Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/DmIjqsEP1piPyteKL_AFdbmqZ6Y.roa
File: DmIjqsEP1piPyteKL_AFdbmqZ6Y.roa (raw, json)
Hash identifier: JKM3JbUzp8Tp8W8FeRJcZ36tbe3l8DuRQx0dg+sgrBI=
Subject key identifier: 0E:62:23:AA:C1:0F:D6:98:8F:CA:D7:8A:2F:F0:05:75:B9:AA:67:A6
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 2018
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/DmIjqsEP1piPyteKL_AFdbmqZ6Y.roa
Signing time: Fri 17 Jan 2025 01:24:05 +0000
ROA not before: Fri 17 Jan 2025 01:24:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 212237
IP address blocks: 2403:6380:31::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8216 (0x2018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jan 17 01:24:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0E6223AAC10FD6988FCAD78A2FF00575B9AA67A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:90:c6:45:dc:86:af:e0:0b:4d:14:8a:dd:
74:67:19:cb:66:0f:7d:3c:9b:b5:d7:20:f5:ec:f7:
a5:32:cb:18:31:9a:35:ad:29:b1:30:8a:d8:bb:27:
b9:6a:5d:50:82:8d:70:fe:07:2a:33:84:d9:02:ed:
f4:c7:49:9b:77:9c:83:c8:43:f3:b5:25:18:96:1a:
17:25:e2:d4:8b:2e:ae:e3:cd:98:15:e7:1a:92:df:
c3:3a:88:89:ee:52:4d:4b:87:bf:d8:9a:ca:f7:5b:
0b:8b:5e:0a:a7:5e:c0:fe:b5:b6:4e:e1:94:89:3c:
c2:32:22:2d:65:71:97:d2:76:55:9b:20:dd:74:0e:
66:46:ae:45:dc:1f:0c:13:46:47:6e:3c:d4:e2:ca:
a0:13:2c:4d:b4:16:58:d7:fe:27:72:0b:35:af:72:
93:3f:36:3a:fb:42:17:35:9c:0d:36:2b:46:d8:93:
03:9d:46:4f:8e:ab:e9:7a:55:0d:7d:8d:d8:bb:f8:
2d:d4:e0:12:08:c1:bc:f6:25:42:72:b0:54:42:67:
72:ab:1a:65:3e:bf:bb:b5:0e:21:91:9f:e3:f7:bc:
d2:77:29:b9:eb:29:60:e3:95:e0:76:18:5c:e8:5e:
43:b3:e1:48:b4:af:ea:57:14:9a:58:75:30:86:84:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:62:23:AA:C1:0F:D6:98:8F:CA:D7:8A:2F:F0:05:75:B9:AA:67:A6
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/DmIjqsEP1piPyteKL_AFdbmqZ6Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:6380:31::/48
Signature Algorithm: sha256WithRSAEncryption
a6:b3:c9:5d:c6:0d:54:cd:29:1b:f1:a1:e9:d1:62:af:88:dc:
a3:ee:52:55:8b:45:e4:db:39:54:ee:aa:ac:35:aa:32:11:b6:
dd:5c:c0:43:45:93:e7:14:33:6c:46:04:1c:ef:8d:a2:17:cd:
73:3e:f9:f3:a3:ad:cc:42:61:04:8d:f2:ea:be:1f:96:c1:93:
7c:5b:d8:eb:8f:ce:66:49:f7:bb:4a:4e:c6:51:2b:f8:2c:ad:
be:f6:59:26:25:ae:80:4a:62:2a:ed:44:32:7d:4d:ee:e8:7f:
11:47:5c:89:f5:fa:dd:0b:aa:9d:54:a1:00:83:55:23:ed:cf:
cb:6e:be:70:a6:8a:02:73:fd:01:43:a7:de:de:ed:62:22:39:
1d:0c:19:48:6d:05:e7:a3:d5:75:61:1b:80:67:2d:e7:f5:8f:
22:67:dc:9a:20:f7:2a:ed:a3:a9:fa:87:c0:36:5a:af:d7:29:
99:5f:31:99:75:c4:01:17:23:87:e6:18:3c:04:06:bd:aa:cb:
8e:77:b2:a3:02:28:8b:0d:08:ce:f4:bd:b2:1f:31:69:30:c9:
b5:67:de:33:65:91:3e:ae:48:16:88:5b:59:2d:b3:ef:5d:8b:
62:38:f7:d0:05:c9:dd:f4:bb:71:23:ce:2e:b5:07:ab:c9:dc:
0a:ae:f3:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:51:01 2025 by rpki-client