Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/K2DI8AWS4h2Xor0pP8dUnI921v4.roa
File: K2DI8AWS4h2Xor0pP8dUnI921v4.roa (raw, json)
Hash identifier: jiR1NlU3L4wBKvgBnsV9v8uesIb3SdPMAF42w1v/P+0=
Subject key identifier: 2B:60:C8:F0:05:92:E2:1D:97:A2:BD:29:3F:C7:54:9C:8F:76:D6:FE
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1D22
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/K2DI8AWS4h2Xor0pP8dUnI921v4.roa
Signing time: Fri 17 Jan 2025 01:29:54 +0000
ROA not before: Fri 17 Jan 2025 01:29:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 2406:d440::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7458 (0x1d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 17 01:29:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2B60C8F00592E21D97A2BD293FC7549C8F76D6FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:95:cd:a4:48:08:20:8c:48:6e:50:e2:16:
34:2c:22:4c:ae:30:20:0a:e0:4a:45:72:e7:f2:39:
a4:82:77:52:f7:20:e3:70:11:11:84:3e:10:14:b5:
f1:af:6d:1b:fc:1f:fd:5a:b5:59:38:f4:c5:90:14:
a8:bc:ee:4c:2d:b5:6d:8a:0d:a2:cd:4b:d6:7b:c0:
11:82:e9:83:35:c8:1f:fa:a0:17:dd:b6:e2:13:5d:
21:be:2e:c8:69:e4:20:1c:a6:25:c5:6d:8a:a0:da:
1a:ee:25:09:b8:9b:0c:fe:e5:d4:e1:02:1d:eb:d7:
a0:d8:ae:fe:60:8f:81:6e:ec:19:6e:3f:2c:34:ae:
be:8f:e9:80:6e:50:d9:e0:fc:9d:66:fe:33:32:d9:
be:af:9e:59:03:01:03:c6:d5:4a:ab:cb:e0:b2:6f:
63:fc:51:12:72:04:64:f5:c0:dc:89:f8:d5:da:e2:
fe:26:a8:01:5d:48:05:2e:6e:73:ea:8b:ce:0a:90:
e0:fc:70:ed:4f:8f:9c:25:d5:44:b6:bd:98:2a:48:
0e:db:c9:59:ee:fd:7f:4b:9e:4b:ad:42:e7:dc:60:
74:74:49:a9:fd:56:9b:e6:ba:f5:1d:a3:72:cd:dc:
89:43:70:9b:37:02:ad:c2:a1:1e:54:20:73:60:45:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:60:C8:F0:05:92:E2:1D:97:A2:BD:29:3F:C7:54:9C:8F:76:D6:FE
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/K2DI8AWS4h2Xor0pP8dUnI921v4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:d440::/32
Signature Algorithm: sha256WithRSAEncryption
2f:de:3f:06:40:34:da:d9:6f:69:28:72:07:42:1d:dd:09:c7:
4c:61:a8:c7:21:d0:0e:61:ec:cf:f8:12:39:57:d3:96:0b:81:
ec:bb:02:b3:8f:d7:60:a0:5c:30:6a:e6:d3:27:d0:18:53:53:
c1:09:26:6e:7c:9b:d9:ac:ca:17:7c:74:91:85:b9:ce:56:71:
94:e7:70:7f:2d:44:c8:02:08:ec:d3:e3:03:62:5b:b1:53:22:
cc:3e:18:9f:44:77:d4:7c:3c:19:4c:c9:8e:be:03:72:dd:e0:
ce:85:1e:62:3d:ad:07:cc:bf:5c:49:0a:05:ff:6a:77:db:b3:
07:c4:c8:d4:1b:88:36:18:25:67:6a:52:7f:8e:41:2e:2d:ce:
05:2f:5d:6e:6c:0b:9f:27:b8:14:5a:3e:bd:d7:ee:91:c6:48:
6b:f8:34:d2:31:4e:a5:22:89:ec:a0:07:ec:31:87:1d:e4:5b:
a6:63:ca:c0:01:e1:7d:8d:7a:3f:ae:54:8d:30:fa:82:4f:ed:
7f:37:cb:5b:3b:bb:af:c2:97:95:c4:cd:ed:ed:83:d1:7b:bc:
2e:92:5d:82:a4:62:8e:40:e3:c8:e4:06:01:6f:47:41:74:d4:
81:79:df:44:59:56:9a:32:bd:4d:0f:d5:06:b6:c5:04:56:90:
db:04:08:3b
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICHSIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMTcw
MTI5NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJCNjBDOEYwMDU5MkUy
MUQ5N0EyQkQyOTNGQzc1NDlDOEY3NkQ2RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpNJXNpEgIIIxIblDiFjQsIkyuMCAK4EpFcufyOaSCd1L3IONw
ERGEPhAUtfGvbRv8H/1atVk49MWQFKi87kwttW2KDaLNS9Z7wBGC6YM1yB/6oBfd
tuITXSG+Lshp5CAcpiXFbYqg2hruJQm4mwz+5dThAh3r16DYrv5gj4Fu7BluPyw0
rr6P6YBuUNng/J1m/jMy2b6vnlkDAQPG1Uqry+Cyb2P8URJyBGT1wNyJ+NXa4v4m
qAFdSAUubnPqi84KkOD8cO1Pj5wl1US2vZgqSA7byVnu/X9LnkutQufcYHR0San9
VpvmuvUdo3LN3IlDcJs3Aq3CoR5UIHNgRTIHAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUK2DI8AWS4h2Xor0pP8dUnI921v4wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvSzJESThBV1M0aDJY
b3IwcFA4ZFVuSTkyMXY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQG1EAwDQYJKoZIhvcNAQELBQADggEBAC/ePwZANNrZb2kocgdCHd0Jx0xh
qMch0A5h7M/4EjlX05YLgey7ArOP12CgXDBq5tMn0BhTU8EJJm58m9msyhd8dJGF
uc5WcZTncH8tRMgCCOzT4wNiW7FTIsw+GJ9Ed9R8PBlMyY6+A3Ld4M6FHmI9rQfM
v1xJCgX/anfbswfEyNQbiDYYJWdqUn+OQS4tzgUvXW5sC58nuBRaPr3X7pHGSGv4
NNIxTqUiieygB+wxhx3kW6ZjysAB4X2Nej+uVI0w+oJP7X83y1s7u6/Cl5XEze3t
g9F7vC6SXYKkYo5A48jkBgFvR0F01IF530RZVpoyvU0P1Qa2xQRWkNsECDs=
-----END CERTIFICATE-----
Generated at Mon Apr 14 01:36:06 2025 by rpki-client