Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3252/YsrjFcZoPbq_H6UBGs6P4Myiln0.roa
File: YsrjFcZoPbq_H6UBGs6P4Myiln0.roa (raw, json)
Hash identifier: nZDXdRLvJ2E3hfCiWBb1shIHiX4jjOknmGjGKiH7tC0=
Subject key identifier: 62:CA:E3:15:C6:68:3D:BA:BF:1F:A5:01:1A:CE:8F:E0:CC:A2:96:7D
Certificate issuer: /CN=EA1DD0A5BE3961989984E1C447C241FFC16DAA33
Certificate serial: 06CA
Authority key identifier: EA:1D:D0:A5:BE:39:61:98:99:84:E1:C4:47:C2:41:FF:C1:6D:AA:33
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6h3Qpb45YZiZhOHER8JB_8FtqjM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/YsrjFcZoPbq_H6UBGs6P4Myiln0.roa
Signing time: Wed 18 Dec 2024 02:22:57 +0000
ROA not before: Wed 18 Dec 2024 02:22:57 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63538
IP address blocks: 2401:70e0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA1DD0A5BE3961989984E1C447C241FFC16DAA33
Validity
Not Before: Dec 18 02:22:57 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=62CAE315C6683DBABF1FA5011ACE8FE0CCA2967D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:4f:b7:26:bc:23:17:59:10:3a:52:dd:96:
07:bc:eb:79:c8:fc:98:6e:c1:9a:67:62:97:32:cb:
42:6d:46:68:2f:ff:b0:e4:42:f4:4a:99:db:aa:e8:
5b:8d:07:e5:e4:fe:3d:a7:e3:35:92:7b:5e:8e:b2:
d0:5a:06:6a:56:05:59:4d:b1:a1:cb:95:a4:3b:02:
1f:79:4f:fd:33:3b:59:0a:99:f1:d7:b1:9c:a6:08:
66:cf:b1:a6:71:42:60:84:50:f4:75:20:32:5d:f6:
9b:79:e3:fa:a2:c9:5c:e6:d3:cf:b5:53:ad:a2:3e:
a9:d0:66:bc:44:f0:d4:29:7b:11:ea:95:8c:d9:8b:
18:b1:c2:28:68:4e:8d:b6:89:3f:72:e2:67:52:de:
4f:45:8a:08:0d:2b:ad:c1:93:af:41:9a:b4:18:7f:
63:9e:29:53:20:33:e6:f7:6d:80:c1:06:d8:b6:e1:
08:87:74:25:46:4c:c9:25:00:d0:d4:9b:e1:68:01:
60:f5:e3:d9:87:91:ad:82:96:cd:6b:47:37:f7:4c:
10:67:9f:39:fb:89:c0:c0:29:bc:20:d5:cb:13:2f:
6b:5c:0b:d6:52:ee:2a:1f:02:86:fb:39:2a:25:cc:
71:3f:14:4e:a4:90:3e:a1:90:b6:38:e3:b0:1c:9d:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CA:E3:15:C6:68:3D:BA:BF:1F:A5:01:1A:CE:8F:E0:CC:A2:96:7D
X509v3 Authority Key Identifier:
keyid:EA:1D:D0:A5:BE:39:61:98:99:84:E1:C4:47:C2:41:FF:C1:6D:AA:33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/6h3Qpb45YZiZhOHER8JB_8FtqjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6h3Qpb45YZiZhOHER8JB_8FtqjM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/YsrjFcZoPbq_H6UBGs6P4Myiln0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:70e0::/32
