Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/anYE50FB83Biwm9Cdfrin1Pdke4.roa
File: anYE50FB83Biwm9Cdfrin1Pdke4.roa (raw, json)
Hash identifier: H3AxRLrszvRvgNqwfmKEg+aMan4hBV5gw92ZRcjtfKI=
Subject key identifier: 6A:76:04:E7:41:41:F3:70:62:C2:6F:42:75:FA:E2:9F:53:DD:91:EE
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 1959
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/anYE50FB83Biwm9Cdfrin1Pdke4.roa
Signing time: Fri 17 Jan 2025 01:23:48 +0000
ROA not before: Fri 17 Jan 2025 01:23:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6489 (0x1959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jan 17 01:23:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6A7604E74141F37062C26F4275FAE29F53DD91EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:f5:87:20:17:1a:0e:ef:2f:18:f1:7b:18:
8a:33:83:66:6f:3c:8d:1f:4d:52:12:f9:77:d5:77:
61:33:1b:bc:0e:51:3c:65:c6:d3:76:ca:88:1c:0c:
bc:a1:71:90:3a:69:ac:87:47:cd:20:0a:16:e2:73:
50:f4:d9:b9:dd:6d:83:c7:1a:c3:a9:7c:ce:25:5e:
bd:75:0b:41:9f:9d:57:db:d7:74:b5:95:22:d4:4b:
10:fc:19:e5:fb:7f:fb:df:a4:0d:e9:42:e9:a9:95:
1c:29:aa:46:60:a2:bb:56:f7:7b:3f:e7:1f:55:5a:
82:f2:dc:c9:7b:74:27:a8:68:4c:a6:3f:4f:cc:c4:
8c:af:8b:e9:a9:af:95:b9:9d:79:8d:49:ab:0c:7e:
1a:d2:e2:86:b1:87:ea:45:7c:6f:72:e6:60:88:fc:
b6:75:37:9e:0d:95:fe:0e:98:fa:d7:de:1c:69:93:
6f:b2:1c:88:1c:56:15:ba:c9:28:67:b5:2d:5c:18:
b1:b3:74:06:72:18:7a:01:7c:9c:f7:b2:37:a7:3d:
d8:2b:55:44:ff:9a:35:dc:7b:e8:5b:d1:3d:de:29:
6e:46:c6:09:d8:70:3e:07:1f:20:c4:a1:f5:eb:dd:
87:01:22:9b:67:3f:74:56:4b:2f:98:12:e8:30:52:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:76:04:E7:41:41:F3:70:62:C2:6F:42:75:FA:E2:9F:53:DD:91:EE
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/anYE50FB83Biwm9Cdfrin1Pdke4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
a6:56:f0:ad:55:e6:1c:5d:06:34:e8:04:6a:96:57:7c:7f:ad:
d0:fa:13:77:16:5b:70:ce:93:77:88:8d:b0:33:bf:36:34:df:
68:a4:60:ed:2b:29:57:76:70:f6:dc:03:89:70:7d:57:6c:24:
2c:64:21:de:ab:73:a8:1f:e5:cd:92:1b:63:40:0f:90:5f:de:
1c:48:4b:39:b3:97:bb:54:ef:f6:a7:1f:78:bd:7b:b4:0a:09:
d8:65:27:c3:10:bf:2a:ed:37:73:dc:60:c6:5c:9c:df:06:a6:
88:57:7b:f5:88:b9:17:70:84:0c:51:4d:f0:b9:fa:99:33:3d:
ca:38:3f:63:41:7a:65:a7:c7:79:48:fa:de:03:37:6b:9d:8c:
61:49:19:7b:0e:83:ef:66:11:30:e6:f5:ec:6a:f5:9b:af:8d:
7f:73:19:ef:b1:56:93:c2:7e:0f:5c:69:df:d6:6a:fa:0d:39:
a7:f9:cc:13:f2:9a:24:3e:66:e2:af:51:e2:e1:3c:d6:f9:f0:
06:97:f3:30:90:9e:20:64:41:bf:38:4e:80:54:2e:28:61:b0:
39:6b:cc:0c:a1:bb:38:b4:4f:c8:b8:7d:7c:81:d3:66:ec:50:
22:47:bc:7d:33:d1:e6:d9:f8:71:98:fd:54:b5:51:18:7d:7d:
b5:15:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:22 2025 by rpki-client