Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/wWhaaAlj9JcGe_kybyrhqCBJARY.roa
File: wWhaaAlj9JcGe_kybyrhqCBJARY.roa (raw, json)
Hash identifier: 5Ql52JvZ+WWSkm9H+KXljVwbKX+AUegjoJOEWl6tCng=
Subject key identifier: C1:68:5A:68:09:63:F4:97:06:7B:F9:32:6F:2A:E1:A8:20:49:01:16
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 1BCC
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/wWhaaAlj9JcGe_kybyrhqCBJARY.roa
Signing time: Fri 17 Jan 2025 01:30:09 +0000
ROA not before: Fri 17 Jan 2025 01:30:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4808
IP address blocks: 2406:4d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7116 (0x1bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Jan 17 01:30:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C1685A680963F497067BF9326F2AE1A820490116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:d6:6b:08:76:cb:01:d4:84:4e:a3:f9:d7:
3e:b9:7b:98:74:cd:fe:87:7b:45:93:95:5a:c5:19:
f7:34:95:7e:fc:44:79:4a:41:bc:a4:c5:69:f1:2a:
ac:a0:bf:c9:4f:a6:9e:ed:f1:c7:5b:51:84:53:64:
47:ff:11:fd:15:19:12:fc:60:b2:6b:c5:22:7d:67:
92:e2:5c:2b:fd:96:e9:a7:c2:85:7a:f0:3c:01:e2:
4f:b7:07:2d:50:23:3a:82:8b:ed:0a:2d:df:f9:6f:
bb:e0:c6:91:a6:9b:b9:ea:5b:1d:9f:87:79:e6:12:
c7:c2:66:b0:65:33:71:29:ad:7e:3b:0d:58:9d:92:
11:f2:aa:ba:a2:f7:5f:4c:1b:3a:09:b8:ae:46:49:
ce:dc:02:8b:e1:de:51:e7:75:ee:02:25:69:46:c4:
fc:37:c6:f4:97:4d:67:7b:cf:bc:cb:92:9d:04:5b:
d7:48:e6:80:ef:61:ee:a7:3d:0f:c3:0c:7c:f6:57:
a5:f7:34:13:e6:a5:b3:25:cc:f8:5f:b5:f9:ef:89:
c1:38:cc:e7:01:6c:08:2f:c8:1b:af:f1:79:3f:6e:
fb:e3:51:03:8e:09:a7:eb:e2:88:d0:fc:2a:aa:9d:
c9:6b:c9:05:0f:f4:80:5a:e6:9e:b9:fd:c1:ac:6e:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:5A:68:09:63:F4:97:06:7B:F9:32:6F:2A:E1:A8:20:49:01:16
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/wWhaaAlj9JcGe_kybyrhqCBJARY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:4d00::/48
Signature Algorithm: sha256WithRSAEncryption
be:86:16:77:65:54:26:c3:58:3f:c2:48:06:a5:16:52:2c:21:
ce:ab:b2:d8:23:87:f3:7a:f3:e8:cd:8b:c1:3e:b7:0f:b9:9c:
af:33:40:04:3e:50:32:56:07:a3:60:7d:80:6a:e2:e9:a9:7c:
96:aa:b1:e7:4c:88:f5:11:0b:36:c3:7a:ac:ee:53:38:95:08:
b2:49:d0:4c:99:cb:19:6c:4a:f5:00:b5:d0:87:ab:01:54:e2:
e1:77:90:af:0d:38:68:81:23:47:86:34:2e:4f:a3:a5:35:ec:
62:ce:e1:60:6a:6d:f7:12:45:55:28:d2:d8:79:a4:fd:da:bc:
a9:f0:62:06:ab:6b:0a:b0:ff:de:33:79:c6:e5:d5:fd:96:7c:
00:94:26:0c:c7:9b:b3:4f:7b:91:26:cd:2a:22:b1:28:d7:69:
12:4c:25:95:f5:1c:c8:ea:f4:28:5c:8f:e8:7c:02:c3:cf:fb:
04:6e:a6:4e:b8:43:9a:a3:24:64:39:90:04:7e:b2:75:dc:6b:
77:3e:c0:8b:90:6c:6a:b0:4c:96:5e:a5:79:f6:27:39:37:8c:
b6:bf:52:2b:7a:07:9e:f0:30:4d:b9:61:fc:61:ff:ef:3f:19:
a1:0e:91:7e:a4:fb:58:10:51:ef:d0:74:b4:65:d1:7e:eb:6e:
5f:c3:b3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:00 2025 by rpki-client