Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/o_oAkdJTg2XeO1GwIypjLQPXohM.roa
File: o_oAkdJTg2XeO1GwIypjLQPXohM.roa (raw, json)
Hash identifier: 4/5vSj9d5XDVtoHiWhC8a+MOhwVdu7cs1BRGxj4luCs=
Subject key identifier: A3:FA:00:91:D2:53:83:65:DE:3B:51:B0:23:2A:63:2D:03:D7:A2:13
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 1BF4
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/o_oAkdJTg2XeO1GwIypjLQPXohM.roa
Signing time: Fri 17 Jan 2025 01:27:18 +0000
ROA not before: Fri 17 Jan 2025 01:27:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 23650
IP address blocks: 2404:6380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7156 (0x1bf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jan 17 01:27:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A3FA0091D2538365DE3B51B0232A632D03D7A213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:47:79:80:fe:cb:b5:30:74:ef:70:15:f0:
e1:c6:0f:fd:06:12:16:2c:f9:a3:f7:df:b4:3e:ab:
0b:7b:6d:93:b9:8a:a7:d7:81:da:90:25:29:d0:dc:
a4:ae:3d:7a:39:2a:29:45:d9:24:17:2f:9c:90:f5:
2e:11:ef:db:b7:11:54:d7:e9:a9:c6:d7:db:cb:e3:
f0:67:4b:04:d1:34:20:c7:33:5e:d8:34:7a:be:18:
6d:eb:70:0a:4e:78:26:d5:69:8f:df:7b:a7:ee:83:
5b:c9:f6:50:a0:42:17:09:a3:22:da:2d:14:58:e4:
5a:f2:58:37:9a:11:f4:43:f8:5c:d0:52:45:9b:bf:
be:ac:63:63:4f:68:15:e6:84:b3:0b:0e:bc:54:8e:
68:12:5a:38:a6:5a:e1:0a:f9:ac:fa:a5:10:d2:d4:
50:da:e3:45:9a:8b:ef:54:a5:e0:1b:f2:1a:25:9f:
44:2e:0e:11:c4:b2:6b:ba:58:52:b7:2e:c3:6e:67:
bc:49:5d:80:fa:23:79:dd:c2:cb:a9:4d:8f:64:7b:
80:a8:0a:9a:e8:01:c8:b2:59:82:cc:ce:e2:75:48:
b2:c8:d1:df:fb:db:2e:62:cd:bc:d0:0a:1e:32:b3:
f0:73:2e:82:bf:dc:85:55:2a:79:be:1a:bc:cf:5d:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FA:00:91:D2:53:83:65:DE:3B:51:B0:23:2A:63:2D:03:D7:A2:13
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/o_oAkdJTg2XeO1GwIypjLQPXohM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6380::/32
Signature Algorithm: sha256WithRSAEncryption
0a:ce:3e:c3:76:08:9c:4c:50:08:f5:cf:fd:50:8d:61:d6:7e:
1c:1a:55:20:0e:df:ac:c8:db:84:9e:4b:4e:ec:79:a9:9a:93:
b0:cd:46:85:88:dd:b8:5f:66:f5:d8:15:36:c0:69:32:82:7f:
2a:a5:1d:d6:38:82:11:af:9d:cc:6c:cd:87:97:8d:91:cd:87:
eb:4b:9d:27:ca:8b:d7:62:1b:a7:ed:5c:e0:90:76:87:ce:3d:
7c:69:32:e0:c8:8e:2f:ec:d3:58:6b:b3:2a:85:22:6b:b5:4a:
c0:10:64:13:6d:ff:b4:a2:75:11:ce:89:f1:b6:fb:de:cd:50:
00:3b:60:bd:25:67:aa:b9:c6:92:e5:93:9c:66:2b:d4:b0:37:
35:51:1d:0d:e9:57:b3:19:4f:47:89:0d:91:3f:f2:57:27:28:
84:cf:85:5d:39:f2:f5:ce:07:b7:43:7b:1a:07:b3:27:98:a7:
05:04:c7:dd:ed:82:69:43:87:bc:d0:74:a3:f1:39:8f:96:ba:
31:fc:2d:6d:33:97:df:d6:70:1d:cb:ac:bf:f1:48:9a:4f:d9:
15:b3:29:35:54:6d:69:f2:8e:7a:6f:5b:7c:07:2e:73:ad:bc:
8e:aa:8e:6c:c1:41:51:23:90:b2:b7:b4:5b:be:f7:27:1c:98:
d6:9d:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:26 2025 by rpki-client