Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/N5exKKMkaVTs3t51l49oiWKzt-8.roa
File: N5exKKMkaVTs3t51l49oiWKzt-8.roa (raw, json)
Hash identifier: eKy3UHG4THo/tgDjaKZL5NamFdnhCbuhRmPyY9Bvyx0=
Subject key identifier: 37:97:B1:28:A3:24:69:54:EC:DE:DE:75:97:8F:68:89:62:B3:B7:EF
Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Certificate serial: 100B
Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/N5exKKMkaVTs3t51l49oiWKzt-8.roa
Signing time: Fri 19 May 2023 05:53:11 +0000
ROA not before: Fri 19 May 2023 05:53:11 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 131567
IP address blocks: 2401:7240::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4107 (0x100b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Validity
Not Before: May 19 05:53:11 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=3797B128A3246954ECDEDE75978F688962B3B7EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:0c:5e:28:0d:31:16:1d:06:15:c4:aa:75:
d4:c3:f0:3f:98:68:a3:df:ee:91:ef:31:fc:e3:22:
0f:bf:8b:2d:6c:dd:14:51:ed:d4:0e:5a:e4:6c:be:
23:87:37:4b:3e:42:e8:8a:7a:5e:b5:ad:82:5f:a5:
14:3f:fc:55:f3:53:ff:c1:d4:68:8b:5c:60:83:01:
b0:5d:0d:10:20:10:38:6c:c1:46:0c:a5:66:d9:85:
f3:da:9a:61:78:e4:cc:b7:9d:b2:9a:cc:d0:90:87:
16:34:e8:c8:da:5f:c0:e2:9e:8f:3d:ec:d7:cf:4b:
7f:df:45:52:52:06:f4:9f:1b:43:ce:97:dd:3e:5c:
5c:19:fe:67:6a:5c:a0:48:f6:14:5e:c8:03:a8:88:
7e:41:9e:9e:04:f7:ba:bd:45:17:28:ad:22:80:1f:
4d:33:27:ce:1f:ba:04:4f:3d:0e:6d:85:9b:e4:09:
c9:6a:ca:38:30:9f:41:61:e2:c1:48:26:d5:fe:ad:
87:b7:f7:e5:48:f7:54:58:94:e9:d2:2f:58:70:e9:
0f:7a:b5:97:df:f9:eb:45:4a:84:7b:8c:84:e8:17:
36:77:a1:40:7f:50:76:6b:2b:aa:8a:a4:45:c1:34:
bf:b4:e4:18:27:bc:14:16:bd:12:7a:ca:70:05:f6:
6a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:B1:28:A3:24:69:54:EC:DE:DE:75:97:8F:68:89:62:B3:B7:EF
X509v3 Authority Key Identifier:
keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/N5exKKMkaVTs3t51l49oiWKzt-8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7240::/32
Signature Algorithm: sha256WithRSAEncryption
a0:47:9c:5b:2f:cf:8b:6e:15:59:5f:77:fc:b2:c6:f5:cd:86:
e1:07:9f:f4:a3:f4:a8:f0:62:31:5e:51:2d:f4:54:2d:e8:95:
be:a0:72:22:0b:b4:3b:53:d3:78:d5:62:d9:f9:72:9d:58:4f:
6a:36:28:e0:8d:44:20:ce:6f:5d:03:e0:10:0f:f5:31:01:e8:
00:1d:62:f5:41:e6:bc:9d:e7:7e:15:d7:c4:e1:b8:2f:36:35:
b1:f4:91:2e:9c:89:ce:48:1b:45:21:6a:a6:b0:9b:12:ad:61:
a6:0b:25:20:22:68:ae:46:3e:ed:4e:5d:41:a9:e6:e0:d6:13:
37:df:8b:5d:42:21:d0:b0:b3:91:86:11:28:86:31:b2:fe:72:
5b:f5:3b:08:d5:45:aa:3c:8b:5a:53:55:4e:08:5c:cf:0c:eb:
c7:69:6a:34:70:1b:c0:ed:c8:0d:e9:76:c9:4a:63:22:29:26:
cf:5c:53:9c:7a:4d:5f:73:2d:b9:3e:c0:11:0c:24:85:a7:2e:
ea:d3:81:a2:93:74:c3:ec:78:56:ac:cd:f3:1d:90:57:46:ea:
0e:fb:e6:d7:7c:db:be:c9:d5:60:ab:b8:6a:9a:a5:18:71:6d:
fd:cc:16:33:13:93:65:b5:8b:08:de:c4:38:80:bb:38:be:ad:
53:e1:81:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org