Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/CZkP3W3ZGIZv3RPmVrKKjywFXbQ.roa
File: CZkP3W3ZGIZv3RPmVrKKjywFXbQ.roa (raw, json)
Hash identifier: Trtzulm/j2T7BIz8SGw5HZG1RoROM033pJTOnxMqxs8=
Subject key identifier: 09:99:0F:DD:6D:D9:18:86:6F:DD:13:E6:56:B2:8A:8F:2C:05:5D:B4
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1870
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CZkP3W3ZGIZv3RPmVrKKjywFXbQ.roa
Signing time: Fri 17 Jan 2025 01:25:03 +0000
ROA not before: Fri 17 Jan 2025 01:25:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24373
IP address blocks: 2406:1e80::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6256 (0x1870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=09990FDD6DD918866FDD13E656B28A8F2C055DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:bb:3b:8d:4d:17:cb:0f:7f:f8:f1:da:ae:
29:af:84:29:6a:1d:f3:f9:3c:60:0e:75:39:45:51:
f2:e7:d6:ea:f8:7b:67:20:90:5f:0b:8b:87:40:59:
0b:e6:5b:99:71:37:21:1d:38:d8:3f:c6:a5:eb:30:
4a:f7:0a:53:5a:58:4c:d8:5c:13:85:28:45:72:68:
01:a2:2f:90:84:b2:d9:f3:8c:3d:78:f7:06:1c:60:
ea:f8:db:aa:2d:83:90:97:e5:19:18:0b:a3:d1:0b:
e8:25:60:ed:06:ed:87:34:1e:a0:a8:8b:20:6d:bf:
a7:7e:fe:5f:5c:6a:17:5c:fe:d3:de:c0:fb:46:63:
cf:bc:bf:88:ca:69:46:79:4b:b0:5c:20:3a:24:53:
73:26:12:a3:e3:49:98:25:ef:a5:33:bb:1d:79:fd:
30:72:c9:8f:e5:56:cd:74:b7:2c:5c:b6:3c:d5:dc:
d8:a1:3d:5e:01:f8:4c:34:73:13:4f:27:3f:2d:9b:
a6:e5:c9:d7:e2:09:9a:cf:e8:08:03:82:35:ca:8b:
f5:4e:aa:50:01:fa:01:6b:4e:b6:4e:2c:fe:fe:5a:
c1:97:fc:61:38:92:11:0e:21:56:0c:5d:8f:8b:b3:
41:f4:02:19:51:c3:45:1a:0f:b6:46:24:57:80:b3:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:0F:DD:6D:D9:18:86:6F:DD:13:E6:56:B2:8A:8F:2C:05:5D:B4
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CZkP3W3ZGIZv3RPmVrKKjywFXbQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:1e80::/48
Signature Algorithm: sha256WithRSAEncryption
29:b8:b3:2a:9a:d8:84:e6:f9:e8:83:0b:41:80:be:fd:68:d5:
21:be:f1:e6:53:74:78:90:65:a7:55:5c:2d:65:e5:a5:7c:9b:
7a:01:7b:3a:a8:bc:cc:7a:da:69:29:e0:c6:a9:60:82:87:6a:
4b:65:a5:37:7f:89:cb:66:8f:d4:df:5f:18:3d:56:89:55:50:
0c:27:d9:26:f9:af:e3:26:35:b4:9f:42:b7:ee:55:97:20:16:
82:60:84:be:10:b0:f4:63:58:81:02:7b:61:36:d6:cb:6b:55:
f4:51:79:fc:41:ef:de:af:4a:bc:dc:10:71:ff:fc:01:f5:ac:
33:02:aa:62:36:56:4e:1e:91:ab:d6:0d:ad:94:ec:38:ef:0e:
e6:2e:f4:8b:17:12:92:f9:bb:c0:05:4f:b9:0e:bb:d9:f8:5c:
1d:09:9d:7d:96:75:9f:93:4f:13:76:51:91:64:73:09:90:6e:
ef:70:8f:1b:2a:43:65:fd:40:a0:0f:89:bc:1e:db:01:59:f5:
74:58:a9:0d:ff:24:05:e8:07:e9:68:37:9c:4c:e7:42:45:15:
4c:dc:98:e1:9e:d6:d3:6c:c8:aa:3f:d0:fe:44:fe:55:68:34:
76:7b:5b:ee:15:07:2c:72:5d:f9:f3:b6:6e:9a:0d:5a:29:da:
ee:bd:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:05 2025 by rpki-client