Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa
File: LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa (raw, json)
Hash identifier: efqng/VZ0qObM6O+6R64v60Zms/fZuugEkKrT05KSfU=
Subject key identifier: 2E:25:98:42:57:EA:4A:BF:70:30:E2:81:5D:01:A1:B7:21:62:55:19
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4C29
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa
Signing time: Tue 25 Mar 2025 06:07:55 +0000
ROA not before: Tue 25 Mar 2025 06:07:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63603
IP address blocks: 2400:de80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19497 (0x4c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Mar 25 06:07:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2E25984257EA4ABF7030E2815D01A1B721625519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:68:cc:04:02:4a:2f:62:6e:b9:01:18:8f:
4d:a9:d8:26:25:26:17:fa:eb:4f:75:63:1a:cf:a6:
52:5a:db:36:a9:7d:2a:60:5a:06:88:ab:b1:1a:c8:
be:ce:60:35:74:fc:d4:24:cf:d7:67:4f:3b:ba:8d:
5c:58:c9:9e:a5:fb:23:27:e0:6a:20:64:06:f9:5d:
e3:df:eb:b6:67:b9:9b:b2:01:b3:8d:d2:34:e6:33:
19:53:f5:6a:39:64:69:29:35:6e:f3:f5:75:4d:84:
a9:ee:02:cf:38:f8:e2:7c:8f:2b:8a:12:76:9d:57:
33:c9:d4:4e:55:40:67:8b:78:33:a3:90:0c:18:99:
eb:54:94:19:ac:4e:31:49:d9:4e:5b:49:ff:47:58:
79:44:d6:0c:34:cc:40:56:46:bc:4c:bf:7e:b7:6c:
97:a0:17:47:e4:fd:ba:0f:14:c0:9d:0e:4b:a5:77:
d8:fb:26:61:32:68:ed:5d:5e:19:5e:01:fc:80:cf:
c3:d9:5b:9a:f4:45:38:98:06:84:b1:db:ac:5f:30:
24:e0:0f:ed:67:8f:64:a8:aa:62:11:23:87:19:50:
b2:1b:b7:d0:0e:a3:02:25:32:dd:0f:7b:7a:99:5d:
9a:41:cb:05:e0:8f:47:01:05:e5:4e:80:fd:cf:28:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:25:98:42:57:EA:4A:BF:70:30:E2:81:5D:01:A1:B7:21:62:55:19
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:de80::/32
Signature Algorithm: sha256WithRSAEncryption
5a:23:0a:ed:20:96:28:6d:e1:cf:fc:ef:c3:93:a2:72:12:cd:
f9:3a:0c:38:50:03:b6:65:22:99:70:37:ea:4a:34:7c:70:55:
63:4c:8a:28:ad:63:cd:91:ae:3f:90:84:b3:d2:49:c6:d2:1e:
69:51:a6:fa:ac:25:4b:dd:53:04:49:6c:2a:6d:19:4a:1f:73:
2d:0f:10:80:3d:1b:db:8a:6b:8f:e5:79:7a:fb:0e:c2:9c:bb:
dd:56:bd:90:4a:f7:e2:35:64:d5:ba:7c:3c:50:d1:65:dc:1e:
b3:61:63:c6:e9:03:98:85:76:db:0a:04:5e:73:73:50:ab:23:
a1:37:48:3e:2e:93:d4:d6:5a:02:f2:66:2d:d7:35:d2:db:24:
f3:7f:0a:2c:55:00:eb:3e:5b:35:05:64:a5:d7:f8:25:27:9e:
18:f9:42:e7:30:97:6f:97:0a:a5:e2:ee:cd:48:ef:7a:e8:b2:
33:59:27:f1:0e:e8:c6:04:d4:2c:db:1f:7f:fa:22:cd:2d:5b:
58:d4:c8:a3:e4:c2:31:36:06:bf:52:52:a6:d1:57:3e:27:19:
95:fc:44:5c:c6:93:dc:61:aa:c1:4e:2a:bc:0b:8a:4e:64:9d:
e6:25:5f:38:48:63:05:f2:6d:3f:42:eb:b4:d2:83:9d:4a:8f:
e2:1b:4c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:32 2025 by rpki-client