Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/HD6HjHIDemvT0WsxqJkKhFP6U70.roa
File: HD6HjHIDemvT0WsxqJkKhFP6U70.roa (raw, json)
Hash identifier: 4cqz/xEjK+f3VTj1umD3PlYS6aw4XHIO/xK31f+rPak=
Subject key identifier: 1C:3E:87:8C:72:03:7A:6B:D3:D1:6B:31:A8:99:0A:84:53:FA:53:BD
Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Certificate serial: 0939
Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/HD6HjHIDemvT0WsxqJkKhFP6U70.roa
Signing time: Mon 06 Jun 2022 20:07:59 +0000
ROA not before: Mon 06 Jun 2022 20:07:59 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 131567
IP address blocks: 2401:7240::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2361 (0x939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Validity
Not Before: Jun 6 20:07:59 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=1C3E878C72037A6BD3D16B31A8990A8453FA53BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:62:35:75:d7:0c:4d:10:a6:7f:48:86:14:
72:77:a3:c5:ec:57:76:f8:57:c4:45:43:ac:82:de:
e6:64:81:b9:46:7f:cf:a5:d2:32:91:0a:6a:c0:50:
55:83:10:80:ad:7e:c9:c3:35:82:8f:c5:98:1f:3c:
14:38:4e:45:d0:e7:b6:46:59:62:85:c9:b4:07:c3:
49:8d:cc:4a:2b:2b:e6:f3:05:df:2f:1c:66:62:c9:
ad:82:fe:4e:58:05:fc:f8:88:44:bd:76:73:5f:bc:
0e:2c:ec:97:78:26:3d:9a:92:cc:7b:79:56:25:fa:
f3:4d:a6:f3:4c:2c:c3:50:62:7a:af:3d:9e:69:2a:
38:b9:82:26:32:33:b2:17:35:df:b3:5d:9e:b5:7f:
29:56:f3:60:0b:b5:11:6b:6e:6c:03:a0:c5:26:b6:
e9:98:41:7c:2c:00:22:6e:72:fc:da:a9:d3:63:72:
28:89:a8:f1:c7:d4:87:3d:5d:65:43:ad:2a:3e:30:
7b:8f:1f:81:38:e5:56:ac:b4:41:f6:12:df:ff:34:
13:a2:f7:57:87:7b:26:77:a0:61:ee:cd:bf:a9:ed:
67:b2:b9:cd:74:57:fe:18:e6:52:b8:b6:3b:a9:3c:
88:0d:56:63:72:1e:da:3b:62:24:6a:09:a5:7d:5b:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3E:87:8C:72:03:7A:6B:D3:D1:6B:31:A8:99:0A:84:53:FA:53:BD
X509v3 Authority Key Identifier:
keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/HD6HjHIDemvT0WsxqJkKhFP6U70.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7240::/32
Signature Algorithm: sha256WithRSAEncryption
c1:a6:1b:c8:c3:45:54:42:25:5f:3f:d9:b8:24:0a:ba:f9:86:
6c:3a:0a:8e:05:3e:b7:0a:22:4c:e2:77:bc:f1:c0:18:6a:f3:
a5:e5:69:38:dc:fb:64:76:2d:34:00:15:89:fb:e6:97:71:c1:
85:28:57:02:6f:9c:81:00:1b:c4:49:20:2e:08:f1:e1:c3:b8:
37:77:1e:39:aa:d9:db:6c:76:1c:73:1c:84:98:23:ce:5d:a6:
3d:bb:c9:81:06:c9:38:f0:7a:cd:a9:e3:68:54:6a:af:e2:f9:
af:8b:5e:dd:22:58:38:39:19:4f:49:04:67:17:4b:e4:46:19:
cc:71:45:d9:67:5a:82:87:8f:f9:39:a4:ba:75:7e:96:46:2a:
3a:94:2e:a9:47:2b:18:13:d2:4a:d9:ef:54:4b:54:9e:3b:2a:
09:ac:95:14:95:53:93:7c:19:11:72:d6:68:d1:82:40:92:de:
53:96:8f:a9:17:a3:7f:eb:74:85:48:b8:1c:3a:c2:6b:f9:7e:
30:f2:12:a2:89:4e:4d:06:5b:c6:23:c9:3f:a2:8c:63:6e:62:
3b:9f:1c:f9:65:7b:54:3c:a6:b4:40:4b:3f:4a:cf:bc:0a:8d:
b2:05:ce:f2:e3:33:db:e9:b7:ed:a4:2e:9a:e3:52:68:52:a3:
2e:0c:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org