Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/233/GLCVlrtgNgPhQ67HSXubAI5sGLg.roa
File: GLCVlrtgNgPhQ67HSXubAI5sGLg.roa (raw, json)
Hash identifier: 0wjRROcm9M/A2oBBixi9yE5m/kCnVaMsPgdh+SE7RYU=
Subject key identifier: 18:B0:95:96:BB:60:36:03:E1:43:AE:C7:49:7B:9B:00:8E:6C:18:B8
Certificate issuer: /CN=DAD7AD4765DB70EA858F18178181F83B0F2CFCAA
Certificate serial: 0B50
Authority key identifier: DA:D7:AD:47:65:DB:70:EA:85:8F:18:17:81:81:F8:3B:0F:2C:FC:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2tetR2XbcOqFjxgXgYH4Ow8s_Ko.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/GLCVlrtgNgPhQ67HSXubAI5sGLg.roa
Signing time: Thu 17 Feb 2022 05:27:35 +0000
ROA not before: Thu 17 Feb 2022 05:27:35 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 7468
IP address blocks: 2401:2a00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2896 (0xb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAD7AD4765DB70EA858F18178181F83B0F2CFCAA
Validity
Not Before: Feb 17 05:27:35 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=18B09596BB603603E143AEC7497B9B008E6C18B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:33:34:10:83:d2:2c:32:fc:65:6f:42:b5:2c:
56:5e:60:af:0d:79:7a:08:c5:25:19:a8:f8:8b:cf:
cb:2f:bf:42:a5:35:c3:10:d9:26:35:fd:ee:a4:c8:
19:92:d0:65:8d:25:53:22:68:c1:98:3a:5c:5f:26:
5a:21:3d:83:3c:ce:09:6d:46:4f:15:96:be:3a:cf:
56:e2:a6:81:31:33:67:08:5b:a1:0d:50:4d:ab:f4:
e2:0c:4b:d4:b9:99:61:60:8c:ff:68:ef:67:20:fc:
00:88:21:cb:05:a8:18:6d:75:c9:c0:f0:b1:df:27:
ab:d6:5b:04:c3:10:24:a5:2d:c8:30:37:89:23:b2:
83:5f:a4:c8:f5:19:7d:db:a5:86:0f:3a:f7:f6:17:
94:39:17:07:ac:30:90:af:1f:78:6a:29:f2:e6:82:
ae:4d:dd:6c:39:38:09:13:4c:19:bc:45:2a:17:d4:
be:4b:d3:dc:e3:75:c7:85:8d:9d:eb:e7:3a:9e:62:
d5:f8:0a:03:ce:4d:bd:db:86:8f:4d:1f:84:d6:a5:
d4:19:31:86:5a:e2:69:c8:59:e4:c8:33:01:fc:4f:
05:f7:93:d7:71:ee:b2:53:8f:a9:14:64:9a:2e:78:
ed:73:41:4d:57:61:c2:32:7c:d0:2c:51:8f:80:29:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:95:96:BB:60:36:03:E1:43:AE:C7:49:7B:9B:00:8E:6C:18:B8
X509v3 Authority Key Identifier:
keyid:DA:D7:AD:47:65:DB:70:EA:85:8F:18:17:81:81:F8:3B:0F:2C:FC:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/2tetR2XbcOqFjxgXgYH4Ow8s_Ko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2tetR2XbcOqFjxgXgYH4Ow8s_Ko.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/GLCVlrtgNgPhQ67HSXubAI5sGLg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:2a00::/32
Signature Algorithm: sha256WithRSAEncryption
90:3b:af:59:58:48:3a:5b:9f:6d:15:85:25:a4:cf:15:c6:b1:
08:76:e2:2f:33:a3:32:60:32:1b:8f:de:12:1e:1d:80:b2:29:
53:69:2c:fd:8d:13:95:25:5c:6a:90:26:b4:9e:96:93:df:c4:
5b:5a:71:f2:56:b9:da:74:e0:99:a0:43:1c:11:21:66:74:b4:
b9:a4:b1:9d:5f:ba:07:3a:07:6f:e1:0d:62:d7:65:fd:19:0b:
4c:ac:b1:2a:01:96:8a:a0:15:98:dd:42:43:df:b3:82:56:53:
e8:d3:12:ec:e7:b1:d6:98:25:48:63:c9:b0:31:c8:4b:1d:8f:
0c:fb:ee:09:de:df:d6:f6:6f:03:dd:2d:00:15:41:ff:30:26:
94:1c:54:c0:cb:8d:6f:bc:a1:5f:8f:d0:e3:f7:e6:97:0f:0a:
50:e1:1d:76:44:90:6f:f5:0c:10:0c:49:f5:0b:26:02:2d:a0:
ce:59:21:8c:51:e7:c4:74:10:f2:2d:f5:c2:87:56:b8:93:03:
e4:d8:a9:df:20:b6:41:70:8b:96:99:b7:df:48:dc:48:b9:77:
16:59:cc:57:ee:ca:9b:07:3f:df:60:54:eb:21:e4:a5:15:01:
16:ff:1b:0e:ce:f8:d5:85:a9:36:8b:08:b8:58:75:68:d6:1a:
34:37:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org