Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/v3P2a1Pa0DQP8E1DSBIGjv-ZBoU.roa
File: v3P2a1Pa0DQP8E1DSBIGjv-ZBoU.roa (raw, json)
Hash identifier: /IT0ukCR0RQKPUiDl/F0eageakvuhpSm9Qj8BoZVK20=
Subject key identifier: BF:73:F6:6B:53:DA:D0:34:0F:F0:4D:43:48:12:06:8E:FF:99:06:85
Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial: 1F74
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/v3P2a1Pa0DQP8E1DSBIGjv-ZBoU.roa
Signing time: Fri 17 Jan 2025 01:29:11 +0000
ROA not before: Fri 17 Jan 2025 01:29:11 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 49544
IP address blocks: 2406:d140::/32 maxlen: 48
2406:d140:8000::/34 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8052 (0x1f74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Validity
Not Before: Jan 17 01:29:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BF73F66B53DAD0340FF04D434812068EFF990685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:ba:84:79:7a:22:0f:9c:64:5f:2f:9d:38:
89:03:e2:ca:8d:17:6f:b9:b6:f8:d0:78:9c:67:15:
af:28:81:65:cc:0d:31:16:07:66:0c:28:ce:34:1e:
2c:74:63:90:3a:60:c1:78:06:0d:f0:9e:06:f6:b3:
82:2b:61:45:5b:0b:d6:dc:3a:e4:0c:7a:ec:f1:69:
0b:21:93:7c:dc:cb:6e:89:9f:01:2b:ed:dd:08:00:
36:67:4d:2b:3e:13:af:0b:d2:da:ed:51:43:65:ae:
2f:df:e7:8c:9e:aa:38:7c:c6:e8:38:1b:f1:1a:73:
cb:a7:af:4d:b0:59:04:81:49:5e:2e:fd:29:1b:04:
06:6d:0e:f2:76:4d:cf:ac:9a:76:65:b0:ac:9c:ff:
4f:ba:9c:36:e0:b1:a6:e8:73:6a:d0:67:82:ea:4d:
c9:eb:1b:3a:72:8a:83:35:53:7b:89:46:99:53:a7:
9d:42:bb:f8:0f:02:6c:77:b4:71:08:d9:a2:d0:3f:
97:2a:31:c0:31:59:20:a5:7b:4e:17:0b:05:91:f4:
a4:39:33:51:58:1e:ee:94:25:7c:66:76:a7:0d:00:
42:7b:20:df:38:07:a3:80:1c:a9:0a:c9:1f:62:e7:
cb:33:81:bd:73:de:41:cf:97:49:59:81:04:3b:ea:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:F6:6B:53:DA:D0:34:0F:F0:4D:43:48:12:06:8E:FF:99:06:85
X509v3 Authority Key Identifier:
keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/v3P2a1Pa0DQP8E1DSBIGjv-ZBoU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:d140::/32
Signature Algorithm: sha256WithRSAEncryption
9a:0b:63:ca:85:9e:9f:ef:5c:cf:99:90:de:e1:4e:d3:a5:d0:
82:3e:37:9a:82:77:c0:ae:3a:18:57:8b:09:27:46:33:f1:c7:
3c:f2:3e:2e:02:cd:eb:50:b1:55:5c:7e:ef:ce:04:3e:43:dc:
25:c3:28:28:d0:61:13:c3:1c:15:5f:3c:23:89:0b:48:81:c6:
58:08:86:40:8f:7d:88:8c:77:09:c8:84:37:37:29:11:15:2f:
a5:69:1e:89:c7:be:9b:70:6d:de:15:3c:06:d5:e5:d4:ef:6e:
b7:56:cc:62:10:d9:2f:a1:95:0c:59:f2:86:b6:c8:b3:91:95:
70:ef:e3:02:c2:38:ad:dc:45:bd:a4:59:cb:79:69:01:18:b0:
cf:f9:f6:4e:22:3a:02:f0:f5:b3:f9:e3:98:49:3c:39:bc:4b:
a3:e3:6a:ef:5d:65:a7:79:02:ff:ed:4a:28:2b:97:bc:7d:15:
d2:08:76:24:54:40:98:18:ee:09:6d:12:e4:09:62:9d:a5:51:
fe:d0:ef:ec:ca:69:03:5d:62:81:d6:8f:60:78:ff:48:19:ca:
6e:48:af:5b:c7:07:72:c6:1e:27:b4:28:80:52:83:2e:e2:b6:
fb:17:6c:29:e0:36:46:19:10:c9:18:25:db:b3:37:7f:e7:94:
27:53:47:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:19 2025 by rpki-client