Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/oed8Tlosroh-HEjKFL7ljpvar38.roa
File: oed8Tlosroh-HEjKFL7ljpvar38.roa (raw, json)
Hash identifier: E/YmAsJIXKibJl3R+dATO9pn0upR1NSoP0lW/JU0+tY=
Subject key identifier: A1:E7:7C:4E:5A:2C:AE:88:7E:1C:48:CA:14:BE:E5:8E:9B:DA:AF:7F
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1D82
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/oed8Tlosroh-HEjKFL7ljpvar38.roa
Signing time: Thu 03 Apr 2025 08:53:54 +0000
ROA not before: Thu 03 Apr 2025 08:53:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 132168
IP address blocks: 2402:1440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7554 (0x1d82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Apr 3 08:53:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A1E77C4E5A2CAE887E1C48CA14BEE58E9BDAAF7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:87:fd:a6:12:80:e9:98:67:6f:e9:9e:5d:
8d:ef:21:15:56:3e:bc:4f:ef:25:8e:99:e0:7b:ad:
57:57:84:7d:f8:29:44:74:eb:3c:c1:71:93:40:c9:
10:4c:75:12:7c:7e:74:72:56:0c:51:77:17:1b:15:
94:16:f6:3a:ba:6f:26:c9:ac:8c:b7:98:0b:49:4a:
ae:8f:f6:5f:2c:2d:a7:2d:04:6f:fb:85:16:bc:34:
36:24:49:d6:2a:7a:11:8e:2f:b2:e4:45:f8:f4:42:
1a:c1:92:6c:cc:07:dc:09:05:65:82:11:43:a1:34:
6a:4a:83:2c:4c:06:13:08:0e:1d:de:06:08:15:7a:
3f:b0:c0:30:b4:51:5e:df:e4:42:fe:45:13:95:f5:
5a:56:ea:97:98:d3:3b:b2:f8:6e:19:64:53:19:c3:
1c:25:c5:f7:dc:3e:5f:0e:34:99:4a:d7:3f:4c:e5:
f1:ed:66:f6:4b:21:5b:7c:8b:8f:18:e6:fb:f6:2e:
bf:42:4a:a5:d2:14:50:e7:29:cc:95:8e:61:b1:b6:
4d:91:f6:ec:f4:7c:64:b4:fe:76:de:2c:0b:5c:96:
bf:ba:e0:25:9b:96:a1:7e:d2:3a:28:d7:46:d8:31:
3d:56:22:3f:bd:1b:1e:3b:55:aa:1d:b8:50:19:85:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:7C:4E:5A:2C:AE:88:7E:1C:48:CA:14:BE:E5:8E:9B:DA:AF:7F
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/oed8Tlosroh-HEjKFL7ljpvar38.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
90:75:e1:dc:23:ab:67:69:60:ce:f9:d6:86:8b:6b:77:15:fb:
69:71:2a:6a:b7:5a:af:69:dc:de:e7:75:30:13:d3:12:19:f4:
5b:91:e9:a1:40:25:2b:1e:bc:b0:85:f7:b0:cb:da:db:c9:26:
a7:ad:fb:de:d6:45:e1:62:2c:9d:3e:e8:ec:94:a8:83:44:cf:
d0:87:99:12:4c:06:b2:13:43:83:4c:c5:fd:1e:29:d7:00:22:
4c:47:47:0d:82:54:72:fb:19:48:59:1e:8a:c2:8d:1a:55:0a:
26:e6:80:e9:b5:38:75:43:c7:be:18:a5:8c:12:f0:f0:08:77:
c3:6a:e3:2c:1b:f6:c2:1a:18:1c:84:67:4b:e9:16:bd:71:a4:
ba:b8:fa:54:68:e9:1c:97:00:e8:e0:30:9b:9a:fe:de:7b:33:
11:7a:97:7e:88:b4:fe:71:43:3e:16:f5:ad:1e:79:b2:10:c3:
60:6b:86:b6:3e:16:22:0e:da:aa:b7:e9:48:25:66:77:be:6a:
80:cb:78:01:8c:15:ba:48:6b:b6:3f:9d:d2:48:3e:d8:8d:df:
e7:ae:d0:bb:a1:71:c8:ba:97:5a:49:6d:40:8a:5a:03:d2:f0:
72:34:58:11:3a:e9:68:eb:e4:95:fc:e5:6e:09:7c:8e:71:e5:
16:0c:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:36:54 2025 by rpki-client