Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/XPYIUyDnLRSes7GeVyB94AB9O24.roa
File: XPYIUyDnLRSes7GeVyB94AB9O24.roa (raw, json)
Hash identifier: aLE36WnV0gfnPcj2f32ypWtr3rhDy3JSuGaju+VwkFk=
Subject key identifier: 5C:F6:08:53:20:E7:2D:14:9E:B3:B1:9E:57:20:7D:E0:00:7D:3B:6E
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 1D87
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/XPYIUyDnLRSes7GeVyB94AB9O24.roa
Signing time: Thu 12 Sep 2024 11:20:01 +0000
ROA not before: Thu 12 Sep 2024 11:20:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 212237
IP address blocks: 2403:6380:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7559 (0x1d87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Sep 12 11:20:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5CF6085320E72D149EB3B19E57207DE0007D3B6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:c7:4f:ea:6e:22:ec:ff:80:f9:86:f4:ce:
46:89:36:12:b6:1a:91:35:e3:08:c7:70:8d:5e:85:
d2:08:de:51:4e:73:96:9d:6a:dc:14:52:40:fd:ba:
98:fb:f8:37:82:8a:4d:d2:0a:c3:5f:fe:2e:6e:85:
47:b6:da:54:85:d6:9f:32:49:3e:fe:35:57:cd:37:
0c:3e:7b:a7:7a:96:c1:59:c9:2f:74:10:ed:83:5d:
0c:d3:c1:e6:89:07:89:01:15:9a:dc:48:91:b9:f7:
d3:cd:c6:8a:33:6b:e3:08:3b:77:f6:38:ec:67:2f:
bb:fc:d9:12:34:ab:55:c8:4e:fb:8f:c3:af:2f:89:
fe:b1:91:aa:26:27:c6:7b:8f:52:28:38:2b:05:a9:
2b:87:25:6b:c2:d5:24:10:0b:0a:21:0f:05:8a:01:
45:75:96:5e:9c:90:d0:42:d3:24:b2:54:a6:93:b7:
9c:04:d1:0e:c1:7c:a5:a7:9e:81:68:0b:23:cd:91:
0a:0c:6a:a2:96:da:28:9e:92:c8:71:40:94:3f:31:
62:ac:53:9e:99:23:c8:f7:c9:1f:bd:dc:5c:30:0f:
e8:78:1f:8b:5b:04:62:b8:3b:38:00:98:bb:97:1c:
6e:d6:e5:1f:0c:7b:0d:ea:95:5c:8f:ad:6d:08:44:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F6:08:53:20:E7:2D:14:9E:B3:B1:9E:57:20:7D:E0:00:7D:3B:6E
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/XPYIUyDnLRSes7GeVyB94AB9O24.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:6380:11::/48
Signature Algorithm: sha256WithRSAEncryption
d5:66:43:ac:c7:e6:1e:0e:1d:73:32:b4:1b:0f:76:08:a6:7f:
f5:06:e3:97:ba:d9:9b:6d:7a:3d:53:5a:a5:5c:ec:9f:08:b6:
df:d0:e4:f8:9a:9c:c0:3c:ea:9d:09:6b:d9:65:30:83:de:3c:
fd:ce:f5:57:3d:08:48:6e:c1:9d:f5:17:da:16:8b:a3:90:cc:
15:bd:2e:44:7a:ed:c8:8d:a0:72:a1:0e:59:06:91:0d:df:13:
2f:49:80:ff:9b:6c:be:87:6e:cd:1a:c4:a9:ce:6e:a7:10:17:
00:d6:b2:83:97:ff:f9:7b:94:6d:7c:28:8b:05:0f:b2:ff:08:
2c:88:e5:28:ae:9d:ae:c8:da:79:f3:95:88:4d:fe:26:a8:04:
d4:61:ef:6e:6e:c7:62:6a:f1:8d:82:6f:b8:13:a1:fe:e2:6c:
4c:a4:63:f9:42:28:65:d0:6a:da:45:2d:43:49:dd:47:43:04:
a8:05:fa:f7:d2:9b:c4:37:73:69:70:05:e4:8e:22:47:18:d2:
e2:1a:24:13:40:26:5d:b4:f3:8d:1d:a4:23:39:24:e9:a4:51:
f0:40:be:62:48:e4:83:16:05:31:23:07:74:c8:6e:09:00:e9:
80:0c:73:36:63:59:48:81:75:68:2c:85:71:4d:cb:64:c6:85:
7f:14:8d:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:23:13 2025 by rpki-client