Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/-3yT0_lt0soloseVQ2_MOx1MX2Q.roa
File: -3yT0_lt0soloseVQ2_MOx1MX2Q.roa (raw, json)
Hash identifier: HOyUmSzgMMgFat+nGykFv3eJUKtJQOKIVGShLfWgMNU=
Subject key identifier: FB:7C:93:D3:F9:6D:D2:CA:25:A2:C7:95:43:6F:CC:3B:1D:4C:5F:64
Certificate issuer: /CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Certificate serial: 1DF9
Authority key identifier: 47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/-3yT0_lt0soloseVQ2_MOx1MX2Q.roa
Signing time: Fri 17 Jan 2025 01:26:17 +0000
ROA not before: Fri 17 Jan 2025 01:26:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59000
IP address blocks: 2401:5180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7673 (0x1df9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Validity
Not Before: Jan 17 01:26:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FB7C93D3F96DD2CA25A2C795436FCC3B1D4C5F64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:aa:35:13:55:fa:4b:7e:13:9d:e0:01:ac:
76:6e:a6:48:bc:34:4c:e7:6d:7f:63:c7:8a:4a:cd:
42:6e:b7:94:e2:c3:49:ae:83:c2:7a:c3:13:42:9d:
8f:27:60:19:a2:d2:d6:cd:10:8e:7e:f0:8e:0f:77:
0f:9c:d0:1d:3d:dd:c4:7a:38:a7:96:c8:8e:ef:ae:
f1:b2:7b:a1:e1:aa:2b:5c:ef:57:b8:a8:2e:c6:87:
47:f0:9d:7f:e1:d7:b8:2e:c4:25:38:76:5d:00:fc:
cc:54:ac:08:c0:a2:08:be:94:20:6e:82:fa:d7:6b:
bc:32:ee:9a:9e:2a:17:c9:36:7d:75:af:ed:f7:b9:
39:7b:3a:f5:13:df:9d:2a:53:65:49:24:7d:77:26:
e2:11:97:b3:1d:d9:da:54:b3:d2:c7:77:9c:6f:55:
27:1d:97:ff:11:32:9c:45:24:ef:f2:21:da:4e:09:
31:1c:a1:33:26:70:89:6f:5c:19:dd:67:77:f1:61:
70:80:43:7b:3e:71:e0:31:c1:1b:f3:d8:7b:ec:12:
21:ee:3d:c6:4f:21:b9:75:42:83:9a:14:02:7e:b2:
57:09:02:0b:64:d9:e9:87:6f:ec:88:e0:6f:6d:de:
1a:93:ca:5a:f6:81:4e:1a:82:10:eb:16:3c:00:f5:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7C:93:D3:F9:6D:D2:CA:25:A2:C7:95:43:6F:CC:3B:1D:4C:5F:64
X509v3 Authority Key Identifier:
keyid:47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/-3yT0_lt0soloseVQ2_MOx1MX2Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:5180::/32
Signature Algorithm: sha256WithRSAEncryption
2b:32:0b:7d:92:d7:dd:1f:8d:27:34:01:da:06:b3:40:ea:c4:
e5:27:16:82:9b:4b:09:68:08:28:c6:a1:65:28:04:90:94:f0:
9a:d9:b6:61:fd:2b:e5:9a:aa:be:7a:71:e2:9d:49:31:5c:28:
48:39:70:6c:e2:18:2a:41:77:b0:9b:8f:2f:65:fd:61:b0:f6:
38:42:fe:66:09:01:4b:30:99:cd:36:0f:71:74:48:e1:67:e7:
e6:a9:12:87:8e:7c:73:b4:6d:bd:8e:ab:2e:3b:d6:71:24:4b:
c9:2c:92:0d:f5:39:ed:8b:88:c6:9f:5d:6b:bf:d2:f8:53:42:
b6:a9:92:86:a2:cf:e7:ed:a1:8b:ed:f7:65:66:db:e4:c7:63:
14:06:ba:f5:14:4b:44:7f:bd:e8:48:c7:7f:39:7a:37:33:f0:
28:e7:bb:17:f8:0c:44:97:d4:7b:68:86:09:c3:bd:5f:a0:a9:
4f:f6:72:89:c9:a7:00:d7:84:a4:5b:a0:f8:12:d7:45:7d:dd:
22:7f:18:67:91:0d:8d:9a:b5:c1:99:26:d1:38:b7:9c:ce:9a:
e2:60:c6:f2:d3:75:0a:a2:af:71:e5:01:6d:17:bb:dc:fe:3f:
fb:e9:2e:c2:7f:3d:fc:6e:be:83:d1:5a:69:23:5c:fa:fb:ae:
72:2b:26:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:29 2025 by rpki-client