Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/gcW3l5ZaMhoq_AHqDCztjnLZbu4.roa
File: gcW3l5ZaMhoq_AHqDCztjnLZbu4.roa (raw, json)
Hash identifier: AEgkqmZBi38dhFkxX0dE9nRThRkULsU6GbumabhgVqU=
Subject key identifier: 81:C5:B7:97:96:5A:32:1A:2A:FC:01:EA:0C:2C:ED:8E:72:D9:6E:EE
Certificate issuer: /CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Certificate serial: 06
Authority key identifier: B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/gcW3l5ZaMhoq_AHqDCztjnLZbu4.roa
Signing time: Thu 27 May 2021 10:25:06 +0000
ROA not before: Thu 27 May 2021 10:25:06 +0000
ROA not after: Fri 27 May 2022 10:21:02 +0000
asID: 23650
IP address blocks: 2404:6380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Validity
Not Before: May 27 10:25:06 2021 GMT
Not After : May 27 10:21:02 2022 GMT
Subject: CN=81C5B797965A321A2AFC01EA0C2CED8E72D96EEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:09:85:6f:21:36:19:14:71:2d:b4:08:cf:
7e:de:ca:77:41:22:e9:05:ba:ca:04:76:0c:00:4a:
2a:5c:ca:00:3c:b8:75:ae:49:98:77:99:97:02:9d:
9c:cb:f7:ef:79:e8:8f:91:e4:b9:c7:ea:67:cb:b4:
a0:53:c1:57:b5:f6:f2:cd:5a:20:95:86:54:a6:92:
5e:bd:67:70:b8:51:8c:73:ab:39:b3:15:2f:94:d3:
8d:1e:d9:e3:67:5b:78:87:b4:58:36:7e:0c:af:0b:
b7:c5:c2:4a:7a:ba:1b:27:72:56:8d:53:04:3f:06:
b4:ac:1e:27:e7:96:6a:88:49:38:f3:ad:db:b5:54:
8a:24:8c:04:22:25:4b:92:dd:37:d4:ac:d2:8b:08:
8f:e1:42:58:c4:65:b1:49:d9:6e:f0:e3:cc:03:8f:
4a:26:67:ec:b3:46:3a:c2:1d:3a:3d:9f:76:5d:d5:
a6:84:41:61:55:34:87:f8:e7:cc:59:6e:25:73:df:
1d:6a:72:be:9b:f6:6b:fd:7a:15:3b:19:07:cb:7b:
28:fa:ed:9e:5b:44:26:57:41:f0:d4:a9:40:2b:d2:
d2:11:f5:b7:d6:0f:ee:27:e4:df:75:f6:41:c9:73:
8c:66:86:d1:2a:b0:f6:7f:ee:57:4d:b5:05:80:da:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C5:B7:97:96:5A:32:1A:2A:FC:01:EA:0C:2C:ED:8E:72:D9:6E:EE
X509v3 Authority Key Identifier:
keyid:B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/gcW3l5ZaMhoq_AHqDCztjnLZbu4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6380::/32
Signature Algorithm: sha256WithRSAEncryption
5c:4c:d2:c5:69:99:07:1d:1b:f4:71:08:b7:8c:26:de:62:d5:
89:06:79:3e:ef:fd:eb:06:58:b7:a9:1c:e3:68:23:a3:d6:8b:
4b:04:c8:67:2b:17:af:d9:8f:ed:e2:bd:7f:2f:fd:ba:44:c4:
d5:cd:0d:43:e6:00:89:ee:b6:e8:81:62:0f:19:d3:38:2e:30:
c0:37:4e:78:23:0f:0f:06:cf:ba:09:b0:6a:47:87:5a:ce:9f:
b3:d1:79:9b:88:81:24:57:bc:18:70:03:52:ca:01:00:d9:b3:
1b:94:ca:44:a8:cd:58:87:23:76:93:87:b6:0c:a6:3c:65:ac:
12:94:7f:f7:24:52:86:ac:78:b8:df:39:4f:0b:7a:de:74:ff:
01:7e:52:bb:71:57:8e:8e:dd:af:4a:d3:f0:56:f5:cd:9c:9a:
7e:17:85:85:a6:2c:b5:07:81:65:e6:d9:75:02:cf:cc:f7:72:
f1:a4:0f:87:76:ad:13:7e:74:ea:15:c1:4a:aa:69:26:38:82:
b1:3f:7c:17:93:61:30:af:11:69:3f:c6:83:f3:3a:85:ff:10:
bb:3a:2b:b4:45:56:84:92:d2:99:3a:87:4f:1b:d3:7f:0c:f1:
71:ab:80:6c:04:38:bb:18:e4:91:40:c7:fe:48:9b:5a:be:78:
c1:02:28:b6
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMUVE
Qjk0RjE5REZBMTc3MDJDNTkxMTMxRDM1RUNGQjE3Q0NEMkQ5MB4XDTIxMDUyNzEw
MjUwNloXDTIyMDUyNzEwMjEwMlowMzExMC8GA1UEAxMoODFDNUI3OTc5NjVBMzIx
QTJBRkMwMUVBMEMyQ0VEOEU3MkQ5NkVFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKnACYVvITYZFHEttAjPft7Kd0Ei6QW6ygR2DABKKlzKADy4da5J
mHeZlwKdnMv373noj5HkucfqZ8u0oFPBV7X28s1aIJWGVKaSXr1ncLhRjHOrObMV
L5TTjR7Z42dbeIe0WDZ+DK8Lt8XCSnq6GydyVo1TBD8GtKweJ+eWaohJOPOt27VU
iiSMBCIlS5LdN9Ss0osIj+FCWMRlsUnZbvDjzAOPSiZn7LNGOsIdOj2fdl3VpoRB
YVU0h/jnzFluJXPfHWpyvpv2a/16FTsZB8t7KPrtnltEJldB8NSpQCvS0hH1t9YP
7ifk33X2QclzjGaG0Sqw9n/uV021BYDaSa8CAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBSBxbeXlloyGir8AeoMLO2Octlu7jAfBgNVHSMEGDAWgBSx7blPGd+hdwLFkRMd
Nez7F8zS2TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMzI5
L3NlMjVUeG5mb1hjQ3haRVRIVFhzLXhmTTB0ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvc2UyNVR4bmZvWGNDeFpFVEhUWHMteGZNMHRrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMyOS9nY1czbDVaYU1ob3Ff
QUhxREN6dGpuTFpidTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJARjgDANBgkqhkiG9w0BAQsFAAOCAQEAXEzSxWmZBx0b9HEIt4wm3mLViQZ5
Pu/96wZYt6kc42gjo9aLSwTIZysXr9mP7eK9fy/9ukTE1c0NQ+YAie626IFiDxnT
OC4wwDdOeCMPDwbPugmwakeHWs6fs9F5m4iBJFe8GHADUsoBANmzG5TKRKjNWIcj
dpOHtgymPGWsEpR/9yRShqx4uN85Twt63nT/AX5Su3FXjo7dr0rT8Fb1zZyafheF
haYstQeBZebZdQLPzPdy8aQPh3atE3506hXBSqppJjiCsT98F5NhMK8RaT/Gg/M6
hf8QuzortEVWhJLSmTqHTxvTfwzxcauAbAQ4uxjkkUDH/kibWr54wQIotg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org