Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/wtgcETODt1wVJGDo0bBGd8vGZYU.roa
File: wtgcETODt1wVJGDo0bBGd8vGZYU.roa (raw, json)
Hash identifier: FkNj5Tk8WowzlQZOM9bc+3BuSD6vhcDgWP9NxLo0kyg=
Subject key identifier: C2:D8:1C:11:33:83:B7:5C:15:24:60:E8:D1:B0:46:77:CB:C6:65:85
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 2433
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/wtgcETODt1wVJGDo0bBGd8vGZYU.roa
Signing time: Tue 10 Jun 2025 01:39:03 +0000
ROA not before: Tue 10 Jun 2025 01:39:03 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9267 (0x2433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 10 01:39:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C2D81C113383B75C152460E8D1B04677CBC66585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:ff:94:22:89:37:ad:f5:cd:d9:af:07:c9:
0f:48:cf:1a:f4:10:c5:5a:30:11:a4:7a:43:93:35:
27:12:39:18:37:b2:d6:02:05:eb:f5:3b:7d:da:74:
1b:13:67:49:e7:a7:10:d4:8a:62:f5:20:13:58:9e:
46:79:5e:73:2a:7f:91:d0:cb:f0:3d:31:fc:20:df:
2c:27:ec:01:1c:c1:dc:fd:04:72:4a:3d:36:bc:cd:
96:05:d9:d3:c4:5b:f4:f8:f5:8e:40:5f:ff:2c:26:
42:96:2b:c5:c7:01:90:9b:7d:02:70:ed:42:71:a0:
78:b9:a4:06:1d:36:fa:05:17:d4:13:d0:24:85:b2:
6c:db:f2:fb:95:e6:f8:4e:04:b3:4f:83:f6:c9:1e:
17:75:58:d8:44:71:74:ac:1e:20:93:f0:a6:95:6f:
16:e8:84:82:12:91:d4:53:d9:a8:e9:bb:1a:3b:01:
17:e5:a5:34:db:65:87:4c:25:da:25:e2:ae:5a:f0:
99:94:c4:bb:cb:2d:75:7c:4c:0a:81:3a:6c:aa:cc:
a0:ae:2c:ed:21:90:07:11:9d:f4:06:5a:08:1a:6b:
98:80:56:34:83:92:a6:99:b8:b3:28:5f:d9:e7:58:
7e:91:93:a0:ec:5b:65:eb:5d:31:11:d4:a3:6c:e3:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:1C:11:33:83:B7:5C:15:24:60:E8:D1:B0:46:77:CB:C6:65:85
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/wtgcETODt1wVJGDo0bBGd8vGZYU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
7d:7e:c3:36:1f:fe:16:cb:45:39:ed:9a:ef:b4:f9:6f:89:22:
3d:e1:42:3f:01:19:08:91:99:ad:e6:8c:14:66:d3:5f:2a:c3:
32:d4:31:86:87:dc:dc:25:54:dd:f6:fb:32:bf:35:36:a0:23:
0b:a2:ec:d9:28:ef:dc:ba:31:b3:c0:6d:5b:40:f1:cc:8b:06:
2f:0f:6a:9a:52:61:8e:9a:b6:ef:21:76:4e:84:06:7a:99:1b:
b0:1b:ff:e4:30:9e:54:24:aa:8d:03:07:d9:30:eb:63:c3:93:
60:73:1d:ab:a2:ba:3e:fa:1b:e3:ae:53:4f:8f:ba:b6:55:18:
98:40:40:d0:9c:f1:45:d7:74:40:a7:94:3d:b6:3b:2d:c8:b8:
aa:a1:60:ee:8f:fc:d7:d7:64:ee:8b:74:93:8f:cb:a8:48:37:
76:32:2d:4b:5d:45:a3:8c:42:9e:dd:7e:0f:35:e3:2b:cf:e8:
3e:ef:93:11:43:f8:b4:41:1e:a3:f5:25:54:a7:c4:ac:ae:cf:
4c:a7:63:89:6c:d6:06:21:18:0e:ca:15:0f:02:2c:9c:7f:ea:
68:a8:81:45:38:5b:b4:c2:9d:c4:da:7a:26:63:a4:19:c1:ce:
2e:19:2d:cb:be:75:8e:d0:58:11:72:6c:06:c9:8a:10:e6:f4:
39:c4:ff:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:46 2025 by rpki-client