Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/tj40UFStx2OOkB-4otchu_fx58Q.roa
File: tj40UFStx2OOkB-4otchu_fx58Q.roa (raw, json)
Hash identifier: 1UAt6V6uerdK9jG24ghyHM+Eh904uhYQAg5VsBvnzJs=
Subject key identifier: B6:3E:34:50:54:AD:C7:63:8E:90:1F:B8:A2:D7:21:BB:F7:F1:E7:C4
Certificate issuer: /CN=F76C9E43361DEA446077AD7029057380AFFF3266
Certificate serial: 1FCC
Authority key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/tj40UFStx2OOkB-4otchu_fx58Q.roa
Signing time: Fri 17 Jan 2025 01:29:13 +0000
ROA not before: Fri 17 Jan 2025 01:29:13 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24424
IP address blocks: 2404:280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8140 (0x1fcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F76C9E43361DEA446077AD7029057380AFFF3266
Validity
Not Before: Jan 17 01:29:13 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B63E345054ADC7638E901FB8A2D721BBF7F1E7C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:95:67:0f:2d:95:a3:5f:6f:32:98:84:b3:
dc:9d:27:92:51:c8:99:2c:5a:ad:c5:3c:60:96:87:
3e:d5:2d:2d:a7:c6:03:db:af:30:89:1d:a9:dc:de:
45:43:74:8c:8a:8b:7a:67:a1:ca:67:9a:8b:ed:04:
24:3e:d5:32:d4:6a:3c:f6:7f:ed:15:86:9a:49:74:
64:0a:e8:e7:e0:ce:07:01:88:5d:a2:d0:a8:05:fc:
e0:99:cd:fc:6b:3f:41:e1:b4:d1:c8:9d:cb:35:e8:
39:d4:1b:8e:f1:37:ed:84:c8:fc:ec:96:d3:43:51:
ff:67:ee:a3:f2:d1:93:be:8a:0f:fc:34:0c:67:aa:
a6:65:1d:b3:a2:fe:85:09:aa:5a:cf:ba:89:4e:c8:
38:53:d3:cd:b1:0f:56:6d:62:3b:2c:d5:27:e8:5a:
b5:6e:37:03:d0:7a:2c:e6:de:b7:d9:62:0b:e7:cd:
ed:b5:cd:36:5b:36:40:e9:00:74:7f:c6:61:28:4c:
0f:51:45:1b:d9:45:21:df:5e:ac:33:29:d8:2e:1f:
9a:6e:45:02:85:5d:b3:11:36:d3:5c:4f:e9:9f:65:
a5:b0:f8:c0:81:5e:1e:4d:e4:e6:4c:0b:2b:99:aa:
1c:d9:5e:f6:24:d5:94:fc:60:66:d4:74:df:56:99:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3E:34:50:54:AD:C7:63:8E:90:1F:B8:A2:D7:21:BB:F7:F1:E7:C4
X509v3 Authority Key Identifier:
keyid:F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/tj40UFStx2OOkB-4otchu_fx58Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:280::/32
Signature Algorithm: sha256WithRSAEncryption
92:58:36:ec:f9:57:52:97:89:1d:65:28:ce:9c:8b:8f:f6:3d:
ab:37:bf:f1:19:76:45:81:ef:94:94:02:d1:85:da:36:e6:7c:
51:ba:27:87:c4:f9:ad:c4:2a:6c:95:e7:b3:13:44:10:7b:b9:
4d:3e:e0:f7:a1:22:6e:7a:99:52:84:d3:20:46:f5:3d:40:39:
ec:e0:9d:28:d6:83:af:5a:db:03:13:8d:a3:f3:9b:9b:37:80:
e7:aa:c1:aa:d0:d5:56:6a:2e:02:18:77:43:60:9b:3c:09:3a:
bd:7e:08:f7:27:38:21:b6:69:ed:a0:07:39:83:3c:84:09:db:
a4:b5:7e:d5:ef:d5:ab:0e:83:51:be:30:fe:22:19:37:ce:c7:
9d:1c:fe:27:93:d2:97:b8:31:c4:b0:92:c1:0b:f5:b5:df:b3:
b2:d9:39:63:05:52:aa:a0:37:dc:b6:03:d9:c7:b6:e2:d5:c4:
59:3a:c1:f3:f4:7d:51:8d:ef:99:ed:ce:3e:d0:9b:f5:74:54:
4b:e5:cc:67:30:ae:b9:fa:95:a5:fc:34:18:ee:1f:58:ed:6e:
0f:fa:ed:e7:4b:04:2e:35:da:9e:b3:f9:9e:7f:e2:dc:1b:24:
42:b2:56:02:89:61:38:d9:20:38:8f:7a:be:57:d8:e3:b5:39:
c6:30:72:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:38 2025 by rpki-client