Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/497/zfSe_iql4Q8Zvjm6B18MpmZPol4.roa
File: zfSe_iql4Q8Zvjm6B18MpmZPol4.roa (raw, json)
Hash identifier: bDo0RYNVzgOCrUT9k/28io0lTz3YF0dVaV4I+1scPtU=
Subject key identifier: CD:F4:9E:FE:2A:A5:E1:0F:19:BE:39:BA:07:5F:0C:A6:66:4F:A2:5E
Certificate issuer: /CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Certificate serial: 1BE3
Authority key identifier: 46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/zfSe_iql4Q8Zvjm6B18MpmZPol4.roa
Signing time: Fri 17 Jan 2025 01:26:41 +0000
ROA not before: Fri 17 Jan 2025 01:26:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 56002
IP address blocks: 2405:ad00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7139 (0x1be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Validity
Not Before: Jan 17 01:26:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CDF49EFE2AA5E10F19BE39BA075F0CA6664FA25E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:63:3c:73:d2:0c:d7:49:42:6a:d2:38:e1:
0c:ea:46:70:12:7f:1f:49:78:fd:af:72:ef:16:0f:
03:f0:d7:cc:1c:69:e7:04:fa:94:1c:0d:95:3a:72:
2d:86:4d:f1:8a:d9:16:43:a5:5b:78:cd:14:43:fc:
a4:9d:48:51:ff:d9:d9:09:7b:df:76:cb:8f:ba:93:
f6:a8:a7:3a:03:6e:92:14:fe:2a:bf:27:0f:50:04:
91:60:69:83:57:00:8f:38:d7:48:0d:eb:c6:a9:09:
61:eb:4e:f5:5e:bc:19:43:13:9a:de:e8:81:1a:3b:
ea:d4:2b:0d:76:e8:5f:4b:e9:6f:ba:65:a2:ca:48:
f3:6b:07:57:c3:fa:b7:f4:6b:4c:eb:31:e9:fe:66:
14:ad:d8:cf:c5:e9:2e:a9:b4:94:db:26:40:46:77:
ca:22:aa:e7:11:90:05:4b:00:5b:a6:e5:e3:3e:5b:
82:01:e4:07:71:d2:02:c0:44:e3:4b:e2:c3:1b:c2:
f1:1f:a9:33:92:12:a5:63:3f:b4:be:86:40:e5:e0:
f7:32:a6:af:e4:41:d9:c9:a2:a8:f5:f8:de:b2:83:
0d:85:b1:e8:8a:d5:fe:4c:d8:10:7e:70:84:2c:6f:
ff:62:98:73:f0:a2:9f:21:eb:a7:8a:95:81:7a:69:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F4:9E:FE:2A:A5:E1:0F:19:BE:39:BA:07:5F:0C:A6:66:4F:A2:5E
X509v3 Authority Key Identifier:
keyid:46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/zfSe_iql4Q8Zvjm6B18MpmZPol4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:ad00::/32
Signature Algorithm: sha256WithRSAEncryption
7b:6c:5f:08:e4:33:fd:de:73:d5:bb:f4:77:32:75:a4:f9:59:
cf:e4:69:78:b8:0d:cc:10:c0:cb:73:ba:98:d9:2c:e9:14:5a:
ea:98:c6:19:c4:64:5d:e1:63:4e:1a:e7:63:f6:4c:d0:d1:6a:
37:f6:23:2d:ba:d0:e2:b0:10:5a:39:02:29:08:b5:a1:74:5c:
43:69:37:ba:dc:29:f7:8e:02:05:5f:39:15:fe:27:cd:6a:37:
14:f4:84:f2:82:09:6b:2f:64:3d:9c:9a:80:e3:c1:01:e0:e4:
ce:cf:3b:b8:c2:32:09:9b:f6:1f:40:53:60:22:a1:db:f7:f1:
19:c9:2c:5d:c3:be:32:2f:68:14:28:86:c2:dd:1d:52:4c:c2:
99:e1:00:eb:fd:5a:56:9d:4e:9c:48:35:04:bb:ac:bc:52:d7:
42:24:a5:a6:26:5c:4e:d2:6f:6d:fd:77:89:3f:28:12:7c:47:
8e:24:f7:48:c3:93:ad:65:a0:c6:98:00:4e:1c:07:15:56:f4:
8d:1a:01:0c:44:32:da:91:39:6f:b7:99:f9:f6:c5:7d:06:1f:
9f:11:34:c6:a2:bc:4a:5a:69:a1:b5:d5:d1:19:85:dc:f9:2f:
f6:fd:90:73:b2:02:79:ec:cd:57:1e:3b:cf:98:47:1c:af:33:
2d:3c:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:54 2025 by rpki-client