Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/OssdlJ9oDGzqaEBJzlqFT8mHLqk.roa
File: OssdlJ9oDGzqaEBJzlqFT8mHLqk.roa (raw, json)
Hash identifier: vN8EGEv83S/5I13rOugTLifk4dtzcXi4ain71oXwYRs=
Subject key identifier: 3A:CB:1D:94:9F:68:0C:6C:EA:68:40:49:CE:5A:85:4F:C9:87:2E:A9
Certificate issuer: /CN=0016F4A41A27D6BAE9821D0E225506A1CB22BDFA
Certificate serial: 052D
Authority key identifier: 00:16:F4:A4:1A:27:D6:BA:E9:82:1D:0E:22:55:06:A1:CB:22:BD:FA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ABb0pBon1rrpgh0OIlUGocsivfo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/OssdlJ9oDGzqaEBJzlqFT8mHLqk.roa
Signing time: Fri 11 Feb 2022 02:20:30 +0000
ROA not before: Fri 11 Feb 2022 02:20:30 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131567
IP address blocks: 2401:7240::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1325 (0x52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0016F4A41A27D6BAE9821D0E225506A1CB22BDFA
Validity
Not Before: Feb 11 02:20:30 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=3ACB1D949F680C6CEA684049CE5A854FC9872EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:c5:a6:5d:59:27:10:b5:63:0f:32:05:5f:
14:82:6c:20:e8:74:f8:0a:e0:cf:31:a2:16:5b:40:
2d:ad:bb:e1:28:15:fb:84:43:fe:69:a6:a5:c5:4a:
d8:00:11:5f:2e:1e:ea:25:46:46:e7:88:08:fe:4d:
9c:68:25:c3:16:b1:03:4a:14:84:60:c5:10:61:b0:
ae:60:39:fb:e3:28:2f:53:d2:57:05:df:77:db:3d:
94:fe:82:2a:0c:25:e5:13:84:50:58:6d:cf:8d:c2:
68:08:31:1b:9b:ee:ab:15:b3:b9:79:f6:6c:ab:e8:
43:f9:9c:cd:63:6b:be:b4:77:1f:67:d9:d3:85:b8:
95:92:73:d4:5d:14:e2:ba:6f:86:14:4f:8f:f7:12:
a6:23:e5:b2:f8:04:bd:34:71:f2:65:a5:bf:e2:2d:
74:07:b5:2c:00:22:9b:d7:55:22:fb:be:cf:27:9a:
bf:6e:68:ab:16:6e:3b:d2:b0:28:37:39:10:e1:c1:
81:45:11:53:34:0a:cf:71:e4:ce:5c:d5:7e:4f:6a:
73:95:cb:27:85:2e:bc:be:b6:c0:cf:08:88:8c:4b:
b3:b6:f3:5a:e6:be:b7:03:f0:45:a6:1f:5a:00:59:
d1:a5:78:01:82:44:49:f0:46:9a:67:f1:31:40:20:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CB:1D:94:9F:68:0C:6C:EA:68:40:49:CE:5A:85:4F:C9:87:2E:A9
X509v3 Authority Key Identifier:
keyid:00:16:F4:A4:1A:27:D6:BA:E9:82:1D:0E:22:55:06:A1:CB:22:BD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/ABb0pBon1rrpgh0OIlUGocsivfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ABb0pBon1rrpgh0OIlUGocsivfo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/OssdlJ9oDGzqaEBJzlqFT8mHLqk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7240::/32
Signature Algorithm: sha256WithRSAEncryption
56:3c:ea:41:b8:ee:d2:17:28:d6:1b:3e:e9:c8:5e:e5:b7:3b:
cb:ab:e2:e4:a1:84:0b:7a:6e:c4:41:ca:67:28:7f:ca:6e:bd:
dd:5e:79:1a:bd:7d:8c:91:d0:e4:a3:1f:e2:0e:d2:95:27:4a:
f7:de:91:5a:01:4a:fc:a1:90:25:1f:36:c3:f9:bc:62:9b:85:
b7:68:e4:89:2b:ae:48:a7:ca:75:1d:74:c1:a2:16:8b:6f:fb:
0e:c5:91:af:f8:74:9f:e2:89:eb:1f:7a:45:b5:2d:d1:36:d9:
7d:82:9b:63:de:07:16:4a:28:5b:98:03:e4:d8:01:fc:c4:f8:
ad:a1:81:0f:07:34:14:7f:9c:dc:b7:5e:7e:39:79:b3:bf:e5:
07:08:cd:3e:24:83:7e:81:3e:0b:d3:72:13:36:33:1e:c2:b6:
67:33:ba:b1:a1:c3:66:ec:8b:ec:6e:e2:98:43:53:bd:72:54:
96:bf:9c:0f:5d:be:ba:90:ab:2f:0e:52:90:e0:0a:15:9a:bc:
8e:cc:41:0c:7d:dd:b5:09:8d:56:c5:03:6e:c9:0c:11:92:5f:
96:17:e1:73:4a:dc:c5:08:33:c3:b6:f1:a5:be:56:56:f1:2d:
0a:af:4c:4a:48:84:53:a5:de:09:55:5d:6c:ed:de:fc:8e:83:
2d:4a:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org