Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/Vu7gpDVlWiePAXgf0pHp7u_cN9k.roa
File: Vu7gpDVlWiePAXgf0pHp7u_cN9k.roa (raw, json)
Hash identifier: +OZE90GJjEGLc0YSJ3MKSYZDq2hjWW252HrT6Aj+hKY=
Subject key identifier: 56:EE:E0:A4:35:65:5A:27:8F:01:78:1F:D2:91:E9:EE:EF:DC:37:D9
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1D83
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/Vu7gpDVlWiePAXgf0pHp7u_cN9k.roa
Signing time: Thu 03 Apr 2025 08:53:54 +0000
ROA not before: Thu 03 Apr 2025 08:53:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59033
IP address blocks: 2402:1440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7555 (0x1d83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Apr 3 08:53:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=56EEE0A435655A278F01781FD291E9EEEFDC37D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:48:f2:8a:b2:ff:b7:c5:78:bd:77:48:0e:
3d:0b:f8:cf:9b:ba:cd:7f:12:7b:28:cc:ac:ce:c9:
89:ac:dc:b9:5d:a0:5f:3d:bd:77:cd:8f:33:8b:7e:
04:45:da:0b:52:ae:96:b0:cb:a7:88:33:e5:46:06:
00:ff:a4:a2:9c:d1:90:4c:5f:54:fb:44:75:03:e9:
99:f7:82:9a:f9:64:9c:6d:d7:80:c9:32:3d:dc:71:
e9:0e:2e:70:40:8a:29:22:0c:62:1c:63:39:a5:a9:
73:29:8d:bf:0b:4f:f4:85:58:4b:87:18:10:d8:19:
6a:19:e4:80:2c:74:fa:17:f8:e7:9e:ed:18:18:87:
23:36:f3:13:a7:c1:9d:35:d1:27:c9:83:3b:ef:58:
03:96:49:5d:94:59:64:c0:44:df:d9:e1:a5:3b:e6:
94:cd:5d:a9:71:ca:ea:5c:eb:c8:58:1b:86:54:ae:
e0:34:d8:88:81:e5:a4:ed:5a:63:09:e1:9a:23:fd:
9f:10:ba:3a:90:d7:ce:7e:cc:05:1b:49:da:08:91:
6c:cb:37:71:20:8f:62:67:bf:61:04:7d:ee:f2:00:
1d:8f:68:50:81:5a:f6:c4:be:09:0f:a5:bd:6c:f2:
f9:d0:17:06:46:a2:c5:13:cf:ac:5e:ff:fe:2c:bc:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EE:E0:A4:35:65:5A:27:8F:01:78:1F:D2:91:E9:EE:EF:DC:37:D9
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/Vu7gpDVlWiePAXgf0pHp7u_cN9k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
9f:40:59:db:9b:c8:36:31:03:a2:96:18:3d:7c:6f:5a:0f:9a:
f9:3b:f5:d4:6c:9e:7d:af:61:9f:06:bc:19:22:3c:fd:13:69:
28:a7:d1:da:93:cc:8d:fd:b8:1d:bd:a8:fb:f6:40:a1:68:b8:
9a:12:25:37:ec:10:5c:66:9e:09:f8:7b:c7:dd:e6:1f:e8:19:
75:2d:e9:64:56:b2:37:6e:e4:57:17:87:43:83:8c:39:e2:8a:
d7:5f:63:01:30:c3:8a:67:75:5b:93:10:25:0d:69:8e:6b:07:
c9:95:dd:ca:18:ce:c5:f5:b7:52:55:18:76:11:e6:39:f8:af:
b2:a7:5b:53:03:e2:f5:8f:03:8d:b0:ea:f9:9b:47:14:45:73:
7b:ea:07:87:b4:6e:b7:ec:53:81:15:af:df:6a:44:90:6a:2f:
a6:44:12:aa:a6:17:12:26:db:ea:94:68:fd:65:1c:db:17:47:
a1:62:ad:51:50:9f:67:66:1e:b2:c3:20:0e:43:e2:80:b7:36:
99:15:a6:b0:9a:ba:cd:cf:fc:72:64:9f:66:3c:79:2e:2d:0f:
02:ea:30:95:cb:87:10:4b:1b:1e:e5:fb:f8:0c:47:ab:b1:2a:
61:c0:94:80:d2:d8:50:79:6e:51:65:01:a1:54:7d:ff:21:4a:
dc:d1:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:14:58 2025 by rpki-client