Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/ZjUAXw2vJyrv-E0IOVs4xXxpF_o.roa
File: ZjUAXw2vJyrv-E0IOVs4xXxpF_o.roa (raw, json)
Hash identifier: gJGxh859+jE7wgqaAF8/RndQfrxprblkT1TjJF3sT54=
Subject key identifier: 66:35:00:5F:0D:AF:27:2A:EF:F8:4D:08:39:5B:38:C5:7C:69:17:FA
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1D81
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/ZjUAXw2vJyrv-E0IOVs4xXxpF_o.roa
Signing time: Thu 03 Apr 2025 08:53:53 +0000
ROA not before: Thu 03 Apr 2025 08:53:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63689
IP address blocks: 2402:1440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7553 (0x1d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Apr 3 08:53:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6635005F0DAF272AEFF84D08395B38C57C6917FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:d0:9b:51:b0:ea:c2:99:3a:0b:4a:2e:9f:
ea:36:b0:37:eb:ca:56:fa:50:48:a4:33:59:ae:8c:
3b:c4:22:ca:a4:e5:ad:2c:a9:ef:ee:6b:48:2c:f0:
d3:ea:a0:86:c0:6d:78:99:50:77:51:f9:67:52:10:
6c:fc:3a:0c:b8:54:b3:2c:4d:b6:07:21:04:63:84:
e1:e1:6a:ba:88:c1:2c:c9:e9:02:ba:24:72:90:74:
a9:5a:9f:5d:9c:6a:53:4d:62:08:6d:85:86:7e:6b:
1a:9a:2f:19:a4:b9:ec:98:b0:c8:e8:1f:89:ea:41:
28:8a:f0:36:22:14:04:04:80:17:6d:de:91:79:5d:
89:50:73:76:16:27:22:8f:6a:ed:0b:81:e1:ae:34:
f3:14:b6:80:5f:95:70:37:f4:d3:f5:f3:56:c8:91:
e6:f7:5d:66:0c:be:5e:65:bc:e4:ae:8c:59:83:f2:
12:68:3a:59:e4:6a:3c:ad:ff:ca:c8:ae:a2:04:ed:
22:af:9e:9f:c4:51:ba:d2:53:7f:b9:6a:76:cd:dd:
80:0f:ef:50:bb:d2:09:f5:c2:f7:6e:c8:4d:13:75:
a9:ff:21:63:8d:bd:2a:90:5b:69:59:54:cb:a5:7f:
10:49:78:ee:9c:6d:c8:58:cd:54:b6:12:f3:f7:77:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:00:5F:0D:AF:27:2A:EF:F8:4D:08:39:5B:38:C5:7C:69:17:FA
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/ZjUAXw2vJyrv-E0IOVs4xXxpF_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
59:73:e2:53:6e:35:bb:b9:8c:71:bb:72:46:20:d5:7c:65:56:
c1:63:27:16:78:0c:04:4b:48:c2:a0:68:ad:5f:4b:1f:d0:7b:
c9:bd:f6:19:8f:c6:cf:9f:46:f6:59:40:df:4a:75:4a:b9:a1:
85:a1:db:33:c4:7c:1e:88:63:2b:dd:88:33:1e:19:fb:a8:b2:
b1:c3:f9:f7:1f:74:b8:01:fa:7d:23:d1:99:5f:da:bd:bd:2e:
a5:49:0c:5b:bf:2f:76:c2:2b:64:91:8a:f3:33:0d:63:27:d9:
a1:d7:3d:89:74:81:16:9b:bc:aa:a6:04:4c:e6:d1:ab:43:52:
34:6f:ef:28:76:ac:a2:1f:92:c6:a9:90:76:2f:f5:a0:8f:50:
b6:48:bc:3d:6c:96:4e:bd:96:80:6f:7c:eb:1c:d1:b8:61:07:
bc:17:36:d7:66:e3:14:8d:f4:51:14:ea:82:1d:8b:1d:1f:6c:
10:dd:42:3a:0c:21:9f:c0:92:aa:1e:0f:c8:66:70:f2:cb:a1:
fb:de:6c:00:a5:9b:5f:a9:ea:99:d4:e3:5d:cb:e3:9d:86:e9:
f9:78:9b:c6:ce:3e:2b:a2:8b:9c:9e:1f:e6:ab:20:a4:c0:5e:
c7:54:43:76:c5:aa:01:f7:32:08:9e:89:dd:15:ad:b7:54:ec:
c9:1a:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:37 2025 by rpki-client