Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/pn6TbNhNAFFGVHAXVG0MQs70_Hk.roa
File: pn6TbNhNAFFGVHAXVG0MQs70_Hk.roa (raw, json)
Hash identifier: 95hm3iIzCZXmDe3L7nnL99ebtILM4J55rDc+UY9OpIQ=
Subject key identifier: A6:7E:93:6C:D8:4D:00:51:46:54:70:17:54:6D:0C:42:CE:F4:FC:79
Certificate issuer: /CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Certificate serial: 09
Authority key identifier: B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/pn6TbNhNAFFGVHAXVG0MQs70_Hk.roa
Signing time: Thu 27 May 2021 10:25:07 +0000
ROA not before: Thu 27 May 2021 10:25:07 +0000
ROA not after: Fri 27 May 2022 10:21:02 +0000
asID: 18257
IP address blocks: 2404:6380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Validity
Not Before: May 27 10:25:07 2021 GMT
Not After : May 27 10:21:02 2022 GMT
Subject: CN=A67E936CD84D005146547017546D0C42CEF4FC79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:05:fd:f7:40:b9:35:1c:7f:30:ee:f0:bf:
d2:52:e2:00:26:00:5f:35:c3:00:02:97:51:a6:bc:
94:ff:3c:c1:71:35:ba:8e:3c:e2:80:1a:0c:d6:b0:
7f:20:c9:2c:85:3f:18:a7:d1:c1:3f:5e:3f:82:f8:
76:d8:95:9d:95:c0:4b:5e:44:1f:a7:b3:54:65:e1:
b1:d1:97:b5:6c:6e:33:e2:04:a9:20:e0:34:6d:7a:
e9:4e:5c:21:3c:1a:64:1f:9b:81:93:25:a0:54:64:
0f:73:d4:e6:a7:cc:66:cb:79:0f:d8:d1:2d:89:26:
5f:94:0f:87:54:dc:53:7c:b9:e2:ec:25:0f:af:2f:
e2:67:1e:0d:1d:55:5b:16:c2:25:8c:ef:8d:c0:f0:
38:82:1a:06:58:da:28:7e:ce:e1:13:e3:61:33:d6:
4f:0d:0f:a1:44:bd:a2:09:99:1a:0d:92:12:e4:d1:
eb:53:28:bc:13:6f:fa:6c:c3:a9:ea:ce:0d:22:ca:
14:24:5c:42:e4:9d:3d:07:96:95:a4:d0:55:d1:f7:
8a:0e:65:d7:0f:0c:fd:d8:67:0b:d1:ba:f5:ce:c8:
80:33:0e:b6:dd:81:7a:17:a1:b3:14:70:eb:e4:f6:
28:e5:48:10:9f:6c:5e:5b:10:22:8a:49:8c:29:47:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7E:93:6C:D8:4D:00:51:46:54:70:17:54:6D:0C:42:CE:F4:FC:79
X509v3 Authority Key Identifier:
keyid:B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/pn6TbNhNAFFGVHAXVG0MQs70_Hk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6380::/32
Signature Algorithm: sha256WithRSAEncryption
a0:5d:86:24:96:75:40:f6:17:f8:03:b7:de:41:07:4f:a0:b2:
83:fd:c8:db:54:e7:34:ce:b4:a6:35:f4:30:5e:58:9c:70:c2:
8b:52:13:79:f8:06:18:0b:59:a6:c9:90:97:d3:02:e2:30:ba:
e5:24:5a:98:6c:20:d6:88:3c:93:98:e5:2c:ca:48:50:d5:cb:
a1:0d:4b:8e:84:3f:d5:ec:6d:23:ec:c3:f3:e2:d7:7d:61:99:
70:87:75:fc:8e:fa:a6:a4:4e:6f:8f:eb:39:4b:48:5f:20:7a:
0f:6e:c6:13:6e:c4:17:7d:9f:45:f5:51:64:55:bf:57:da:13:
6a:4d:94:60:be:12:15:2c:c6:1e:f7:81:5b:78:4b:d0:7c:1a:
5e:24:f3:ce:1d:09:2a:52:d2:fe:3d:fb:4e:d8:9e:3f:b1:44:
15:2a:3f:c5:c9:50:5b:90:39:fc:7b:d4:a0:dd:ed:97:b3:8c:
d7:7d:82:d6:b3:6c:20:3a:7a:10:28:4d:13:df:c6:eb:ff:de:
25:eb:26:4e:81:8e:e4:d9:f5:38:74:2a:76:d2:e9:98:2a:13:
21:36:9c:0d:ab:2e:4a:59:a9:20:4f:fe:1b:92:e6:f5:2e:4d:
4a:ba:7c:31:54:09:13:de:9b:31:8d:06:a1:1a:74:34:d8:40:
99:6a:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org