Signature Algorithm: sha256WithRSAEncryption
c9:9f:3b:e6:6d:b4:c5:0a:8a:03:61:03:c5:c0:6d:10:f2:a1:
aa:cf:d7:d7:4b:37:dc:b6:16:99:d6:f6:8e:1c:2a:b5:1c:01:
a9:b5:04:be:dc:c1:bf:57:92:f8:e9:6b:58:17:cb:27:ba:58:
85:73:26:e1:56:7e:a6:9e:a5:be:56:89:18:65:19:22:10:a4:
96:1c:25:0d:2d:41:cb:92:f0:6a:a6:92:76:ce:32:42:32:0b:
39:22:c7:e7:74:71:70:d0:ac:bd:d6:33:77:3d:84:51:f2:4f:
93:70:d4:5a:bf:f8:d3:91:ee:af:e2:86:65:82:ef:8f:5d:7e:
6d:97:86:3c:a2:fc:e0:03:d0:62:7f:17:70:0e:b0:01:38:cd:
0e:3a:04:3c:a8:2e:d9:12:89:2e:81:4c:7e:85:b1:de:28:4b:
67:24:a1:86:0c:65:85:65:3c:3e:bd:af:9a:16:a1:57:da:31:
9e:6d:3f:9b:71:79:c6:83:6e:bb:aa:f4:0f:23:d7:c4:89:26:
6f:e9:c0:ee:3a:16:dd:2b:39:b0:d6:57:80:cc:d6:40:fe:eb:
a9:8c:63:90:ce:c4:ec:43:53:63:2e:53:23:1d:29:20:24:cd:
ff:12:75:72:c6:98:24:81:b0:eb:35:d3:71:8e:1a:f8:c9:cb:
a5:e0:56:41
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUEx
REQwQTVCRTM5NjE5ODk5ODRFMUM0NDdDMjQxRkZDMTZEQUEzMzAeFw0yNDEyMTgw
MjIyNTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYyQ0FFMzE1QzY2ODNE
QkFCRjFGQTUwMTFBQ0U4RkUwQ0NBMjk2N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQOE+3JrwjF1kQOlLdlge863nI/JhuwZpnYpcyy0JtRmgv/7Dk
QvRKmduq6FuNB+Xk/j2n4zWSe16OstBaBmpWBVlNsaHLlaQ7Ah95T/0zO1kKmfHX
sZymCGbPsaZxQmCEUPR1IDJd9pt54/qiyVzm08+1U62iPqnQZrxE8NQpexHqlYzZ
ixixwihoTo22iT9y4mdS3k9FiggNK63Bk69BmrQYf2OeKVMgM+b3bYDBBti24QiH
dCVGTMklANDUm+FoAWD149mHka2Cls1rRzf3TBBnnzn7icDAKbwg1csTL2tcC9ZS
7iofAob7OSolzHE/FE6kkD6hkLY447AcnfKvAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUYsrjFcZoPbq/H6UBGs6P4Myiln0wHwYDVR0jBBgwFoAU6h3Qpb45YZiZhOHE
R8JB/8FtqjMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
Mi82aDNRcGI0NVlaaVpoT0hFUjhKQl84RnRxak0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzZoM1FwYjQ1WVppWmhPSEVSOEpCXzhGdHFqTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTIvWXNyakZjWm9QYnFf
SDZVQkdzNlA0TXlpbG4wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQBcOAwDQYJKoZIhvcNAQELBQADggEBAMmfO+ZttMUKigNhA8XAbRDyoarP
19dLN9y2FpnW9o4cKrUcAam1BL7cwb9Xkvjpa1gXyye6WIVzJuFWfqaepb5WiRhl
GSIQpJYcJQ0tQcuS8GqmknbOMkIyCzkix+d0cXDQrL3WM3c9hFHyT5Nw1Fq/+NOR
7q/ihmWC749dfm2Xhjyi/OAD0GJ/F3AOsAE4zQ46BDyoLtkSiS6BTH6Fsd4oS2ck
oYYMZYVlPD69r5oWoVfaMZ5tP5txecaDbruq9A8j18SJJm/pwO46Ft0rObDWV4DM
1kD+66mMY5DOxOxDU2MuUyMdKSAkzf8SdXLGmCSBsOs103GOGvjJy6XgVkE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:44 2025 by rpki-client