Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/0lX-AsKM4a0MdpC8sccb5qHSNfM.roa
File: 0lX-AsKM4a0MdpC8sccb5qHSNfM.roa (raw, json)
Hash identifier: nQEsaiVNKMBHWrwJ+pOLjTw6xk9Kq9bLkEb/DLx55qM=
Subject key identifier: D2:55:FE:02:C2:8C:E1:AD:0C:76:90:BC:B1:C7:1B:E6:A1:D2:35:F3
Certificate issuer: /CN=9F2B6854BE70947F0785FF966203BB650BDD1682
Certificate serial: 04
Authority key identifier: 9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/0lX-AsKM4a0MdpC8sccb5qHSNfM.roa
Signing time: Wed 01 Jun 2022 07:10:26 +0000
ROA not before: Wed 01 Jun 2022 07:10:26 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 17964
IP address blocks: 2403:8080::/32 maxlen: 64
2403:8880::/32 maxlen: 64
2403:a880::/32 maxlen: 64
2403:b080::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2B6854BE70947F0785FF966203BB650BDD1682
Validity
Not Before: Jun 1 07:10:26 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=D255FE02C28CE1AD0C7690BCB1C71BE6A1D235F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6f:45:e6:c3:22:e4:53:53:cc:07:bf:99:8c:
85:83:75:16:fc:59:88:a5:c7:c4:17:d6:11:07:b2:
1e:d7:30:93:54:a2:3a:a9:e8:81:0a:f0:8f:5a:08:
2b:54:92:37:98:ba:5c:ae:67:28:7e:5d:30:09:e5:
3f:5a:b2:9d:4c:64:52:f2:8b:97:dd:55:9f:42:0e:
53:af:d3:55:db:de:87:09:12:80:bb:93:fa:0f:0d:
e2:8a:20:22:19:5b:e6:6a:6d:0a:8f:c4:47:75:93:
2d:20:96:9a:40:64:8c:4e:d0:36:ad:34:5c:c5:dd:
e9:2b:fe:79:fd:81:5d:21:8d:b6:ff:ff:26:9e:d1:
1f:0b:7f:0f:7f:4b:a7:18:12:4b:d7:74:ec:f8:1a:
a4:b1:ef:ea:b3:76:f2:f0:3f:55:a7:49:65:a0:7e:
2f:53:ab:2b:49:40:a9:c8:26:e9:88:96:7a:0c:bf:
92:63:36:31:24:ed:54:bd:db:65:36:63:5c:7c:d1:
7c:86:fb:34:ba:ee:4d:89:c9:16:05:4f:74:03:41:
8b:2e:5b:3e:7c:a5:8f:82:7f:0a:7c:51:f3:04:a2:
ce:71:d6:47:00:64:44:44:30:f0:c2:12:60:4c:96:
36:b6:6d:10:2f:99:a0:bf:db:f7:c6:61:bd:92:e0:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:FE:02:C2:8C:E1:AD:0C:76:90:BC:B1:C7:1B:E6:A1:D2:35:F3
X509v3 Authority Key Identifier:
keyid:9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/0lX-AsKM4a0MdpC8sccb5qHSNfM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:8080::/32
2403:8880::/32
2403:a880::/32
2403:b080::/32
Signature Algorithm: sha256WithRSAEncryption
73:e9:93:9d:44:31:b3:ce:c2:f3:4e:67:35:da:c0:0c:ad:c8:
56:80:70:34:82:4c:13:50:c7:f6:b9:5e:a7:2e:1f:96:24:ff:
ea:6e:b0:57:e0:fe:49:f8:29:cd:aa:da:ea:b8:1e:35:38:11:
9d:34:77:83:c7:24:1d:fa:7d:92:ab:74:49:a7:ef:bc:be:11:
56:ff:b9:27:70:4d:98:4f:05:22:32:02:e7:b2:33:04:a3:7b:
5f:5c:0e:a9:54:20:2c:cb:92:bb:f6:dd:4e:9c:2e:a8:fd:8c:
bb:e7:32:40:80:64:71:db:4c:e6:23:ab:72:57:2b:cb:0a:85:
79:c5:49:24:4f:90:5b:c1:3d:ca:ae:9b:71:75:85:ca:82:16:
24:d7:3c:a0:a5:4c:df:3e:d6:db:64:35:98:53:5a:0a:20:e4:
f3:4c:82:a2:ea:11:93:f1:65:eb:f5:aa:41:07:58:51:39:44:
5f:2d:04:09:02:a0:88:dc:e9:77:d1:c2:66:65:b4:30:b6:4b:
43:17:63:9f:3a:08:a1:33:ea:ce:83:d0:60:56:e4:32:ef:fa:
67:32:c4:19:96:76:08:82:1f:24:be:bd:c8:ba:41:83:3e:af:
75:29:45:ea:cb:9b:be:7e:66:78:95:51:ff:a8:4b:2f:af:ff:
80:da:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org