Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/RPdnAzImtsdRUqidTbk13jvPXqw.roa
File: RPdnAzImtsdRUqidTbk13jvPXqw.roa (raw, json)
Hash identifier: t8xafoPIDv+mzJMOptheYt/NEm9thH221ECvqUVGLvc=
Subject key identifier: 44:F7:67:03:32:26:B6:C7:51:52:A8:9D:4D:B9:35:DE:3B:CF:5E:AC
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 0A55
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/RPdnAzImtsdRUqidTbk13jvPXqw.roa
Signing time: Tue 07 Jun 2022 10:05:38 +0000
ROA not before: Tue 07 Jun 2022 10:05:38 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 59077
IP address blocks: 2401:3480::/36 maxlen: 36
2401:3480:2000::/36 maxlen: 36
2401:3480:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2645 (0xa55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jun 7 10:05:38 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=44F767033226B6C75152A89D4DB935DE3BCF5EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e4:c8:81:f1:b9:36:f5:67:f8:04:a8:d2:99:
ac:54:e5:a3:c7:35:1b:29:10:46:fe:b8:08:e6:8b:
53:26:a6:12:30:9b:95:6f:78:61:79:7b:de:fa:d2:
27:cf:fc:8f:f0:0d:a0:0b:10:f2:a8:6d:a1:ee:b8:
06:44:40:35:8d:a2:57:f1:cb:79:49:93:31:60:bb:
1b:ff:f6:a2:ca:48:4f:8a:64:2a:e4:3a:f1:51:d7:
6e:2e:fc:87:c6:ef:3d:02:31:34:ff:e8:81:be:d3:
68:61:b3:6e:f2:49:4d:93:69:6d:69:fc:dd:f3:1d:
90:23:92:ef:1f:83:95:b9:9e:56:c3:fe:1c:a1:cb:
57:d6:1f:7b:b5:b3:98:95:8a:88:d3:2f:7c:93:03:
5b:70:d4:9f:75:ba:12:2d:32:63:e6:e2:90:3d:0d:
c1:d2:d5:0c:29:8e:9f:7b:df:13:10:0a:c5:07:95:
57:4f:15:d7:a5:b8:43:ef:a7:00:dd:d3:cc:16:a2:
a1:ab:bc:30:70:20:db:72:43:a4:f2:1f:ac:e6:5a:
b6:31:ea:60:88:4d:90:99:4e:95:9f:20:48:dc:2a:
2d:5a:69:84:f8:93:94:cf:c1:70:c8:cd:fc:6f:e1:
06:f8:b3:73:91:6a:4b:9d:40:31:1f:4a:a2:a8:0f:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F7:67:03:32:26:B6:C7:51:52:A8:9D:4D:B9:35:DE:3B:CF:5E:AC
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/RPdnAzImtsdRUqidTbk13jvPXqw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3480::/36
2401:3480:2000::/35
Signature Algorithm: sha256WithRSAEncryption
9b:12:e2:44:1d:3d:02:dd:45:39:24:e9:27:cb:52:1a:75:13:
e9:6a:7d:b4:38:c4:90:12:2e:c5:15:60:6f:04:c0:4c:b0:5c:
92:07:cb:07:fb:89:a4:65:dc:e9:b6:34:a6:27:b8:22:6a:9a:
53:3e:23:c3:be:fd:57:f4:a3:96:61:26:94:2c:c3:3a:b4:78:
4f:47:17:80:1b:49:fb:3b:03:16:cd:37:4a:c2:ce:63:b7:10:
f5:de:ff:d0:0a:13:dd:26:8a:69:c7:2e:23:f6:3a:63:39:5b:
a4:aa:d9:71:49:88:99:93:d1:b9:97:05:29:10:04:76:97:6e:
64:8b:a2:b5:98:c6:6d:fd:67:fb:ed:13:7e:e5:b9:41:86:c3:
ca:05:ff:70:18:ee:05:db:a0:fd:3a:c0:1b:ce:a0:0c:ae:01:
16:f0:4b:e3:78:65:64:8f:b1:88:55:04:9c:f2:91:e9:5e:d2:
73:15:d1:e7:42:4d:14:d8:4c:53:22:2b:79:c3:04:40:17:3e:
f2:7c:fe:7b:5a:57:bc:1a:6f:f1:64:0e:7f:16:fa:d0:00:39:
55:c9:3c:47:9c:03:7b:bf:ec:3f:6b:15:3d:df:7c:4f:4d:c3:
f6:c1:4b:4f:04:10:d0:25:50:69:fe:36:4f:c6:e8:c4:4d:a2:
8d:77:1f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org