Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/-EFyyg3HLgWhf0Dv16f2b04NV_k.roa
File: -EFyyg3HLgWhf0Dv16f2b04NV_k.roa (raw, json)
Hash identifier: JPb5Eqrij/XR2UNZHJJEmYXzwcl2oFGXzNVTJR0/Uaw=
Subject key identifier: F8:41:72:CA:0D:C7:2E:05:A1:7F:40:EF:D7:A7:F6:6F:4E:0D:57:F9
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 1005
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/-EFyyg3HLgWhf0Dv16f2b04NV_k.roa
Signing time: Fri 19 May 2023 05:55:05 +0000
ROA not before: Fri 19 May 2023 05:55:05 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 24362
IP address blocks: 2400:b600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4101 (0x1005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: May 19 05:55:05 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=F84172CA0DC72E05A17F40EFD7A7F66F4E0D57F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:1c:8b:89:fa:92:53:6f:31:a7:7d:d1:9c:
bb:88:ba:e0:f6:d2:dc:7a:0b:0d:59:26:87:32:c5:
7d:24:1a:74:06:18:2e:21:0d:c8:fe:2a:ff:1f:00:
ea:e4:9c:17:5f:d7:71:45:4f:7b:6f:94:9d:08:01:
9e:64:c5:88:8b:6a:06:9b:62:8f:11:20:cb:cd:97:
e4:f0:f2:bd:7e:2c:b2:9f:ba:d1:eb:ff:3a:42:02:
ff:3c:83:83:58:39:cd:8f:66:31:81:cd:85:d7:2d:
a6:72:ae:aa:04:a0:6c:b0:c1:08:1c:b0:08:f7:68:
67:5c:31:fe:47:e2:46:78:06:a9:56:54:0d:73:1a:
81:63:5e:40:52:34:8d:5d:ae:05:12:0e:eb:83:29:
dd:48:43:04:ce:27:08:ed:13:6f:92:b0:56:bd:70:
b9:52:47:1c:cd:91:38:bb:bc:2f:e3:14:75:96:81:
a1:1f:1f:51:71:ab:05:60:36:46:49:4e:1a:a1:39:
d5:b8:1e:7b:1f:09:30:94:3e:3c:89:fe:19:92:0b:
05:ea:38:5d:d2:50:7c:77:66:ef:10:00:19:51:60:
49:6d:03:8b:ef:e4:4e:29:96:5f:6e:58:dc:db:d1:
06:9e:1a:c6:37:84:9d:55:fb:67:af:4a:0e:f7:8c:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:41:72:CA:0D:C7:2E:05:A1:7F:40:EF:D7:A7:F6:6F:4E:0D:57:F9
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/-EFyyg3HLgWhf0Dv16f2b04NV_k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:b600::/32
Signature Algorithm: sha256WithRSAEncryption
a3:3e:f1:ec:a5:96:b4:05:50:c6:29:a3:23:d2:0c:b3:b6:52:
71:28:d5:d4:7c:7f:b1:be:46:85:d6:ac:f3:08:e0:c8:c8:a5:
0c:1d:53:e1:ef:16:d5:89:39:28:25:23:5c:76:9c:cb:57:0a:
11:06:aa:f1:05:8e:89:2a:b9:8a:49:87:9a:d4:ef:e4:85:a3:
d9:2f:43:ff:56:95:de:ca:a3:c2:29:8f:bc:94:de:dd:f6:8c:
24:6e:80:3f:23:db:e5:76:4a:4e:24:cd:05:c3:2b:a8:b0:ad:
8c:ef:99:e8:8e:07:88:8b:79:dd:1f:4c:0e:44:f1:d1:87:c6:
26:1b:95:7d:3c:13:60:77:75:8a:38:36:fa:69:35:a0:40:61:
9d:f3:e5:b8:da:53:2c:46:b0:4d:d8:19:43:d9:a5:e1:20:33:
58:c2:c0:ee:e3:bc:a8:c2:a0:1e:49:14:8a:2d:29:a5:c3:f9:
d6:4c:0c:6b:c6:fa:5a:19:76:d2:2b:ff:1e:a4:c3:8e:ef:4c:
fe:d1:58:71:4c:41:46:d1:ea:66:d1:f0:9a:83:75:94:42:af:
bd:2a:8f:f4:c1:2b:a4:a1:25:c6:bc:08:73:d0:70:c7:48:a1:
e1:9f:8c:00:73:9c:90:75:ad:a0:52:8d:63:bf:01:73:b5:44:
6e:c5:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:48 2025 by rpki-client