Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/fFW5_t7XVzLKernsExPGIFpM2JA.roa
File: fFW5_t7XVzLKernsExPGIFpM2JA.roa (raw, json)
Hash identifier: pRxq7Rip4CxMTe0waVEB0Oz3tf8WBd6skOfdjzyUrSs=
Subject key identifier: 7C:55:B9:FE:DE:D7:57:32:CA:7A:B9:EC:13:13:C6:20:5A:4C:D8:90
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 12B1
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/fFW5_t7XVzLKernsExPGIFpM2JA.roa
Signing time: Fri 17 Jan 2025 01:26:14 +0000
ROA not before: Fri 17 Jan 2025 01:26:14 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 58593
IP address blocks: 2404:7940::/32 maxlen: 64
2406:e500::/33 maxlen: 64
2406:e500::/48 maxlen: 64
2406:e500:1::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4785 (0x12b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 17 01:26:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7C55B9FEDED75732CA7AB9EC1313C6205A4CD890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:85:11:f7:b4:e3:6b:40:00:e1:b8:e5:69:
9f:79:1a:54:2b:3a:62:49:03:b9:c4:fe:ec:b7:f7:
1f:7a:a4:a7:c2:94:dc:2b:d8:b1:07:db:54:bc:66:
13:0c:8d:e3:24:9c:cc:27:e8:26:f4:c6:25:ec:c0:
1d:65:d9:68:51:b2:58:28:a6:45:2f:bf:db:db:ff:
27:1d:43:30:40:13:71:71:85:39:ad:3d:5a:17:76:
33:58:e8:89:5c:05:c9:e8:67:40:57:81:be:59:6a:
32:61:5b:24:4d:ff:95:58:ee:c5:ce:af:7e:f6:7c:
66:3f:aa:d6:89:0d:c6:26:b9:bd:44:0d:06:fc:23:
d0:45:9c:5a:6c:45:e2:a4:da:93:e0:ba:5a:e2:43:
4b:61:da:ed:99:fd:b4:0a:73:63:4e:55:62:19:9a:
56:c9:d4:37:0e:00:ee:a4:c9:9d:53:dc:a8:73:a8:
eb:33:a3:25:8d:a3:0b:3b:7d:de:f3:04:57:30:14:
39:d7:36:84:cb:b0:1d:5b:79:65:f7:1e:05:3c:8a:
ae:0b:6e:3f:1b:91:4b:0f:a3:10:8a:61:ea:eb:25:
cc:93:48:48:b0:33:7f:c8:93:54:1f:28:b6:30:ec:
f2:f4:c2:c2:da:fa:b9:aa:d1:12:23:f2:51:12:95:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:55:B9:FE:DE:D7:57:32:CA:7A:B9:EC:13:13:C6:20:5A:4C:D8:90
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/fFW5_t7XVzLKernsExPGIFpM2JA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:7940::/32
2406:e500::/33
Signature Algorithm: sha256WithRSAEncryption
2c:0e:f4:51:50:73:08:2c:f4:3f:cd:e0:fa:2f:5e:17:c8:f9:
6a:fb:43:85:dd:59:fd:90:d9:4d:67:ed:7c:f9:3d:71:d6:1e:
de:4c:55:af:9a:5d:4d:0c:37:77:b0:24:71:dc:82:fd:a0:16:
49:f7:5d:5b:9b:59:32:e8:f2:e9:b9:b7:cd:c3:ae:a9:b0:c1:
d1:9c:bc:5f:d6:00:4b:ae:eb:a0:a4:7b:8e:21:b8:68:21:93:
d4:5e:8d:18:4d:c4:08:67:a5:7a:04:a3:bd:81:5c:b2:68:4a:
72:48:0e:f2:09:18:a3:c5:3e:98:fc:e2:d9:50:8c:30:9a:b4:
8d:f5:f2:74:98:f4:2c:a2:0e:eb:72:f0:01:66:b4:5a:66:65:
92:6a:8f:3e:f9:3a:81:50:a0:9d:a8:32:52:4f:80:b2:d1:8b:
03:19:99:d9:f4:be:a0:eb:45:7d:07:81:1b:ee:be:0c:5f:3d:
b0:8a:c4:44:52:2b:8c:31:34:8e:5d:42:66:ac:fa:2b:df:39:
dd:a5:3f:38:c2:2d:8b:0c:70:16:05:ce:37:a0:1e:8c:2c:da:
aa:49:57:15:51:9e:c7:f2:a4:e3:9d:68:5d:79:95:28:e7:9f:
ff:ce:b6:d9:76:ca:0f:f5:80:d1:0c:66:04:41:e3:54:21:fb:
79:c3:9f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:11:20 2025 by rpki-client