Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/bywqLhZAEnEXBi2pTIdcvq8HiN4.roa
File: bywqLhZAEnEXBi2pTIdcvq8HiN4.roa (raw, json)
Hash identifier: J2Rl0mfp9D/Kb6RDymN77v/Ac0TYaTjfIY5lM7xZGqo=
Subject key identifier: 6F:2C:2A:2E:16:40:12:71:17:06:2D:A9:4C:87:5C:BE:AF:07:88:DE
Certificate issuer: /CN=63A0F163884E4E0EA98C0ED1ECFB6CBD41F66C19
Certificate serial: 06DA
Authority key identifier: 63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/bywqLhZAEnEXBi2pTIdcvq8HiN4.roa
Signing time: Thu 03 Jun 2021 08:47:30 +0000
ROA not before: Thu 03 Jun 2021 08:47:30 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 58593
IP address blocks: 2404:7940::/32 maxlen: 64
2406:e500::/33 maxlen: 64
2406:e500::/48 maxlen: 64
2406:e500:1::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754 (0x6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63A0F163884E4E0EA98C0ED1ECFB6CBD41F66C19
Validity
Not Before: Jun 3 08:47:30 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=6F2C2A2E1640127117062DA94C875CBEAF0788DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:87:f6:84:83:8b:be:ae:5c:ec:34:17:7b:
2e:e7:5f:f2:7f:c2:ee:d5:91:fc:49:39:ae:ec:6a:
d2:70:a6:59:48:92:76:84:c4:51:2f:97:25:2c:cb:
b8:aa:75:f9:80:dd:95:db:5b:c4:ff:65:0b:01:22:
8e:b6:55:8c:48:42:5e:5b:e9:74:3f:7d:04:f8:b3:
cd:63:f8:19:3a:fd:9c:c3:37:a0:01:25:2e:55:31:
3a:1a:f8:18:c4:e2:0a:a5:bc:5d:57:18:53:06:c4:
24:c5:1e:50:24:62:89:aa:60:f0:91:66:13:e6:00:
14:36:e3:80:ac:50:63:62:4f:46:b9:ea:e6:52:8a:
07:8c:38:76:1d:ea:12:39:b1:8e:c0:44:60:4e:c6:
33:e0:6c:ec:9d:0e:f6:17:8b:4d:a6:ea:6d:85:1c:
d4:ee:14:a3:f4:01:03:c3:09:20:23:af:4f:4c:bf:
45:17:86:b8:12:69:5e:48:8d:28:bf:34:bd:17:bb:
61:c4:75:f1:64:c5:23:4c:12:fb:25:d3:94:01:b0:
ae:53:24:f2:d9:79:e7:2b:a5:7e:13:6f:bd:b9:86:
c9:c2:de:63:08:d1:ff:c2:f1:7e:4e:41:02:40:38:
11:fe:f7:18:69:a3:d3:a4:9d:9a:a8:45:58:ff:6e:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:2A:2E:16:40:12:71:17:06:2D:A9:4C:87:5C:BE:AF:07:88:DE
X509v3 Authority Key Identifier:
keyid:63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/bywqLhZAEnEXBi2pTIdcvq8HiN4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:7940::/32
2406:e500::/33
Signature Algorithm: sha256WithRSAEncryption
1f:19:26:e5:37:c2:ed:65:63:27:91:a7:25:4a:77:ed:f2:c0:
f9:61:10:ed:3b:a6:e6:d0:83:0b:e4:d7:4d:73:73:6b:06:a7:
63:99:e2:ed:33:f7:05:c9:f5:80:72:c4:f5:6a:db:94:b3:6e:
ee:97:a7:1d:2b:b9:64:7e:ea:96:05:23:76:80:b9:11:fb:dc:
c9:b2:b4:81:59:c8:8f:ac:e3:d3:78:4f:b7:51:97:f8:36:f5:
7e:e3:be:c1:c7:42:17:6a:a9:cb:a8:66:23:75:8c:5b:49:b6:
78:55:ab:c1:21:ec:b9:03:fe:fb:d7:81:ec:1c:35:7d:f7:86:
3a:84:f2:a5:6d:29:52:17:d6:6f:a6:56:bf:67:cb:ec:fd:1e:
d9:d0:41:45:a4:5f:ef:15:1b:cf:ac:b8:7a:9f:c0:34:8e:c5:
78:09:44:cd:bf:45:15:05:2a:0d:b0:58:fb:30:78:85:23:35:
aa:70:27:bd:34:0c:41:d4:ff:da:b2:3a:86:b0:4a:54:84:40:
29:dc:4a:41:ae:a7:55:ba:ac:52:6c:6c:f6:ef:d0:76:cb:68:
93:b2:01:08:97:2e:07:6b:ea:47:5e:b3:e1:82:3b:9b:dc:bf:
cb:54:25:02:da:92:ca:68:2c:cc:a1:ac:46:d3:ac:22:5a:87:
19:a7:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org