Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa
File: 1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa (raw, json)
Hash identifier: y1yapVOWcFRVM0HkMcu6W1MzSDLeXbZvTAbExv3iZIU=
Subject key identifier: D6:1E:07:B9:86:C2:6D:3A:94:6B:FD:ED:FF:10:6A:90:B6:D5:2B:72
Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial: 04
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa
Signing time: Tue 14 Jan 2025 08:18:19 +0000
ROA not before: Tue 14 Jan 2025 08:18:19 +0000
ROA not after: Wed 14 Jan 2026 07:53:29 +0000
asID: 17969
IP address blocks: 2401:7e00::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Validity
Not Before: Jan 14 08:18:19 2025 GMT
Not After : Jan 14 07:53:29 2026 GMT
Subject: CN=D61E07B986C26D3A946BFDEDFF106A90B6D52B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:81:4a:01:66:3b:21:c5:b5:00:3f:6c:85:66:
1a:09:1b:c0:68:69:96:9a:93:97:ee:b3:2c:a9:ef:
d1:c1:78:3a:45:8d:f5:63:74:65:e0:b8:71:77:4f:
95:60:d6:eb:fc:3b:ff:b1:1a:d5:48:8d:20:38:e8:
9a:ae:a7:c1:1e:11:ea:df:90:ba:db:1f:43:e2:6e:
f4:1a:01:69:c7:f1:51:b5:25:ad:31:86:da:ee:c8:
c9:76:e6:17:ee:79:28:25:28:af:74:e7:45:ad:b8:
e9:29:33:b9:b0:df:e3:26:81:df:22:af:68:00:12:
37:fc:50:8f:38:6d:9c:b7:8d:91:59:3b:76:b6:d0:
0b:de:a0:78:a7:4c:53:f7:87:6a:41:a9:0c:a6:5e:
60:88:ed:74:50:f8:ee:36:aa:dc:82:c1:53:1a:80:
ee:7c:d2:37:dc:0d:ce:25:b3:f6:4a:ac:c2:9e:4b:
30:50:22:c7:4d:99:cf:ea:f7:55:1e:9c:fd:4f:bc:
c8:cb:9a:f7:60:e5:75:d5:6e:25:18:f4:0a:3a:e4:
c7:90:3b:1f:3c:c7:7a:86:48:e1:84:96:23:26:0e:
78:f3:b4:c3:6f:88:25:0c:ae:7b:a3:1b:d3:cf:4d:
21:2f:ad:fd:10:d2:79:63:08:cf:4b:06:9c:2a:29:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1E:07:B9:86:C2:6D:3A:94:6B:FD:ED:FF:10:6A:90:B6:D5:2B:72
X509v3 Authority Key Identifier:
keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7e00::/32
Signature Algorithm: sha256WithRSAEncryption
6e:0c:9c:12:28:8a:5e:83:60:84:10:14:b4:a4:60:05:71:91:
28:aa:60:cb:2d:65:26:97:ce:e5:0f:6a:cd:ce:33:e7:fd:cb:
0d:13:99:f5:19:fa:8d:24:2e:51:f8:51:aa:8e:a4:18:4a:db:
ef:68:3b:49:98:16:5d:2f:b5:3e:bd:05:f1:45:5b:20:99:5e:
6d:ef:a6:fa:56:3b:55:37:ba:43:54:37:60:af:bc:15:15:54:
f1:cd:6e:f7:e9:f5:80:0e:c7:df:a3:75:ba:f6:1f:1a:64:95:
4c:e3:3a:a0:56:87:6e:c3:fc:4f:4f:e1:68:e8:d2:50:ce:63:
a5:fb:31:04:73:ff:f3:43:bc:d0:f8:26:ec:a9:22:a3:f3:b8:
30:6f:17:06:41:f9:6c:72:42:ff:2c:26:47:fe:e3:b2:3a:a6:
c1:e8:99:3a:01:95:a3:ef:25:43:ee:6f:60:a5:34:6a:f5:2a:
05:fa:86:3a:d1:31:bf:c4:76:8a:f6:3b:9e:b5:55:10:4f:16:
a0:97:ae:89:99:f1:6b:40:81:51:c8:7f:8a:35:2a:29:39:42:
41:3d:4d:71:10:ed:2f:39:8e:c6:19:e5:bd:97:95:ed:6e:a7:
59:8b:c3:f8:5b:0a:03:ce:06:be:9d:e4:cb:3c:93:f9:6c:96:
93:3d:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:54 2025 by rpki-client