Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/h4B2TdHPayYg7W4VuGPwDHWjUeQ.roa
File: h4B2TdHPayYg7W4VuGPwDHWjUeQ.roa (raw, json)
Hash identifier: hOyz+m5OCpgkD9AFSeLh6gVjSOg8Kas5adpsfON6eeI=
Subject key identifier: 87:80:76:4D:D1:CF:6B:26:20:ED:6E:15:B8:63:F0:0C:75:A3:51:E4
Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial: 0F53
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/h4B2TdHPayYg7W4VuGPwDHWjUeQ.roa
Signing time: Tue 07 Jun 2022 02:11:08 +0000
ROA not before: Tue 07 Jun 2022 02:11:08 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 139139
IP address blocks: 2406:3340::/36 maxlen: 36
2406:3340:1000::/36 maxlen: 36
2406:3340:2000::/36 maxlen: 36
2406:3340:3000::/36 maxlen: 36
2406:3340:4000::/36 maxlen: 36
2406:3340:5000::/36 maxlen: 36
2406:3340:6000::/36 maxlen: 36
2406:3340:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3923 (0xf53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
Validity
Not Before: Jun 7 02:11:08 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=8780764DD1CF6B2620ED6E15B863F00C75A351E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:0d:c5:76:cb:1b:4a:4f:58:42:a9:a5:b2:
10:cc:3f:ce:26:c1:0a:84:91:2c:29:2c:51:c2:e1:
b4:d0:38:af:f4:83:7a:80:b9:5c:d7:a2:f4:41:95:
4a:5d:3a:26:b8:3b:4f:21:84:79:bf:59:48:91:94:
3b:b9:6b:bc:fd:f8:8e:1f:d5:da:32:86:42:de:a2:
5f:c0:2a:a4:14:65:d8:37:a2:d6:b4:2a:e0:08:9c:
d1:95:95:f4:a3:38:83:78:80:12:4f:35:a0:6c:9d:
5e:e6:64:a3:fe:4f:ce:bb:6b:d8:33:31:2d:db:96:
2e:a6:f4:29:f1:33:c4:97:4a:78:d3:d7:7b:63:47:
ff:65:19:bf:ee:b0:b9:17:38:c6:53:bc:10:ed:cc:
1a:c3:97:20:f7:87:2a:28:74:27:3c:71:78:1a:b2:
b4:ea:9b:ab:82:9d:3a:e5:f3:2a:24:85:5a:12:ff:
00:76:ab:f5:fc:57:ca:bf:a8:18:88:bb:eb:da:f0:
55:77:da:c7:ee:b4:f8:92:db:03:53:cd:0a:c7:17:
71:fa:1e:ff:70:1e:ea:75:6f:91:fc:ba:f7:79:b3:
81:0b:14:91:4d:7e:32:4f:bb:e6:fc:f0:a0:7e:ab:
e4:22:e4:41:97:37:cd:08:03:7b:cd:25:7a:d4:51:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:80:76:4D:D1:CF:6B:26:20:ED:6E:15:B8:63:F0:0C:75:A3:51:E4
X509v3 Authority Key Identifier:
keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/h4B2TdHPayYg7W4VuGPwDHWjUeQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:3340::/33
Signature Algorithm: sha256WithRSAEncryption
78:a7:50:8f:e8:b3:85:26:e6:f0:cb:c0:ab:30:6b:f7:f2:8e:
9e:13:d7:a4:eb:08:b4:b8:16:84:78:51:7f:eb:11:67:c6:87:
05:be:7c:30:aa:14:bb:29:2c:5a:85:0e:83:5a:6e:8f:91:45:
ab:0f:51:20:30:5a:bf:a7:40:01:ff:b8:67:62:ca:0e:77:ca:
66:45:66:2e:ed:67:57:e8:10:11:7b:d3:30:ac:2e:8d:31:63:
85:dd:cd:0d:fa:1f:48:7e:b6:56:3f:33:69:51:4c:e8:d4:82:
62:aa:55:7d:cd:86:3c:7a:33:81:c5:28:1b:92:cd:f4:2f:30:
2e:5f:4d:6d:68:69:5d:87:75:99:e9:49:2c:03:0a:c4:d7:c3:
81:68:8e:24:c2:ca:fc:19:be:d5:b3:dc:21:77:18:d1:22:17:
1e:d1:ef:06:d6:7e:ea:69:e5:d4:60:ba:5e:a6:0f:e1:5a:2a:
be:23:cc:a7:3e:c9:5f:d7:1c:35:26:df:3d:a7:26:67:07:56:
7e:d5:a1:d5:60:5a:20:41:42:bb:f6:c3:9f:fd:a8:32:51:a8:
63:72:74:97:f0:8e:96:03:db:b6:9f:9f:ca:a6:a6:9b:af:00:
af:1d:cd:3a:a0:b6:4b:24:80:6c:28:48:76:78:be:82:27:52:
20:44:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org