Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/CCrqNj2HLqQ6bkeMorXAJjvBOsw.roa
File: CCrqNj2HLqQ6bkeMorXAJjvBOsw.roa (raw, json)
Hash identifier: qvdFD5QZpfn6f+N8H0dzGodGvkBff5ZITnXn4Kk3qPo=
Subject key identifier: 08:2A:EA:36:3D:87:2E:A4:3A:6E:47:8C:A2:B5:C0:26:3B:C1:3A:CC
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 06E2
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/CCrqNj2HLqQ6bkeMorXAJjvBOsw.roa
Signing time: Thu 18 May 2023 07:24:00 +0000
ROA not before: Thu 18 May 2023 07:24:00 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 58593
IP address blocks: 2404:7940::/32 maxlen: 64
2406:e500::/33 maxlen: 64
2406:e500::/48 maxlen: 64
2406:e500:1::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762 (0x6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: May 18 07:24:00 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=082AEA363D872EA43A6E478CA2B5C0263BC13ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:9f:f1:a1:dc:2b:e9:8c:e3:e1:e4:51:9c:
bc:6d:16:34:fc:47:f5:e2:b6:ab:db:b5:36:72:b4:
6c:dd:d6:5d:af:f3:40:cc:9b:4c:95:3b:bd:4d:37:
44:df:1f:b8:3e:43:a9:c9:67:8d:47:31:e3:33:e9:
a0:36:03:87:92:e6:0c:25:45:93:97:44:e2:07:d2:
fc:aa:1c:cf:6c:9f:4d:7a:88:0b:4f:8e:ab:58:dd:
55:94:c9:df:e4:42:bc:e1:08:98:97:20:e0:5d:9d:
cf:48:a4:81:e6:1f:3f:35:17:70:dd:21:e7:7c:42:
f2:e1:37:a6:a5:b3:2d:1c:7f:4a:03:95:61:62:69:
42:8c:30:4a:6c:a2:be:eb:8a:24:f2:4a:8a:22:2f:
57:a2:ee:f8:01:06:7e:6d:b9:25:61:08:d4:fe:17:
e8:41:bf:6a:7d:f7:c3:06:81:09:93:a3:81:03:d9:
05:6f:1a:8d:b9:8c:44:d5:4c:de:a6:8e:f5:32:d7:
f6:5b:72:08:4e:46:34:5d:32:ae:29:0a:04:ea:d0:
a3:15:0d:a0:1a:5b:42:95:90:6e:f6:0e:f7:59:20:
61:0e:41:7c:b4:fc:21:03:1d:e7:50:91:05:8f:4a:
34:3b:25:21:3a:51:ae:d7:f4:12:40:97:21:6f:d3:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2A:EA:36:3D:87:2E:A4:3A:6E:47:8C:A2:B5:C0:26:3B:C1:3A:CC
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/CCrqNj2HLqQ6bkeMorXAJjvBOsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:7940::/32
2406:e500::/33
Signature Algorithm: sha256WithRSAEncryption
11:a8:e0:37:7a:53:9b:89:3a:59:72:42:01:07:4c:0c:19:59:
af:2e:93:be:b8:35:37:cb:96:76:c2:ae:21:39:9e:63:13:b2:
8e:a6:4a:f1:a4:5a:97:fb:ad:63:d8:e2:78:1c:a3:57:e0:92:
31:de:69:ae:bd:94:75:dc:cb:7d:3c:af:c1:17:5b:2d:bb:9f:
73:0d:ce:f7:05:db:c1:47:b0:d1:18:f3:b7:f2:97:f5:8a:9a:
5c:85:5d:e5:c0:68:3c:9c:6d:01:5a:5b:27:5c:2d:65:88:e9:
cc:22:b3:3c:15:f8:b7:d5:09:00:6f:4a:d0:f2:63:32:1e:4d:
6c:5b:d3:9f:b9:fe:1d:83:3b:c2:a8:6f:88:59:7a:31:65:2a:
a6:39:63:22:9e:3d:ad:6d:0a:d4:64:8c:0a:97:36:3d:69:c2:
a5:0f:76:17:15:0a:cc:61:f2:6c:78:be:b2:52:2d:fa:b0:c4:
4b:8c:27:06:32:29:98:20:55:f3:21:a7:06:23:2f:3a:64:b6:
1f:04:ad:d3:50:ec:23:fc:a4:8e:f9:88:ed:2d:0f:60:cc:f0:
9a:8f:c8:96:66:b4:e5:10:1d:2a:5a:40:56:e4:57:55:59:ba:
b5:d1:71:17:58:63:b0:ba:71:cd:c6:cd:56:cc:73:ba:67:b1:
ab:63:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org