Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/Nc5ok3ylEgEsI_5YTAcVsoJTzL0.roa
File: Nc5ok3ylEgEsI_5YTAcVsoJTzL0.roa (raw, json)
Hash identifier: Hfo0YaV+RCn+H5Z1elB+h3ixq7qkuLHj2A2lkSKqpmE=
Subject key identifier: 35:CE:68:93:7C:A5:12:01:2C:23:FE:58:4C:07:15:B2:82:53:CC:BD
Certificate issuer: /CN=9582A072805FF48C74231BB432D95ADE2256B886
Certificate serial: 04
Authority key identifier: 95:82:A0:72:80:5F:F4:8C:74:23:1B:B4:32:D9:5A:DE:22:56:B8:86
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lYKgcoBf9Ix0Ixu0Mtla3iJWuIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/Nc5ok3ylEgEsI_5YTAcVsoJTzL0.roa
Signing time: Wed 09 Jun 2021 19:59:36 +0000
ROA not before: Wed 09 Jun 2021 19:59:36 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 137797
IP address blocks: 2402:f9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9582A072805FF48C74231BB432D95ADE2256B886
Validity
Not Before: Jun 9 19:59:36 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=35CE68937CA512012C23FE584C0715B28253CCBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:24:54:de:5c:86:32:da:ca:45:5c:d6:0c:
c1:13:2d:f7:b2:5c:43:b3:46:59:76:d4:6d:40:66:
5b:63:43:85:c9:d9:d2:c4:79:14:57:83:c5:e1:5c:
f4:28:c3:9b:55:59:90:e1:b7:51:f6:e5:0e:78:a1:
b1:1c:80:86:aa:99:56:ef:c1:4f:01:45:0f:1a:3c:
04:04:f4:81:d9:36:50:3a:ef:c5:75:80:cf:49:3e:
7a:89:ee:fa:f1:45:eb:73:b7:29:ab:44:13:f9:00:
ca:72:65:7f:b6:d2:29:aa:da:4e:bb:cc:79:4f:30:
d0:41:57:cb:82:bc:9c:d2:fa:6d:4b:ff:87:38:b1:
1f:28:fc:79:b7:9d:c4:7b:4c:7b:99:6f:5c:91:36:
84:55:d3:59:65:44:73:a6:96:c2:1f:f5:64:a2:5a:
ee:fd:33:97:da:25:03:e2:87:ba:3d:7d:2e:6d:32:
33:a0:03:e4:37:c8:00:01:4e:1c:61:d2:c8:10:82:
7a:40:e5:83:38:83:5d:d8:2c:4d:5e:d5:64:e0:3b:
42:e8:75:27:3f:94:7b:6a:85:d4:89:7c:cf:37:f5:
55:97:ff:9f:f4:9e:32:37:1b:c0:d9:92:53:ac:35:
b7:8e:18:7b:8c:6e:70:e2:1b:71:20:14:95:39:16:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CE:68:93:7C:A5:12:01:2C:23:FE:58:4C:07:15:B2:82:53:CC:BD
X509v3 Authority Key Identifier:
keyid:95:82:A0:72:80:5F:F4:8C:74:23:1B:B4:32:D9:5A:DE:22:56:B8:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/lYKgcoBf9Ix0Ixu0Mtla3iJWuIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lYKgcoBf9Ix0Ixu0Mtla3iJWuIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/Nc5ok3ylEgEsI_5YTAcVsoJTzL0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:f9c0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:dc:46:b6:63:70:10:a3:32:31:4e:72:d6:85:57:1a:05:0f:
7c:60:b3:db:e1:57:53:7b:7b:6e:82:9e:e0:4d:d9:10:e0:76:
56:00:10:07:af:e4:b9:f8:52:79:01:11:ef:ec:c2:05:08:d1:
76:31:89:10:b8:14:60:3a:28:6e:c3:10:6b:61:e9:22:b6:5f:
d9:f9:bb:4e:2d:1f:41:df:e7:b2:f0:f4:6a:71:47:df:62:ac:
b5:dd:11:f5:44:71:64:dd:51:48:ba:35:26:7d:f0:79:e0:e5:
5a:20:52:07:f7:bf:bf:91:8e:29:44:d5:f6:6c:7f:a0:c6:b8:
a7:bd:7d:8a:5f:c7:46:69:19:07:8f:53:c6:62:e2:41:8b:64:
48:fa:f1:f3:f6:72:fb:f5:20:7c:4a:fe:75:b1:5a:10:6a:c8:
3d:63:88:a1:59:71:3c:98:a9:cf:37:45:9b:fd:46:db:d3:3b:
be:a1:a6:49:81:85:ff:18:26:f7:71:a9:f6:0a:2c:e6:f8:b7:
75:b1:e7:61:3f:af:a2:de:4a:5b:44:17:b1:f6:b6:e3:df:4d:
ed:ff:03:d4:e3:7f:1a:2f:df:83:0a:90:78:92:69:cf:44:2d:
e6:c2:12:60:8c:93:bb:48:41:af:ab:9a:44:c1:ba:b9:15:bb:
29:eb:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org