Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/mOlOYVeXoOnbtY725neUJBLrl78.roa
File: mOlOYVeXoOnbtY725neUJBLrl78.roa (raw, json)
Hash identifier: sge3gz9ALLLdD8DcIr9/BoPZD+dkvB6/T+BYYJ4RhhU=
Subject key identifier: 98:E9:4E:61:57:97:A0:E9:DB:B5:8E:F6:E6:77:94:24:12:EB:97:BF
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0F
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/mOlOYVeXoOnbtY725neUJBLrl78.roa
Signing time: Tue 16 Apr 2024 01:47:36 +0000
ROA not before: Tue 16 Apr 2024 01:47:36 +0000
ROA not after: Tue 15 Apr 2025 07:02:50 +0000
asID: 7641
IP address blocks: 2403:600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Apr 16 01:47:36 2024 GMT
Not After : Apr 15 07:02:50 2025 GMT
Subject: CN=98E94E615797A0E9DBB58EF6E677942412EB97BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:14:35:43:a0:4e:5e:eb:8d:45:8d:34:aa:
ad:70:4a:59:9c:7b:93:3a:8a:fa:b7:d1:a2:4f:0f:
44:08:24:0b:68:68:a2:95:46:5b:54:5b:4b:09:3a:
c3:d9:4f:c4:b5:6d:b7:4a:ae:e5:31:8d:a2:9c:69:
de:83:87:f5:48:3e:08:50:3d:10:4a:03:f2:c8:c5:
cd:43:0a:80:3f:93:88:f4:dc:b9:19:f3:fa:21:cb:
d3:d1:bf:fe:0e:af:44:67:67:5f:52:1b:33:76:e3:
5e:75:2d:8b:c2:14:e6:43:14:eb:ae:9a:94:f6:3b:
77:89:33:87:47:ae:bc:bd:a4:9f:f8:0c:94:e0:ab:
04:1d:e2:ac:08:40:77:a5:dd:32:06:d3:0a:a2:08:
f1:bc:b7:b3:e0:6c:51:57:8d:52:6b:eb:7f:a8:96:
7c:54:90:fc:59:e1:33:ea:25:3b:b9:b4:8e:9a:ee:
62:df:c8:c4:2c:06:be:a2:ea:cf:e7:28:16:46:1d:
e2:b6:37:3e:45:ef:67:b9:51:5d:4a:02:f4:e7:b3:
ab:40:43:07:3d:e7:d2:85:e1:ff:76:29:a7:52:42:
22:de:9d:15:68:ad:2e:e6:fe:fe:c6:cd:5d:6e:db:
36:9c:0d:c6:ec:ab:f3:17:5e:d4:c2:a2:e3:e5:c0:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E9:4E:61:57:97:A0:E9:DB:B5:8E:F6:E6:77:94:24:12:EB:97:BF
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/mOlOYVeXoOnbtY725neUJBLrl78.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:600::/32
Signature Algorithm: sha256WithRSAEncryption
56:a9:16:07:e2:be:f8:d2:ad:e9:50:27:b9:53:58:e9:a7:c6:
ae:37:79:df:54:c1:74:54:e2:4e:36:f4:8b:0f:99:ef:ed:85:
ed:c2:fd:9e:5a:ed:02:86:1b:ea:e4:3b:9b:fe:d1:69:a0:40:
97:cf:03:e3:a9:1a:5c:95:79:50:38:6d:08:71:c6:21:41:ce:
c0:3f:4c:ec:ef:b0:43:c3:93:0e:ad:ce:ce:9c:24:cd:bb:f7:
84:c0:b0:8f:46:a4:c6:1b:26:48:d8:20:3a:d4:d1:13:da:09:
c4:91:e4:e2:c1:0a:98:33:b9:29:10:b2:8e:63:1a:df:d8:bd:
8b:ec:2a:6b:e1:b3:d6:cd:a0:76:d4:f6:d9:45:a7:7b:58:9a:
72:12:76:e8:70:61:e6:a2:11:4e:3a:77:18:a3:08:ee:13:50:
84:ab:2a:6d:37:64:28:54:c7:5f:6a:be:ed:48:8b:29:1e:1c:
bc:cb:e8:8e:e7:a9:00:ac:bd:35:0b:c7:84:d4:6f:41:03:c6:
2b:4e:b1:f4:f9:3d:0f:41:10:02:41:cc:24:d7:89:51:89:61:
85:30:33:9f:41:80:ce:e3:b4:33:4a:70:3e:3c:2d:08:f2:f4:
16:26:f4:dd:d2:f4:41:05:06:98:57:64:fd:2d:59:97:ab:3e:
ce:29:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 12:16:21 2024 by rpki-client on console-ams.rpki-client.org