Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/dlDWi8XxzOamPPMy3xtznn6n9Wg.roa
File:                     dlDWi8XxzOamPPMy3xtznn6n9Wg.roa (raw, json)
Hash identifier:          Sk3lXIpT5S8bmaSKtIUv8biTwqXKsseBRK+XV3M73CE=
Subject key identifier:   76:50:D6:8B:C5:F1:CC:E6:A6:3C:F3:32:DF:1B:73:9E:7E:A7:F5:68
Certificate issuer:       /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial:       0951
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/dlDWi8XxzOamPPMy3xtznn6n9Wg.roa
Signing time:             Mon 06 Jun 2022 20:06:38 +0000
ROA not before:           Mon 06 Jun 2022 20:06:38 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     138950
IP address blocks:        2404:6380::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2385 (0x951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
        Validity
            Not Before: Jun  6 20:06:38 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=7650D68BC5F1CCE6A63CF332DF1B739E7EA7F568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:0c:3e:2f:50:33:21:12:7b:b3:2c:08:31:
                    48:b6:17:94:08:a8:fe:5d:d6:ef:8e:76:49:bb:54:
                    c0:36:17:28:67:4a:2f:b6:48:7f:93:46:9b:6d:41:
                    3e:36:c3:b7:7a:10:60:21:a2:b8:28:24:dc:2b:3f:
                    54:94:19:22:bd:77:79:4f:54:f4:27:2e:d7:70:de:
                    0b:a3:60:5f:a8:70:ab:4b:61:9f:42:82:c4:c0:cd:
                    19:05:00:87:54:ca:05:44:84:de:27:cc:cb:56:6a:
                    44:12:d4:47:c7:70:65:02:71:13:f6:c5:b5:0c:1a:
                    65:50:fa:0b:f5:9f:d8:60:4b:91:05:f8:61:34:81:
                    c5:82:dc:df:18:e9:55:5e:db:9a:01:7a:69:0a:62:
                    e2:85:2b:f2:66:a7:e5:eb:25:e7:7d:76:69:01:77:
                    95:1a:61:9f:08:55:23:5c:cb:e8:a0:f7:9f:15:73:
                    f9:00:14:d4:e7:f1:cf:8c:fb:f7:5c:2e:6f:14:c7:
                    f9:d8:e7:9d:11:46:8e:61:9a:b9:0b:30:4c:0a:bd:
                    1f:38:66:3e:c5:72:49:ac:73:12:a6:32:1b:f1:2b:
                    0e:4f:ea:2c:26:18:02:1a:e4:38:ed:e9:d5:e5:b4:
                    12:00:90:bc:1d:e6:5a:c9:56:06:ef:48:5a:27:29:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:50:D6:8B:C5:F1:CC:E6:A6:3C:F3:32:DF:1B:73:9E:7E:A7:F5:68
            X509v3 Authority Key Identifier:
                keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/dlDWi8XxzOamPPMy3xtznn6n9Wg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6380::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:85:fb:e9:8c:a7:d4:95:d0:20:7f:24:fc:6f:90:e3:17:eb:
         a7:39:d2:6e:94:db:c5:0d:c0:8d:5c:b0:03:8d:83:0d:34:d0:
         4b:57:d3:2e:ce:b8:8f:47:ac:93:1c:f0:2f:3a:94:2c:66:55:
         d8:cd:1f:0c:7a:c0:64:43:a7:69:3c:5f:2e:08:4b:e1:cd:3b:
         37:4b:67:a2:b4:d1:a1:fa:a8:4c:35:5c:fc:0e:0c:0d:fd:34:
         c0:0d:61:16:92:29:f5:cf:ed:f7:f7:e8:7c:d8:f3:05:03:c0:
         dc:29:b1:e8:58:59:01:9f:ec:7a:7d:51:e7:68:36:94:c6:03:
         6f:24:07:b0:ac:84:7f:4d:ce:a0:29:cb:72:f7:86:f6:27:e1:
         18:98:f3:56:a5:8f:8c:3b:ad:52:83:a3:79:41:52:fc:d3:d9:
         34:ca:41:ea:79:c6:a5:e3:e6:ae:01:b4:12:ed:3c:a5:90:9e:
         f5:7e:a0:fa:0d:2f:9b:b3:c4:b8:c2:7a:47:63:d1:df:2d:11:
         b9:b9:76:f5:f7:85:21:31:14:56:f0:96:02:f5:1e:e3:30:5c:
         63:f0:87:a9:49:61:df:78:ad:94:ca:e3:24:c1:2b:60:40:83:
         88:db:40:e2:a2:4d:1c:31:f1:35:01:e0:c0:ac:f7:4a:01:ce:
         e3:fa:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org