Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/xsxZblScrv5MGFjEfMsCB0UV9_8.roa
File: xsxZblScrv5MGFjEfMsCB0UV9_8.roa (raw, json)
Hash identifier: fe7w2BYhQT4k89kIyj8VK35Y/ggTi+haDsUfgrYFNXc=
Subject key identifier: C6:CC:59:6E:54:9C:AE:FE:4C:18:58:C4:7C:CB:02:07:45:15:F7:FF
Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97
Certificate serial: 101B
Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/xsxZblScrv5MGFjEfMsCB0UV9_8.roa
Signing time: Mon 24 Feb 2025 05:01:16 +0000
ROA not before: Mon 24 Feb 2025 05:01:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63701
IP address blocks: 2407:4980::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4123 (0x101b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97
Validity
Not Before: Feb 24 05:01:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C6CC596E549CAEFE4C1858C47CCB02074515F7FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:f8:db:68:5c:e7:73:79:af:61:3b:df:6e:
c6:45:58:fd:32:30:d1:51:f4:8b:26:1e:4c:be:01:
64:19:2b:e7:2e:8f:dd:1b:79:d7:6c:08:55:3b:ac:
86:db:b0:f5:c6:de:66:bf:ff:fa:38:7b:0d:89:84:
79:1c:6d:40:d6:fd:fe:47:ee:9e:22:38:1d:76:10:
bf:e7:c5:01:e5:ab:66:ea:31:51:cc:85:ef:6f:65:
6f:4a:b3:a4:52:4f:9b:fb:fa:f8:9c:8a:0d:bc:a9:
3b:c3:d8:7d:42:a8:d1:95:3f:75:28:d8:1b:07:f9:
3c:a1:76:ed:48:c4:c8:28:26:6d:ff:a5:20:d6:dd:
14:c9:3b:41:17:05:bf:6d:6a:61:bb:4c:b5:46:83:
67:fe:b3:c0:a3:f7:b4:a4:e7:ef:0a:80:56:09:c8:
3d:f6:31:3a:0e:7a:c6:59:49:f5:37:c6:65:b3:bb:
30:b3:23:7c:3c:0f:6a:d1:5f:8e:37:fc:43:4c:1b:
da:5c:5b:e2:3b:1e:3e:98:c3:02:5f:4c:6e:7a:1c:
b9:ed:b6:d4:8f:aa:1a:0d:98:d7:82:b8:79:ff:0b:
da:f5:e9:1f:b2:a3:15:3b:05:7b:98:5e:b6:7e:1b:
1d:e9:64:bb:15:25:de:e7:95:28:35:b3:37:bb:e9:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CC:59:6E:54:9C:AE:FE:4C:18:58:C4:7C:CB:02:07:45:15:F7:FF
X509v3 Authority Key Identifier:
keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/xsxZblScrv5MGFjEfMsCB0UV9_8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4980::/32
Signature Algorithm: sha256WithRSAEncryption
0a:0c:94:7f:6f:f2:97:96:ef:bb:2a:d6:ff:56:d5:e0:6e:e2:
71:03:3e:ff:48:7e:47:b6:4d:be:02:d3:a0:28:a3:71:51:a2:
69:b5:b1:12:be:9d:8c:f5:49:97:f3:0f:c0:8e:29:a9:92:42:
be:98:a0:1f:9f:99:b7:6c:d2:dc:cd:40:65:f4:50:fd:5c:eb:
97:8d:bc:c5:45:6a:75:3a:2a:16:ff:05:6f:8e:41:af:33:c0:
20:13:84:48:a7:82:70:b6:99:af:7a:b3:d7:77:3a:03:76:24:
a2:8f:62:9c:6f:bd:25:3c:a1:09:1d:c8:36:ab:d8:30:b1:15:
ad:34:5d:ff:d2:b4:b2:a6:7c:70:0b:20:6e:b1:ba:39:0b:6a:
7b:86:c5:f1:d9:e8:39:ff:4b:cf:45:68:21:e2:a5:1c:2c:b8:
ed:0c:6d:45:b1:d2:0e:7d:96:c5:da:d5:d3:73:dd:e6:4a:49:
aa:17:1b:6e:ea:f2:55:27:79:81:05:6c:de:22:1b:76:5e:79:
74:74:df:cf:25:7d:17:f7:e4:89:96:aa:7d:0e:21:3d:43:7a:
cd:e1:b8:7b:b2:71:a9:c3:01:8e:32:ac:67:07:7d:33:b9:19:
b9:47:9d:33:31:89:dd:6d:fc:d6:7f:aa:f4:5c:bc:ae:6f:30:
c8:5c:9d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:31 2025 by rpki-client