Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2048/zdruxVncnu8sEkhrajuvXfa833c.roa
File: zdruxVncnu8sEkhrajuvXfa833c.roa (raw, json)
Hash identifier: 18w1Pxtpdmcfs55ZzucgPOeLrrNOEkkFH5LUL2Ht4kk=
Subject key identifier: CD:DA:EE:C5:59:DC:9E:EF:2C:12:48:6B:6A:3B:AF:5D:F6:BC:DF:77
Certificate issuer: /CN=4E25934FE8D89959425D1018EB121981DA250985
Certificate serial: 18
Authority key identifier: 4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/zdruxVncnu8sEkhrajuvXfa833c.roa
Signing time: Sat 02 Mar 2024 02:45:00 +0000
ROA not before: Sat 02 Mar 2024 02:45:00 +0000
ROA not after: Sun 02 Mar 2025 02:27:12 +0000
asID: 151296
IP address blocks: 2406:8880::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E25934FE8D89959425D1018EB121981DA250985
Validity
Not Before: Mar 2 02:45:00 2024 GMT
Not After : Mar 2 02:27:12 2025 GMT
Subject: CN=CDDAEEC559DC9EEF2C12486B6A3BAF5DF6BCDF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:35:e0:2e:cf:0d:10:b8:16:d0:05:cf:21:
9a:7f:1c:f8:95:88:0e:f8:88:8c:ec:4b:aa:f5:c6:
e3:13:fd:7a:db:10:6c:6a:a5:d5:c3:1a:38:40:cf:
e6:17:6d:80:a7:19:5d:ac:60:93:2b:80:d5:70:07:
6d:c8:8a:ad:ab:71:23:ae:b0:f4:3c:3a:0e:60:fd:
94:fe:0f:b3:60:e0:fe:df:16:8b:d8:ad:ad:59:09:
b7:37:5c:4a:b7:1a:8e:62:fb:89:a5:2d:1f:68:52:
1e:86:9b:1a:60:80:88:9a:38:03:5b:db:00:1e:e5:
75:10:92:f8:85:29:9f:b4:a4:fd:01:bb:d5:3e:1a:
41:a8:42:b3:ea:b1:45:e0:0d:78:d2:30:3e:a7:51:
66:c7:bc:84:64:a4:56:bc:6f:60:8d:18:d4:4e:ce:
04:d0:72:94:a1:fe:11:bb:0c:3c:86:a0:3f:aa:d9:
7f:d7:76:05:a6:12:d2:b4:d4:78:21:ae:54:fb:57:
ad:87:09:31:68:da:8f:0f:88:5b:b2:55:06:27:78:
28:65:93:d2:fd:e4:b3:0b:1f:f8:77:1f:26:4a:39:
e0:45:39:00:1c:5f:bf:f6:e1:5f:fb:eb:c1:14:97:
08:42:a2:67:3e:71:4f:59:36:05:cc:60:fc:9b:8e:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:EE:C5:59:DC:9E:EF:2C:12:48:6B:6A:3B:AF:5D:F6:BC:DF:77
X509v3 Authority Key Identifier:
keyid:4E:25:93:4F:E8:D8:99:59:42:5D:10:18:EB:12:19:81:DA:25:09:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/TiWTT-jYmVlCXRAY6xIZgdolCYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TiWTT-jYmVlCXRAY6xIZgdolCYU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2048/zdruxVncnu8sEkhrajuvXfa833c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8880::/32
Signature Algorithm: sha256WithRSAEncryption
68:f1:14:ab:cc:7a:3d:f3:7e:fe:57:ed:49:30:ce:2e:c6:39:
97:6a:30:35:9e:09:2d:f3:81:fb:ba:a6:3e:f4:92:dd:ea:8b:
31:e5:7c:6d:8a:7a:c6:78:2b:75:e7:0b:52:f9:44:d0:4b:ba:
92:b6:d5:ad:92:01:bf:fb:ec:39:e2:9a:e3:fc:be:7c:d9:b2:
c5:3b:4e:2e:01:96:d9:99:2b:cb:0f:07:5f:e4:e1:90:21:6d:
07:8c:8e:53:fb:7d:d6:44:c7:cb:88:03:25:b8:73:49:d2:ca:
de:9d:c8:d9:24:85:df:ba:3f:a7:a3:0d:70:8d:58:f7:64:e0:
3d:e9:49:96:61:25:ef:b1:ab:b3:55:d9:7b:89:8e:f9:61:df:
5a:99:60:61:1b:c7:10:ef:38:3c:00:68:5d:e9:39:59:e7:85:
4b:ff:93:94:27:d0:e8:87:98:33:16:44:62:0b:66:bd:6d:7d:
ad:91:16:c0:21:2e:ac:e6:79:42:69:ae:ed:e0:3b:50:f2:13:
80:ab:9c:e4:c0:b6:8b:64:78:2c:4d:41:1c:a4:af:0c:b2:35:
ae:44:31:38:8a:31:96:c4:4f:e7:99:44:cb:f3:6d:67:dc:21:
ff:8c:67:e6:e9:4f:f8:1e:b3:86:33:18:be:ba:81:65:f9:4e:
f6:03:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:10:31 2025 by rpki-client