Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/Pffna9qNphCqBq7DzlA336VVqEc.roa
File: Pffna9qNphCqBq7DzlA336VVqEc.roa (raw, json)
Hash identifier: SGHk9mZloSRNiGkHsrBZNPbUiyViE6a+CKOk0c8G740=
Subject key identifier: 3D:F7:E7:6B:DA:8D:A6:10:AA:06:AE:C3:CE:50:37:DF:A5:55:A8:47
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11EA
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Pffna9qNphCqBq7DzlA336VVqEc.roa
Signing time: Fri 14 Mar 2025 09:40:10 +0000
ROA not before: Fri 14 Mar 2025 09:40:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 2409:2002::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4586 (0x11ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:40:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3DF7E76BDA8DA610AA06AEC3CE5037DFA555A847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:d2:94:44:bf:74:92:3d:81:ef:21:0e:18:
7c:be:1c:80:85:20:71:62:06:ea:e0:62:80:a4:08:
d8:18:e2:e8:0f:70:e0:e8:e1:f0:0a:21:59:f2:be:
4a:45:78:66:78:be:bc:a1:9c:02:22:b3:f9:04:3d:
4e:e1:c7:f3:88:66:dd:18:7c:27:be:c5:64:16:00:
35:99:b2:71:8a:96:d6:ff:c6:19:1b:52:81:58:63:
56:6f:14:cb:e4:93:4d:b4:ed:db:13:13:d7:24:09:
01:8a:a3:97:60:0f:90:16:b6:8d:53:45:18:59:3d:
0d:4a:be:8c:e4:bc:64:fe:bd:1d:37:64:51:48:b1:
e7:dd:e1:f1:ae:d6:ed:82:19:40:4d:e2:74:3d:e4:
33:6d:d7:5f:b8:39:a4:5b:03:49:46:e7:2c:b7:a6:
a2:70:10:5a:61:63:dc:fd:27:85:c4:1a:22:7a:3d:
fb:fa:5c:45:3b:f6:0e:6f:ac:87:19:23:a4:70:ee:
66:22:2a:36:3f:6c:3c:37:57:05:51:6c:96:89:e5:
ea:b5:fb:c1:1d:d3:8e:ed:76:57:c5:88:cd:51:36:
2a:b3:51:78:5a:13:9b:b5:ef:aa:48:25:72:e7:25:
a3:df:86:6e:d8:6d:a3:de:83:71:72:b9:ed:07:f1:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F7:E7:6B:DA:8D:A6:10:AA:06:AE:C3:CE:50:37:DF:A5:55:A8:47
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Pffna9qNphCqBq7DzlA336VVqEc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2409:2002::/32
Signature Algorithm: sha256WithRSAEncryption
81:88:ba:88:8b:4f:8c:b8:f1:e9:5b:d0:63:64:6b:ce:8a:a8:
e6:fa:c7:67:31:f0:75:05:a2:c6:31:50:ec:0b:23:52:22:8f:
3c:83:28:a1:f5:92:ce:ed:48:1b:1a:98:60:e2:43:b4:50:7e:
e4:aa:9b:d0:63:c1:2b:a2:26:a9:8d:ca:94:41:a7:1e:65:12:
85:fb:c4:79:12:c1:76:1d:a4:0f:a4:10:8f:95:bd:d9:cd:7a:
54:86:82:d1:da:e0:ba:eb:68:0e:f1:38:37:e1:57:66:cb:ac:
b6:32:2e:1f:c0:9e:4b:37:22:43:da:ca:ec:2e:36:5d:f9:27:
b7:7d:e7:2c:c2:81:1e:3e:5e:24:f0:44:e3:87:97:e5:ad:9f:
49:ad:60:ec:c0:44:4f:66:e4:1a:f6:ff:4d:9e:39:a6:19:b6:
b1:e7:5e:f7:2b:17:53:5b:fa:4e:99:76:aa:a8:b8:25:14:46:
e8:de:b1:46:ea:94:7e:7a:48:ae:d4:dc:87:f0:98:34:15:99:
32:e8:f0:8a:14:74:eb:32:24:3d:35:f6:63:51:1e:ee:5d:4d:
9b:f8:2e:46:ed:4d:e7:bb:b6:35:66:82:eb:a4:3c:ab:fe:df:
72:87:d8:7c:da:4e:33:02:27:f6:fb:4f:8f:d7:b2:ab:52:3e:
1d:a0:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:37 2025 by rpki-client