Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/tou57tkArzeegu37p7K21QZeqNI.roa
File: tou57tkArzeegu37p7K21QZeqNI.roa (raw, json)
Hash identifier: c7KnwcFILTwR2nMiTjzl6YCWDzLXp6oQT5kZn/KHinw=
Subject key identifier: B6:8B:B9:EE:D9:00:AF:37:9E:82:ED:FB:A7:B2:B6:D5:06:5E:A8:D2
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 201B
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/tou57tkArzeegu37p7K21QZeqNI.roa
Signing time: Fri 17 Jan 2025 01:24:06 +0000
ROA not before: Fri 17 Jan 2025 01:24:06 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 212237
IP address blocks: 2403:6380::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8219 (0x201b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jan 17 01:24:06 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B68BB9EED900AF379E82EDFBA7B2B6D5065EA8D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:4a:73:ed:90:49:3a:52:ee:f4:64:6a:bb:
5b:db:66:36:2c:5c:7c:ce:8c:5a:83:b7:4b:2f:7e:
f0:23:9a:f0:c6:e1:82:8c:56:99:b4:d9:0e:d2:e3:
6c:46:a1:d2:8a:75:1e:23:42:1e:90:73:4b:56:93:
16:2d:63:3b:ee:69:24:23:d1:f6:41:fb:be:b6:f1:
08:5c:f4:46:9c:5b:4c:01:52:f1:6d:7a:bf:f3:34:
80:1b:4c:06:7c:a2:db:96:fd:3f:05:b3:0d:9a:c0:
85:e3:05:3f:83:07:f0:47:d5:1c:4a:ae:61:48:64:
c1:08:bd:a6:88:39:94:ed:ed:6d:18:76:46:7d:9a:
a7:f3:d9:c3:66:e6:92:ad:01:9e:03:8b:a0:15:37:
69:73:3b:9f:47:ea:24:56:5b:63:39:7f:f9:47:89:
a5:e6:78:f0:7d:a7:a3:c5:fd:57:44:29:c1:da:22:
43:7d:c3:3f:61:50:31:e4:82:ab:36:d3:b3:4c:6f:
e4:20:db:b2:0b:47:b0:14:cc:ca:13:f3:19:80:b2:
e1:d5:1b:98:b8:81:5e:8d:15:91:e6:ed:00:13:a6:
1e:a1:7e:36:06:95:72:02:4c:1e:bf:e5:cf:49:3c:
36:02:5d:77:bf:b3:26:81:09:fe:5c:7d:fb:8c:27:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:B9:EE:D9:00:AF:37:9E:82:ED:FB:A7:B2:B6:D5:06:5E:A8:D2
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/tou57tkArzeegu37p7K21QZeqNI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:6380::/40
Signature Algorithm: sha256WithRSAEncryption
19:90:5a:ca:ac:95:d9:8d:c9:1a:78:7a:2a:5d:f9:19:d0:65:
bf:8c:80:82:d1:ee:11:b6:a0:80:fc:55:80:a1:7f:17:27:dc:
3f:2e:bd:9a:1d:de:01:58:1b:20:d9:c8:19:c8:9e:18:09:eb:
a2:fc:2a:64:d8:6b:1b:96:ae:d6:f2:c0:9f:43:c5:77:dd:de:
76:e9:e7:e7:df:a4:a4:d9:ac:ed:99:2e:8a:6c:13:30:ed:29:
16:54:21:6b:8e:46:56:d2:ba:6f:a4:42:05:0d:e6:16:73:45:
ad:44:ad:46:a7:de:f3:30:9e:8f:a3:2b:82:b3:a7:f1:83:16:
5d:e3:79:e2:9b:7f:26:f4:c5:72:a7:85:b0:88:14:6b:a6:31:
eb:94:71:62:c8:da:48:a1:fd:04:a7:04:5e:41:75:9f:37:c7:
e4:84:99:73:02:84:d4:21:e4:0b:a2:b1:b9:43:53:79:a8:1a:
e3:fc:bf:71:7a:73:3b:a6:7e:f9:ef:0b:89:ee:ff:21:38:bb:
5f:84:80:44:d1:d3:fa:b8:5f:a3:37:8f:a3:e2:e7:b9:39:79:
66:67:e9:5a:dd:12:04:7c:76:9a:da:c7:a9:aa:f4:1d:0c:00:
38:92:ae:09:96:29:7f:b4:fa:2a:48:f2:c6:c8:07:82:7a:2b:
96:f1:4e:e3
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICIBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx
MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTAxMTcw
MTI0MDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI2OEJCOUVFRDkwMEFG
Mzc5RTgyRURGQkE3QjJCNkQ1MDY1RUE4RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+rUpz7ZBJOlLu9GRqu1vbZjYsXHzOjFqDt0svfvAjmvDG4YKM
Vpm02Q7S42xGodKKdR4jQh6Qc0tWkxYtYzvuaSQj0fZB+7628Qhc9EacW0wBUvFt
er/zNIAbTAZ8otuW/T8Fsw2awIXjBT+DB/BH1RxKrmFIZMEIvaaIOZTt7W0YdkZ9
mqfz2cNm5pKtAZ4Di6AVN2lzO59H6iRWW2M5f/lHiaXmePB9p6PF/VdEKcHaIkN9
wz9hUDHkgqs207NMb+Qg27ILR7AUzMoT8xmAsuHVG5i4gV6NFZHm7QATph6hfjYG
lXICTB6/5c9JPDYCXXe/syaBCf5cffuMJ3+JAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUtou57tkArzeegu37p7K21QZeqNIwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk
yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx
MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvdG91NTd0a0FyemVl
Z3UzN3A3SzIxUVplcU5JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACQDY4AAMA0GCSqGSIb3DQEBCwUAA4IBAQAZkFrKrJXZjckaeHoqXfkZ0GW/
jICC0e4RtqCA/FWAoX8XJ9w/Lr2aHd4BWBsg2cgZyJ4YCeui/Cpk2Gsblq7W8sCf
Q8V33d526efn36Sk2aztmS6KbBMw7SkWVCFrjkZW0rpvpEIFDeYWc0WtRK1Gp97z
MJ6PoyuCs6fxgxZd43nim38m9MVyp4WwiBRrpjHrlHFiyNpIof0EpwReQXWfN8fk
hJlzAoTUIeQLorG5Q1N5qBrj/L9xenM7pn757wuJ7v8hOLtfhIBE0dP6uF+jN4+j
4ue5OXlmZ+la3RIEfHaa2sepqvQdDAA4kq4Jlil/tPoqSPLGyAeCeiuW8U7j
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:54 2025 by rpki-client