Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/Q1rsKoujdiHNqktENqeOXuHVNnM.roa
File: Q1rsKoujdiHNqktENqeOXuHVNnM.roa (raw, json)
Hash identifier: 4D+MNZUweKH7/QuFOGyZbROpGIVNhE+FjniWK0U1Vq4=
Subject key identifier: 43:5A:EC:2A:8B:A3:76:21:CD:AA:4B:44:36:A7:8E:5E:E1:D5:36:73
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1D21
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Q1rsKoujdiHNqktENqeOXuHVNnM.roa
Signing time: Fri 17 Jan 2025 01:29:54 +0000
ROA not before: Fri 17 Jan 2025 01:29:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4811
IP address blocks: 2406:d440:ff00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7457 (0x1d21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 17 01:29:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=435AEC2A8BA37621CDAA4B4436A78E5EE1D53673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:ca:12:f4:a7:ba:28:83:b8:b5:14:09:b6:
f1:a2:ed:53:99:f0:1b:85:f3:b2:0f:f5:30:69:65:
3c:a8:d2:62:44:c4:b1:9f:f5:44:3b:8d:30:b6:f1:
54:34:98:d2:dc:a1:98:80:0d:15:d5:fb:64:33:1f:
7f:df:7b:d9:cf:62:9a:df:19:77:1c:0f:04:bd:c6:
01:18:2f:ab:9b:1e:68:f3:6a:7f:b7:ca:c0:f5:0b:
e9:fd:bf:64:03:58:f0:a4:3a:85:2f:01:84:af:e6:
23:0c:bd:48:20:6b:43:66:4b:f7:82:f5:a5:93:63:
b5:b6:d3:a5:2d:23:91:02:04:fc:72:b3:02:0a:0b:
c6:a7:d4:e1:6c:ff:07:a2:4f:fc:65:92:87:d9:00:
7a:6a:c5:0e:e4:fe:7b:32:88:bd:2c:84:6e:bb:0c:
d4:eb:f8:b4:0f:05:4e:06:3d:50:21:b6:b0:62:53:
0a:0e:67:b0:09:d0:ee:72:32:93:6a:2f:5a:62:d3:
80:8b:34:13:76:5e:97:31:06:b1:79:18:bd:03:26:
84:69:f9:60:39:39:e2:80:bc:f3:5d:71:ea:cb:dd:
b2:b1:f9:b2:88:15:c4:fb:c8:67:76:0d:b0:aa:fe:
33:2a:fb:ba:bb:c8:09:0f:93:33:77:f8:c2:7a:18:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5A:EC:2A:8B:A3:76:21:CD:AA:4B:44:36:A7:8E:5E:E1:D5:36:73
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Q1rsKoujdiHNqktENqeOXuHVNnM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:d440:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
47:1a:26:5d:39:96:8f:d6:00:9c:26:34:cd:d7:e9:55:14:bb:
57:3d:48:ad:15:4d:47:c7:6a:f0:21:24:42:6b:a4:91:c9:c3:
e6:be:b3:47:70:bc:6b:74:fc:d4:cd:4b:c0:b9:63:3c:f2:a8:
cd:47:70:09:68:81:cd:d2:db:05:07:5d:d8:11:0b:e3:59:08:
98:b3:8f:84:d1:36:14:7f:91:57:8f:2b:2a:76:88:2a:15:35:
8d:c4:ed:c6:96:47:7b:e5:9d:c5:68:25:4b:d6:36:9b:31:83:
df:e7:06:d0:97:92:95:8c:d3:61:13:0c:5e:6b:f5:ae:28:f3:
29:32:c1:96:4a:d1:76:55:87:f0:3d:74:9b:21:9f:38:bf:38:
06:a3:cb:38:3e:9b:e5:33:ee:1e:5b:45:a2:1d:08:51:cc:00:
a1:b3:c6:bc:24:f3:4c:21:a8:f2:ca:7d:80:d0:f1:fb:02:ee:
23:90:f0:95:b4:be:92:e9:1a:7d:19:8c:2c:55:f1:40:a4:aa:
bb:da:d5:6f:cd:07:fe:93:33:ea:3a:d8:27:7f:88:83:03:21:
9d:7a:bf:77:b5:43:9f:1a:9e:e4:15:2e:ed:89:50:f1:b7:93:
7e:9a:0e:3f:6d:e4:8b:a9:ae:49:d0:db:c9:63:3f:d0:75:3f:
f2:27:61:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 13:47:33 2025 by rpki-client