Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/Xo2xzHkIY-YGuMySicyhhRpo8IE.roa
File: Xo2xzHkIY-YGuMySicyhhRpo8IE.roa (raw, json)
Hash identifier: QgOMwwkT8JO8mXrvSbMFJwD24TDI++b2WLOiuCQt8Nw=
Subject key identifier: 5E:8D:B1:CC:79:08:63:E6:06:B8:CC:92:89:CC:A1:85:1A:68:F0:81
Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Certificate serial: 1BE1
Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/Xo2xzHkIY-YGuMySicyhhRpo8IE.roa
Signing time: Fri 17 Jan 2025 01:26:51 +0000
ROA not before: Fri 17 Jan 2025 01:26:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 131567
IP address blocks: 2401:7240::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7137 (0x1be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Validity
Not Before: Jan 17 01:26:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5E8DB1CC790863E606B8CC9289CCA1851A68F081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:48:10:0a:9e:58:e1:d5:45:c1:aa:01:09:
87:cd:74:24:47:09:d1:c0:30:9f:d5:86:d6:be:b5:
e4:61:23:f8:81:ac:03:12:d4:e3:c3:7c:55:fe:da:
50:dd:56:3a:2f:17:71:d0:f1:c2:42:b3:7b:0d:f9:
5c:4a:34:d5:c0:36:36:03:84:fc:f3:13:47:e2:be:
1f:ef:c3:78:41:e8:8b:7a:e1:92:cf:d2:e0:bf:7a:
11:60:cd:f9:9a:b9:54:b0:ac:95:ef:6a:cc:aa:3d:
26:f0:b5:ed:b8:b4:b8:63:ee:c3:6c:6b:a5:18:b9:
d5:e0:3c:f7:a4:ff:48:05:9e:23:fb:69:c3:51:4e:
db:34:66:54:aa:f7:5e:3a:52:7f:2f:f2:99:67:4a:
9a:91:44:b9:90:02:9b:1c:35:5d:d7:39:47:21:2f:
4f:08:48:54:7f:cb:21:4c:5f:98:d3:9c:96:88:eb:
7d:27:74:7d:a7:3c:d7:a6:06:52:b8:ed:04:a3:b2:
04:c7:b9:4a:99:92:14:c9:fa:d5:75:70:6e:9d:c7:
1b:1c:10:44:b2:b7:01:45:fc:25:8d:08:64:33:85:
e1:58:bb:0f:43:69:f6:44:34:54:60:20:05:5b:bf:
4e:50:11:de:1c:90:4a:6a:bb:28:e8:23:c1:70:6f:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:B1:CC:79:08:63:E6:06:B8:CC:92:89:CC:A1:85:1A:68:F0:81
X509v3 Authority Key Identifier:
keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/Xo2xzHkIY-YGuMySicyhhRpo8IE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7240::/32
Signature Algorithm: sha256WithRSAEncryption
65:57:ce:63:0c:f0:08:ce:e0:71:9b:9b:8f:48:27:f6:36:37:
ca:c5:56:2e:b7:c2:ab:aa:bb:8d:7b:d2:e9:41:0c:d9:53:4a:
7c:e2:9f:aa:a0:4b:e7:4e:82:2d:2a:37:81:79:2a:9e:7a:ce:
89:1e:fd:8a:8a:31:97:01:a8:c8:43:55:7b:d4:57:43:93:01:
72:58:66:12:8a:dc:36:2f:5d:4a:a1:a3:3d:d5:3e:86:d0:f6:
e8:a8:49:77:16:8b:98:15:8c:12:23:1a:4a:2c:8b:53:9f:6e:
87:6c:f8:fa:05:90:46:c4:8b:74:91:b1:c3:43:1e:6a:bb:24:
25:33:0e:14:9d:ef:f7:ce:c9:89:2e:9b:48:e9:4e:c7:cc:d3:
4f:c8:60:f6:19:05:0a:d4:94:f2:96:65:d7:75:35:e9:a9:76:
d2:c2:5c:a4:f7:3d:2a:fa:3c:f2:ea:ff:8b:a4:e2:d8:86:b4:
c5:08:c4:9d:6c:44:13:10:ce:07:6d:f4:a2:f0:16:69:b7:dc:
b7:8e:6e:0a:c8:2a:63:9e:d9:df:b0:25:e2:c4:5f:3c:4d:0f:
77:82:74:81:bc:90:51:9c:ae:f2:0b:dd:86:f8:b2:fd:a0:31:
68:e6:5c:d2:6d:02:46:cb:6f:17:ac:d1:ca:b4:25:ac:90:64:
90:f8:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:21 2025 by rpki-client