c3:
f5:4f:c2:b6:c4:71:95:af:c4:bb:81:cb:90:ca:d3:3c:46:e4:
85:c2:db:b4:7b:21:ff:eb:b2:5f:11:33:5e:cf:4a:9b:b5:06:
e9:2f:ee:af:42:d1:2b:47:d7:f8:90:63:7a:35:2c:39:be:c6:
77:49:2d:79:53:08:60:f1:ec:39:1a:cf:83:2e:08:8b:9b:f4:
d3:0f:c2:15:d0:58:a6:c6:30:d3:29:e2:d7:7e:af:82:c4:1c:
ee:3a:5e:f4:54:3a:04:d6:ab:5f:56:98:e9:34:55:55:0f:8c:
7f:a8:28:d8:35:ff:68:7b:79:ba:1c:4f:d7:30:e1:e0:58:19:
e8:d7:72:d6:04:3e:4e:1b:e0:31:cf:07:68:49:93:5a:35:1d:
cc:1e:b0:5b:1e:19:e6:b7:69:c2:af:80:66:95:be:01:28:5f:
01:79:93:d2:c1:18:55:28:00:bf:c7:91:6d:21:8b:8d:24:4d:
5f:81:c9:a8:0f:59:f1:3e:c8:93:0b:57:43:0f:9b:a7:88:95:
1a:70:1d:e7
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICEB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx
MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yMzA1MTkw
NTUzNDZaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDQzMENCM0E1MDE0RDY0
MkQ0QTVEMTE4N0RBM0Y3QUNFNkJGQjIwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFwQH7/2boCJWFwNWrDutuTykWFBOGyzEpt9S9qOixEk3dQXY9
UgvoGi4ADraD4euB9g8bEhxIfxrPgmRIJmujseuB5SY6nQepDkDrK/PwDS02WO/i
qngJHkYCPQ6P0V2z1QtUurar0H1nS0Vmm4rcFSo5yq6zhRidqTP/QAdxiPm3F8Ze
nmEG3r0/MVSkeabZ7laQra+kaaRMDHdzuHLyaSCKVRTMpkjAQdwzevejDHinUCrL
+RSTr09iwhtt+pTwkGALDViLyd5mU7oMLG+5uL6TAhjZ/nDuhAPSCcNmudqc+qo+
pPro4Yj9W/lFhE0jcmO3XBt3VJMaBq2/vW03AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUQwyzpQFNZC1KXRGH2j96zmv7IFIwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ
+wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy
OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvUXd5enBRRk5aQzFL
WFJHSDJqOTZ6bXY3SUZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQEY4AwDQYJKoZIhvcNAQELBQADggEBACwBNXBcqmBaQUaIA/fGGE7Bsv3k
UKBZQ3Qg2pvtwGO394gTiaVugLvZAm9vxYGaJndcom0fw/VPwrbEcZWvxLuBy5DK
0zxG5IXC27R7If/rsl8RM17PSpu1Bukv7q9C0StH1/iQY3o1LDm+xndJLXlTCGDx
7Dkaz4MuCIub9NMPwhXQWKbGMNMp4td+r4LEHO46XvRUOgTWq19WmOk0VVUPjH+o
KNg1/2h7ebocT9cw4eBYGejXctYEPk4b4DHPB2hJk1o1HcwesFseGea3acKvgGaV
vgEoXwF5k9LBGFUoAL/HkW0hi40kTV+ByagPWfE+yJMLV0MPm6eIlRpwHec=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org