Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/4GBpvI2rZ3KgMp2TXs52wMjJ0yE.roa
File: 4GBpvI2rZ3KgMp2TXs52wMjJ0yE.roa (raw, json)
Hash identifier: WUXgzF8/7vTpS4uvfiiFvOe2HOADwHJYR8UuxjhNVm0=
Subject key identifier: E0:60:69:BC:8D:AB:67:72:A0:32:9D:93:5E:CE:76:C0:C8:C9:D3:21
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 1BC2
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/4GBpvI2rZ3KgMp2TXs52wMjJ0yE.roa
Signing time: Fri 17 Jan 2025 01:29:05 +0000
ROA not before: Fri 17 Jan 2025 01:29:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24362
IP address blocks: 2400:b600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7106 (0x1bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Jan 17 01:29:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E06069BC8DAB6772A0329D935ECE76C0C8C9D321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:57:d0:71:dd:9d:93:16:72:3a:79:4b:39:
87:2b:04:fb:02:56:3e:ef:8e:89:7d:2f:44:76:7f:
a6:f9:71:24:b6:4f:5b:f7:ae:93:fe:8f:b0:b6:47:
bf:c3:ba:28:14:23:41:eb:18:f0:48:d3:84:28:bf:
12:65:bb:52:a0:a0:2e:62:09:e5:67:66:10:ae:23:
cc:62:21:40:c3:07:52:ac:6a:fa:5e:b2:3d:7e:ba:
c6:cd:64:7d:17:bd:8c:cf:58:18:73:c4:c6:74:cf:
08:a1:1f:2a:95:e5:92:2b:52:22:4b:79:cb:d7:e2:
5c:38:fd:1c:4d:6d:c1:5c:6e:09:ba:cd:a8:09:f7:
ab:83:b6:b5:94:bc:b1:5b:a3:cf:30:e5:75:d6:49:
d5:5c:ce:cf:bc:bb:b8:a8:8f:f4:da:a7:d9:ce:7e:
c1:67:0a:1c:2e:5c:f6:e3:ad:50:c6:7e:3e:52:2a:
8b:6a:48:79:39:28:ff:d5:ba:10:53:88:14:12:ee:
09:e6:d4:e9:8a:e4:45:b6:cc:91:eb:a4:88:cf:70:
c4:67:40:a6:54:62:fa:0c:d1:8a:1c:37:27:4e:28:
23:bc:38:fe:01:84:8b:11:e5:b2:d9:a4:02:d1:6d:
b5:36:b5:12:d5:fa:c2:19:45:0d:4d:ac:cf:c6:c8:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:60:69:BC:8D:AB:67:72:A0:32:9D:93:5E:CE:76:C0:C8:C9:D3:21
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/4GBpvI2rZ3KgMp2TXs52wMjJ0yE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:b600::/32
Signature Algorithm: sha256WithRSAEncryption
26:03:ba:55:06:d0:30:40:ef:67:6a:2e:e6:e5:a0:1c:fa:9c:
ff:28:9c:6f:ce:7d:f2:52:f1:90:0a:6a:3d:f2:5c:90:89:37:
e0:ea:5b:cf:91:48:4c:d1:c6:0e:e0:b2:f8:82:81:20:11:0c:
bd:e1:3b:30:72:3e:14:ba:88:61:5e:68:68:0d:af:15:2d:2b:
fe:f8:1c:d4:a8:89:a1:f5:0e:2b:b3:a9:97:86:a7:9d:ad:9a:
11:84:9b:5e:9b:d2:2b:4c:98:c5:5d:79:74:80:7b:39:9f:1b:
13:97:10:53:e8:78:2f:ad:c6:60:60:e3:36:3e:b5:78:c0:52:
40:5e:36:75:fc:3c:6d:a6:ef:c7:47:1b:c0:d6:cb:49:de:f6:
89:a5:11:10:e7:b4:4e:db:8b:b9:b3:a5:7f:48:3c:86:63:46:
a6:f0:dd:6c:ab:c0:51:e5:83:09:80:36:f9:17:72:e2:cd:0e:
e0:a9:ab:72:6a:63:2f:43:a8:ce:06:40:a4:4e:67:21:07:06:
14:58:4c:91:37:a0:be:b5:cb:d7:89:f9:5e:94:aa:8e:03:bf:
8b:6a:b0:71:60:c6:a5:2f:79:7a:40:d2:39:47:c6:3f:c6:fa:
12:96:62:51:c8:96:b9:79:a8:75:28:a0:a5:70:e9:90:2d:bc:
ac:1b:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:45 2025 by rpki-client