Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/u9N1vXzcjlnARX6tlw5rqcrYSvo.roa
File: u9N1vXzcjlnARX6tlw5rqcrYSvo.roa (raw, json)
Hash identifier: 2MudVbfQrLH5YXpiZn2mj/J8OV0WrYGxWzcSHhhpi6M=
Subject key identifier: BB:D3:75:BD:7C:DC:8E:59:C0:45:7E:AD:97:0E:6B:A9:CA:D8:4A:FA
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 0952
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/u9N1vXzcjlnARX6tlw5rqcrYSvo.roa
Signing time: Mon 06 Jun 2022 20:06:39 +0000
ROA not before: Mon 06 Jun 2022 20:06:39 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 18257
IP address blocks: 2404:6380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jun 6 20:06:39 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=BBD375BD7CDC8E59C0457EAD970E6BA9CAD84AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:a3:7d:79:1a:9e:9f:20:3a:02:03:cb:59:
54:e3:6a:49:ce:cb:36:e0:2e:ba:78:1f:6a:d0:a7:
7c:53:67:6f:61:79:a0:df:e5:4a:7c:99:94:dc:c2:
06:35:16:2d:33:a0:ae:67:fc:11:da:42:95:8f:42:
d8:97:af:ad:bf:2b:e0:90:69:7d:de:9c:aa:02:1d:
a3:f2:15:d5:13:36:b8:ab:64:a9:d9:24:c6:5a:1d:
3e:c0:9c:c7:51:30:ad:90:cf:3c:df:28:56:5e:ed:
a5:95:4a:b6:50:80:01:b4:63:48:6b:e9:8f:d3:11:
86:4b:b0:41:73:ea:ef:c5:e9:c7:24:36:a5:d1:b7:
a5:52:8f:47:91:6e:39:4e:dd:dd:c8:e4:67:d4:49:
56:76:76:15:6d:36:ab:f0:26:e7:56:79:7e:34:cb:
5b:29:63:15:75:d4:75:4a:0b:e8:75:73:cd:a8:34:
43:73:f7:37:e4:30:fb:fb:2d:7d:a4:b5:f6:66:49:
71:ba:b7:e4:f0:39:85:91:1b:6d:37:7c:fe:bc:40:
55:fb:86:8d:17:87:6c:72:e1:9e:99:43:68:8d:7a:
5c:5f:14:0d:94:3f:36:5f:cc:82:61:49:16:3b:a9:
06:24:90:5a:97:ae:b6:86:cc:71:a2:dc:3a:c9:8e:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:75:BD:7C:DC:8E:59:C0:45:7E:AD:97:0E:6B:A9:CA:D8:4A:FA
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/u9N1vXzcjlnARX6tlw5rqcrYSvo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6380::/32
Signature Algorithm: sha256WithRSAEncryption
ae:48:27:c8:d5:63:ac:fb:85:76:77:72:07:aa:c7:78:32:12:
d3:91:a9:07:3a:9b:46:29:1c:09:f5:58:98:6c:de:02:f6:34:
9c:77:af:96:bd:93:51:14:d4:df:5c:78:cf:94:4c:66:3f:19:
cc:4a:45:72:36:68:af:b8:d3:2d:7a:34:53:0e:44:4e:57:9d:
2c:26:d7:c5:c7:e1:17:9c:8f:2e:b6:94:7b:4f:03:a8:25:ab:
7c:70:2c:2d:76:d4:eb:af:e6:1f:47:71:9b:cd:b6:1d:10:96:
bb:28:af:71:e9:d7:6d:df:df:dd:13:c7:9e:84:4a:9b:7e:ca:
94:ab:87:3f:9b:02:50:6b:ec:f2:75:9e:80:af:ba:4f:57:a7:
5f:fe:0e:1b:45:46:d2:24:1a:af:a6:f0:fa:47:f3:65:cd:09:
8f:95:a7:db:05:33:c8:ae:31:ae:41:de:4e:90:7a:cd:35:82:
fa:17:20:16:81:71:7d:f8:62:88:98:55:f0:85:12:87:e7:ee:
ba:38:e4:00:0c:df:a6:ae:90:fd:90:4a:ed:75:07:2d:c6:ea:
27:29:81:3f:61:4a:bc:d4:3b:a7:2b:0e:a4:47:34:1f:c6:b6:
97:42:ba:db:1b:d9:16:45:0a:b8:22:66:62:e7:36:32:b2:29:
f6:1a:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org