Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/4mivCFMBAf7EEBKKxRo0rub4T64.roa
File: 4mivCFMBAf7EEBKKxRo0rub4T64.roa (raw, json)
Hash identifier: jz9z1yXxrP3c49QtbOgAGOSwj2Y8ZkTwUpXiF59bJtI=
Subject key identifier: E2:68:AF:08:53:01:01:FE:C4:10:12:8A:C5:1A:34:AE:E6:F8:4F:AE
Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial: 12A1
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/4mivCFMBAf7EEBKKxRo0rub4T64.roa
Signing time: Fri 17 Jan 2025 01:26:59 +0000
ROA not before: Fri 17 Jan 2025 01:26:59 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137798
IP address blocks: 2402:f8c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4769 (0x12a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Validity
Not Before: Jan 17 01:26:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E268AF08530101FEC410128AC51A34AEE6F84FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:21:e5:ee:dc:02:eb:48:38:28:ab:81:d6:
3a:75:a1:8c:b7:81:ac:46:89:6d:0c:ad:56:17:1c:
88:62:35:81:ce:63:d2:c8:3a:e0:51:95:46:6c:df:
c2:91:07:a2:09:5f:8c:75:8b:97:4b:3b:f9:6c:02:
03:65:06:44:2b:53:9a:8d:fa:15:d9:17:be:01:4e:
a8:99:42:5e:11:3f:a5:a8:e7:d0:40:96:7d:05:c5:
88:48:b7:86:9b:ff:bd:08:f4:dc:4c:42:32:b5:6c:
a1:aa:43:d2:be:12:b2:31:76:54:b1:7d:70:cb:29:
0f:bf:bb:4d:b1:44:bc:28:31:09:ae:0c:62:95:29:
d5:89:e6:7a:7a:5e:f6:df:79:34:be:86:e7:ba:bf:
19:b3:72:4e:9f:bd:60:b9:28:36:04:2d:94:88:05:
56:7d:2e:1d:c5:15:f0:77:97:23:f0:ce:dd:c7:a0:
46:63:5c:29:d7:8d:1f:0c:f6:fe:e1:7a:28:f4:64:
d6:6c:55:78:12:8f:b7:a7:d0:2b:a5:83:38:aa:fd:
7b:35:05:82:50:a2:73:cf:5d:f8:24:4b:f2:0d:0a:
7a:d8:1e:6f:73:36:6c:1b:0c:2c:c6:60:d0:50:6a:
d3:2f:7c:5d:c0:72:af:87:16:42:79:19:e0:c6:49:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:AF:08:53:01:01:FE:C4:10:12:8A:C5:1A:34:AE:E6:F8:4F:AE
X509v3 Authority Key Identifier:
keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/4mivCFMBAf7EEBKKxRo0rub4T64.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:f8c0::/48
Signature Algorithm: sha256WithRSAEncryption
98:d8:cb:b5:32:33:7e:15:5f:1b:6c:01:b5:4d:ea:8a:cc:76:
93:2c:9b:f2:9b:a2:f7:64:b2:59:27:41:50:78:f2:04:0d:21:
99:51:e6:aa:78:d9:88:cc:3f:05:b6:d3:e8:a6:2c:99:47:78:
51:2c:ef:7b:0b:d1:fb:e0:d5:95:e1:ed:7c:f8:b5:b8:cc:c7:
6e:a7:ed:cd:0e:d1:79:40:16:77:83:b1:bc:22:3d:01:05:fd:
45:66:b9:b4:20:05:25:a0:48:de:50:48:3f:68:fe:88:01:ef:
f5:d2:00:e5:9b:0d:da:ac:c9:ef:bf:4e:76:23:1e:03:54:92:
33:35:54:15:6c:a8:e3:ed:3f:6a:18:e6:12:dd:11:71:d7:b3:
2c:dc:e2:ce:8e:48:91:d8:59:4e:95:31:b4:cd:0d:a4:9e:8f:
d7:fe:82:db:c9:7d:23:4c:e8:a9:5c:d4:bb:ea:15:97:1f:c9:
01:cb:f5:ac:d1:b8:98:2c:95:90:b7:44:0c:83:a7:4c:e2:e0:
2d:5e:17:70:51:b2:e8:62:24:f2:85:24:68:c4:b7:ce:4e:4e:
b8:33:70:59:36:ef:c7:74:63:2e:0a:a8:d1:e3:a4:db:5a:4e:
43:c9:75:78:13:5d:21:c3:21:49:4c:ae:b7:99:41:14:e1:52:
f7:e0:73:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:22 2025 by rpki-client