Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/5u4Re8Jlt7-zOLLJT6wEDzcOG7I.roa
File: 5u4Re8Jlt7-zOLLJT6wEDzcOG7I.roa (raw, json)
Hash identifier: 8WSBrR3BdZoQsP107VrxbQLRdD00ZPUw75mkF+2svYY=
Subject key identifier: E6:EE:11:7B:C2:65:B7:BF:B3:38:B2:C9:4F:AC:04:0F:37:0E:1B:B2
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2252
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/5u4Re8Jlt7-zOLLJT6wEDzcOG7I.roa
Signing time: Fri 06 Jun 2025 17:38:49 +0000
ROA not before: Fri 06 Jun 2025 17:38:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8786 (0x2252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 6 17:38:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E6EE117BC265B7BFB338B2C94FAC040F370E1BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:76:e8:72:01:65:a3:4f:03:e0:3f:9d:82:
cd:d6:e9:73:9d:3b:ba:d4:f1:50:39:39:f0:ba:79:
0c:d8:86:bd:f0:03:66:45:7d:37:9a:34:b9:62:e6:
ca:c2:89:7f:73:45:b6:6d:72:d3:31:7f:40:db:7d:
ce:4d:2e:36:b0:34:37:2d:70:3b:c2:f6:7b:fe:d3:
4c:c3:34:17:64:77:80:cc:51:d0:df:a4:7d:95:e6:
39:5d:8b:02:9a:40:49:13:42:ec:9b:90:9f:22:e6:
cc:03:6e:bc:28:01:40:7e:d8:7e:45:02:d2:58:2a:
e9:a0:a9:7c:91:a5:5d:46:a2:04:1f:23:be:92:5d:
02:60:40:6c:6d:a1:22:3a:54:06:0f:15:df:0e:d0:
1d:be:e6:ed:2b:b2:f9:45:ae:21:38:21:5c:6b:6f:
da:48:49:f5:ff:4c:67:e4:51:2b:e3:a8:7e:6d:54:
09:32:4a:81:e1:ba:bc:54:6c:6c:dc:f5:91:a9:ec:
02:9c:de:45:9e:34:9b:33:58:00:c7:bc:d9:40:ec:
db:1d:a1:c3:2a:0e:29:d3:6f:39:e4:d1:dc:cb:28:
5d:0e:a1:40:67:9e:c0:eb:d0:c9:f2:cc:3d:5a:ab:
b3:89:e1:e8:ce:29:76:eb:73:69:ef:fc:f0:89:dc:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EE:11:7B:C2:65:B7:BF:B3:38:B2:C9:4F:AC:04:0F:37:0E:1B:B2
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/5u4Re8Jlt7-zOLLJT6wEDzcOG7I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
56:79:6d:aa:57:1d:0d:15:77:74:8d:2d:cb:47:bf:8e:9f:d7:
8f:79:00:68:e3:9f:d4:7c:6a:be:d0:36:70:99:f7:2f:32:a8:
81:d7:f2:1a:31:74:63:f8:bb:e1:66:c6:05:cc:1b:4e:60:9a:
f4:e8:03:1c:4c:59:04:65:8d:13:52:82:be:ae:12:98:1e:3a:
89:32:d6:5d:52:ad:e2:8e:a2:9e:9c:c3:f8:2e:62:7a:5b:61:
01:75:4e:e3:88:90:95:b9:b4:9c:0a:a3:71:04:33:e0:95:71:
cc:d8:c2:57:c5:da:1b:6c:f7:05:d6:e9:1d:5e:e5:f6:24:a4:
ce:10:64:70:84:a3:21:6d:de:82:42:1e:8e:26:a8:78:95:19:
20:f3:db:b2:49:5d:e4:49:4d:ba:52:fe:85:6f:33:23:a4:39:
4b:0d:30:69:5f:66:79:c2:1d:5c:ac:0a:70:40:65:02:a8:a3:
84:b6:e8:d0:6b:4a:f8:68:c9:52:5f:04:8a:ce:0e:6f:78:36:
4a:bc:65:67:2d:5e:13:c7:4a:0a:99:d6:e8:a2:3c:93:cc:67:
00:52:c8:be:63:bd:24:98:39:29:e1:05:4b:d9:26:42:7e:09:
57:a3:c5:bb:16:26:77:e6:44:3a:bb:0d:37:a2:65:4a:e7:d4:
e5:a6:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:07:05 2025 by rpki-client