Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/cVoQDix8GdUK66QL9UnK3ERruZs.roa
File: cVoQDix8GdUK66QL9UnK3ERruZs.roa (raw, json)
Hash identifier: qqjDGY18l8XEVkWGW2f78g5iG6mlm7R+9+MMWGFJ8Rk=
Subject key identifier: 71:5A:10:0E:2C:7C:19:D5:0A:EB:A4:0B:F5:49:CA:DC:44:6B:B9:9B
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18B7
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cVoQDix8GdUK66QL9UnK3ERruZs.roa
Signing time: Fri 17 Jan 2025 01:25:27 +0000
ROA not before: Fri 17 Jan 2025 01:25:27 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 50983
IP address blocks: 2403:1b80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6327 (0x18b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=715A100E2C7C19D50AEBA40BF549CADC446BB99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:4d:3c:f6:6e:16:f4:ae:53:cb:05:8b:16:
86:36:a3:3d:3d:ab:f0:b4:2a:06:65:e1:ff:5e:a7:
20:82:75:cc:82:a8:4e:31:57:d7:09:7e:ee:e9:87:
d5:4a:b4:1b:d6:57:c0:29:23:fd:b0:f3:bd:34:e6:
cb:70:55:30:3b:bd:25:33:02:2d:1f:e2:ef:9c:ec:
a3:45:bd:79:4c:ef:3e:16:5e:d0:11:3d:7d:91:8c:
da:55:0a:2c:f4:47:5b:36:8d:d3:2e:5c:ce:b6:cb:
c2:26:70:91:1f:61:10:0c:1f:2d:61:b6:15:23:d3:
6f:f3:f5:6f:9b:d8:7a:18:9d:f2:48:53:ef:5e:62:
af:20:fc:fe:38:71:3e:69:b3:33:d8:a1:e5:ba:33:
01:02:86:79:55:0f:99:96:0c:cb:b6:10:83:d3:d2:
37:80:ea:d3:ac:1d:14:fd:1f:29:36:c2:3a:7d:30:
36:ce:61:34:ea:62:32:12:f2:dd:fd:b7:b9:69:82:
56:eb:16:d5:23:4a:b9:a2:ca:a3:cb:f4:81:92:df:
f3:bf:89:47:a7:f3:93:88:0e:fa:e6:d8:4b:91:80:
74:96:75:a3:d8:fe:9e:a4:bf:3e:f3:e8:4b:d1:f6:
96:9b:61:84:0f:44:ca:c5:04:d2:a1:2a:c4:a2:44:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:10:0E:2C:7C:19:D5:0A:EB:A4:0B:F5:49:CA:DC:44:6B:B9:9B
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cVoQDix8GdUK66QL9UnK3ERruZs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
90:9d:c8:4a:78:2c:7e:fc:21:93:55:93:5d:cb:b0:64:0e:f7:
c4:81:b0:49:09:c3:8a:12:35:f1:84:d7:67:f6:26:dd:0e:d8:
c5:b2:2e:d5:d3:e6:49:ba:6a:ce:a9:2d:aa:08:14:52:50:19:
50:3a:a9:f6:c1:6c:58:08:6f:c3:eb:b4:c1:15:aa:ca:15:e7:
a3:da:33:35:c5:0e:d8:37:71:63:ff:84:d8:cc:01:e5:73:57:
68:6f:7e:b2:4d:cb:84:e1:a2:89:4a:c4:30:3e:c0:ce:81:24:
54:1b:b5:86:a2:fa:63:90:96:9c:a4:0e:19:ae:67:ec:c8:74:
83:a9:2b:4a:d6:3a:b4:b9:07:5b:3e:b3:dc:df:fd:02:74:4b:
2a:6d:21:e4:36:30:13:1d:b9:99:38:82:82:bd:15:1c:90:68:
5d:ec:52:3f:a5:53:31:66:dc:cf:18:9b:26:30:9d:63:90:e2:
5e:18:6d:24:41:50:1a:9d:41:ab:06:12:e5:a4:b1:6f:4f:24:
72:9c:c0:38:de:31:52:49:77:e7:c0:eb:ff:c0:f9:f2:d7:0c:
49:c5:b6:fd:fd:3d:68:fc:98:a4:5f:d5:b3:a5:c3:a4:3a:f3:
b1:cf:2f:c3:9e:3d:31:db:09:f5:dc:be:f4:42:ed:e4:50:80:
79:b7:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:02:43 2025 by rpki-client