Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/iUq4CDML6IBwcELxEntpEasiuXU.roa
File: iUq4CDML6IBwcELxEntpEasiuXU.roa (raw, json)
Hash identifier: DdmLWAWZ8aKhKxS+4PbKAokKewCuR45p8bB+BOt7smk=
Subject key identifier: 89:4A:B8:08:33:0B:E8:80:70:70:42:F1:12:7B:69:11:AB:22:B9:75
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 1021
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/iUq4CDML6IBwcELxEntpEasiuXU.roa
Signing time: Fri 19 May 2023 05:53:47 +0000
ROA not before: Fri 19 May 2023 05:53:47 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 18257
IP address blocks: 2404:6380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4129 (0x1021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: May 19 05:53:47 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=894AB808330BE880707042F1127B6911AB22B975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:94:38:ca:a3:7d:49:63:29:0e:4b:2b:f3:
d0:0a:10:da:da:68:8c:a9:3d:be:56:23:6d:ee:e1:
54:9f:c5:cb:bc:ba:ab:68:92:9c:fb:34:39:1a:15:
a7:f7:f2:31:a6:ca:54:82:e8:0d:93:c0:88:3f:4f:
78:93:7f:e1:33:e9:6a:88:6e:d6:d3:55:54:0b:37:
ec:42:f2:5e:0a:2a:80:0f:3a:6b:60:e4:64:42:73:
f6:4d:d2:72:3c:ca:33:31:65:7b:1a:d7:44:fc:ba:
3d:a7:49:b2:69:6d:8d:d5:60:40:f7:ec:2d:e1:1e:
c2:4b:e2:a6:9b:ca:bc:92:0b:fd:99:c7:d6:52:29:
1e:e4:78:9f:1c:b5:e0:b2:69:bd:19:51:8b:67:ef:
c6:d4:f4:3f:6d:ab:56:b8:bd:33:f5:18:36:9f:dc:
97:a7:da:9c:0a:53:ba:83:73:eb:03:fa:12:3f:8c:
1e:ef:a4:66:96:e1:ac:92:1f:a3:11:54:94:19:1c:
77:68:34:08:f5:49:97:ec:0f:65:0e:a6:56:6f:4a:
d9:a4:5a:de:a4:08:f2:44:59:97:5f:8e:67:a4:5f:
37:6b:74:a5:bb:ef:25:c0:b1:cf:07:8b:23:62:cb:
8e:d6:6f:2e:98:18:56:0f:93:60:1c:99:19:ca:01:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:B8:08:33:0B:E8:80:70:70:42:F1:12:7B:69:11:AB:22:B9:75
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/iUq4CDML6IBwcELxEntpEasiuXU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6380::/32
Signature Algorithm: sha256WithRSAEncryption
7c:31:c3:20:bd:8e:03:ae:ad:c2:c4:d1:0d:cd:f6:09:54:0d:
2b:42:f9:9f:a7:41:9c:cf:d6:47:fe:5a:84:6d:90:b3:42:76:
94:77:9b:2b:eb:eb:56:9b:7f:3b:c8:3b:27:95:75:7e:d4:df:
4f:f3:a2:00:65:51:97:f2:8a:11:cb:af:9f:d6:98:cb:f7:d7:
ef:b6:29:83:b5:25:67:0f:38:3b:8f:78:58:13:ce:59:4d:4e:
97:00:4f:50:60:76:e0:04:5c:c3:b3:1b:d8:40:4c:b6:87:8c:
8c:2a:17:24:6f:b9:ce:ea:31:29:77:e7:79:63:a3:d1:2f:c8:
49:76:71:27:41:b7:c4:7d:81:42:62:85:eb:4a:6e:da:36:f1:
12:08:27:53:94:3d:4d:66:a0:60:cd:7b:05:da:31:d5:10:ab:
59:25:ba:44:5e:dd:67:ee:93:0b:8c:f0:47:50:af:35:de:d6:
d5:4f:f7:4e:45:4e:6d:98:2c:7b:3e:1c:18:8f:c3:46:43:57:
91:ed:de:e8:ee:64:f6:ad:04:11:09:a9:0c:7d:a1:32:da:5f:
49:0a:0b:5e:54:df:58:53:72:e6:aa:8e:44:c7:f4:61:f4:b9:
5d:56:86:ce:5c:41:22:b6:18:ca:21:ea:50:b2:16:77:ca:2c:
53:bc:2c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org