Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/nVpNSXqn43MD2vZW55zfXXmXqLs.roa
File: nVpNSXqn43MD2vZW55zfXXmXqLs.roa (raw, json)
Hash identifier: X+c3n5Un3Hs6bQEAb1bLMDYpA3IDkP+mEe1KtFXOwqE=
Subject key identifier: 9D:5A:4D:49:7A:A7:E3:73:03:DA:F6:56:E7:9C:DF:5D:79:97:A8:BB
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 1020
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/nVpNSXqn43MD2vZW55zfXXmXqLs.roa
Signing time: Fri 19 May 2023 05:53:47 +0000
ROA not before: Fri 19 May 2023 05:53:47 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 138950
IP address blocks: 2404:6380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4128 (0x1020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: May 19 05:53:47 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=9D5A4D497AA7E37303DAF656E79CDF5D7997A8BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:26:bf:6b:7d:ca:ef:4e:6b:6f:f7:d6:77:
bd:fc:c6:a7:94:90:1f:8f:53:97:45:81:ee:51:d6:
3f:90:cd:43:5b:fa:6e:55:9c:37:03:0a:58:16:93:
60:48:97:c7:9c:1c:37:ce:43:81:bc:7e:cd:dc:41:
b1:a4:14:05:94:38:b8:66:ee:20:2b:5d:72:48:5b:
bb:d1:24:8f:a0:9c:9f:1d:45:d1:9f:e5:c2:bf:44:
a8:8a:87:17:93:00:5c:8e:33:7b:19:50:6d:b9:aa:
63:18:f1:bb:d8:45:24:1e:bb:06:99:59:bc:c3:f2:
94:43:8a:8b:31:7e:54:3f:c3:f9:15:8a:df:ce:d2:
33:7d:99:5f:c3:a9:4e:76:c2:ed:cf:cf:d9:73:ed:
cf:d3:b8:88:7c:4c:2a:6e:7e:55:06:f3:a6:85:b0:
b4:71:53:4d:a1:42:0a:b6:08:61:e7:68:fa:c6:5e:
6c:d0:ce:50:3d:41:b3:ed:8c:32:99:f2:5a:ad:95:
af:64:d7:c8:f2:6d:97:17:a6:10:91:d2:9a:a2:85:
5a:4c:e4:f6:59:3e:e4:e2:a9:63:53:4f:8d:45:a2:
35:0d:f0:34:a3:84:97:c6:59:c6:6d:84:9d:1a:4e:
eb:49:b8:c0:a1:8b:09:a8:df:e7:68:80:1a:52:54:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5A:4D:49:7A:A7:E3:73:03:DA:F6:56:E7:9C:DF:5D:79:97:A8:BB
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/nVpNSXqn43MD2vZW55zfXXmXqLs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6380::/32
Signature Algorithm: sha256WithRSAEncryption
84:62:43:b0:11:60:a5:8b:4e:09:c8:62:bf:61:9d:27:dd:09:
d8:a3:76:0f:83:c5:af:5f:ec:9e:ae:da:ed:e1:e8:0b:36:60:
0d:27:c2:0c:a8:17:2f:8f:a0:b0:f4:18:40:51:f9:7e:13:5d:
af:78:71:f4:45:3a:4c:0f:f3:42:c2:ec:07:f7:5c:a5:39:91:
59:0d:74:6a:92:66:49:bb:cc:3e:8f:ea:a6:27:d9:2d:a2:fd:
bd:ba:63:73:bd:31:e5:d2:8d:8a:7b:4f:e0:20:c5:c8:39:28:
e3:0e:cd:ea:b9:b8:a8:ee:a8:bc:66:56:c0:49:44:f2:d9:5f:
6f:f0:c2:47:b4:97:13:7f:6e:93:26:31:fc:1b:53:b4:19:08:
3a:94:10:f4:5a:a4:18:37:f6:c5:3a:30:20:8d:f6:58:7f:73:
b9:00:7c:12:9c:57:f1:c4:7e:ac:af:2b:6b:a5:c3:27:22:03:
1d:ea:f6:93:ff:32:cb:35:f9:ed:ae:01:04:1f:3c:6b:2e:a8:
48:2a:5b:ef:81:05:2f:dd:49:ba:fc:3e:31:cc:97:ab:7d:ac:
05:ea:e3:4e:f6:7d:af:08:fd:5d:61:d9:f7:82:ce:58:be:b2:
c9:43:72:2c:1c:0b:7f:1f:d1:2a:c0:38:05:c1:5b:72:8a:6d:
55:b0:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org