Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/suKIkebH_oWVIpCkYYlIX0gyD8k.roa
File: suKIkebH_oWVIpCkYYlIX0gyD8k.roa (raw, json)
Hash identifier: F9ybCduBVT7rBuBQtwMVf3Okg6aGlmDvkneOYp0VVPM=
Subject key identifier: B2:E2:88:91:E6:C7:FE:85:95:22:90:A4:61:89:48:5F:48:32:0F:C9
Certificate issuer: /CN=48ABAC2882B59E07AFEED3279C14F89E8093187A
Certificate serial: 06C9
Authority key identifier: 48:AB:AC:28:82:B5:9E:07:AF:EE:D3:27:9C:14:F8:9E:80:93:18:7A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SKusKIK1ngev7tMnnBT4noCTGHo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/suKIkebH_oWVIpCkYYlIX0gyD8k.roa
Signing time: Thu 01 Jul 2021 06:35:40 +0000
ROA not before: Thu 01 Jul 2021 06:35:40 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139139
IP address blocks: 2406:3340::/36 maxlen: 36
2406:3340:1000::/36 maxlen: 36
2406:3340:2000::/36 maxlen: 36
2406:3340:3000::/36 maxlen: 36
2406:3340:4000::/36 maxlen: 36
2406:3340:5000::/36 maxlen: 36
2406:3340:6000::/36 maxlen: 36
2406:3340:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ABAC2882B59E07AFEED3279C14F89E8093187A
Validity
Not Before: Jul 1 06:35:40 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B2E28891E6C7FE85952290A46189485F48320FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:07:f5:e6:a9:17:a1:54:92:8e:86:26:c1:
16:28:80:01:6f:bf:e7:29:e1:57:2d:92:88:65:99:
c3:4a:87:62:7d:7f:7e:f7:28:4c:ab:9f:a2:52:96:
85:d2:a4:7f:40:09:82:f8:99:53:e3:24:5d:1a:48:
a6:0e:9f:92:a2:8a:e7:7a:3f:99:eb:c4:8d:db:d3:
b1:59:ed:02:82:22:7c:c3:28:d1:a1:5d:01:5e:78:
3e:12:ea:ac:7f:41:4d:1a:bd:ac:95:8c:f9:2a:ed:
6d:0b:71:38:86:e5:74:9b:17:e7:21:83:82:ce:04:
51:fb:c4:a9:87:7e:17:d9:d0:61:e7:53:04:9c:69:
2e:78:de:55:6b:0b:34:de:e6:2f:ec:3b:3b:97:cd:
cc:b4:84:48:a9:87:bc:62:91:84:5c:4f:26:ab:94:
ff:48:eb:63:51:62:46:a2:d7:cf:bf:78:95:84:f1:
a7:52:db:72:b6:cb:3e:64:54:66:4b:44:9a:39:c4:
2c:5f:bf:df:20:e5:17:92:f7:a7:28:2a:e6:e1:28:
b1:1c:cb:97:28:4c:d7:fd:31:2d:56:c2:81:ea:5f:
27:6e:a4:e2:ef:1b:4e:52:53:8e:07:eb:09:14:3a:
e7:fe:12:f4:ab:e3:12:87:d7:60:1e:5a:79:15:fa:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E2:88:91:E6:C7:FE:85:95:22:90:A4:61:89:48:5F:48:32:0F:C9
X509v3 Authority Key Identifier:
keyid:48:AB:AC:28:82:B5:9E:07:AF:EE:D3:27:9C:14:F8:9E:80:93:18:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/SKusKIK1ngev7tMnnBT4noCTGHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SKusKIK1ngev7tMnnBT4noCTGHo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/suKIkebH_oWVIpCkYYlIX0gyD8k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:3340::/33
Signature Algorithm: sha256WithRSAEncryption
52:75:1f:33:03:49:5c:c2:31:07:36:f9:8c:ef:7e:ab:95:d4:
2c:5a:d3:6c:cb:09:a9:56:69:5d:f2:0b:21:64:24:8e:3b:04:
c9:8f:30:58:18:b5:41:77:ed:0c:3a:12:c3:71:a9:36:de:c0:
67:ac:1d:ac:dd:c4:79:3f:a3:d1:d5:c6:4f:f0:49:08:78:6d:
28:74:98:31:b0:75:75:8a:51:19:00:d0:c3:5f:84:fd:4e:11:
7c:2d:c2:26:b6:61:16:15:46:11:61:e5:7a:28:ae:79:3a:f3:
7e:c4:3f:81:fe:32:81:4c:4b:e1:9d:a9:49:10:08:64:35:69:
9c:19:61:d6:ef:17:55:e6:c3:d3:ab:88:98:a6:45:fa:04:ed:
14:50:ce:02:54:a1:40:dc:3d:68:51:e7:dc:ad:c4:68:80:85:
86:8b:7f:e0:58:ff:d9:08:53:94:5e:13:57:4e:d5:aa:ed:09:
72:26:26:33:22:23:ad:65:01:2d:11:e9:3b:94:87:bb:25:59:
fa:50:c8:65:92:79:ce:ab:d0:78:7a:63:51:98:36:c1:e2:3b:
1c:cc:68:ff:25:a3:bd:04:c2:5e:ad:0f:48:5d:cd:60:ac:d4:
d0:2a:22:4e:04:48:6d:1c:19:2b:73:5a:ad:be:fe:0f:06:b0:
a2:c2:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org