Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/daZd1fCZmG6OFhI_OYGAI8NmRyI.roa
File: daZd1fCZmG6OFhI_OYGAI8NmRyI.roa (raw, json)
Hash identifier: e7vRx8ai7YM+tJ9igqlDaV565ZU2VGf7x9cJd+Nk/M0=
Subject key identifier: 75:A6:5D:D5:F0:99:98:6E:8E:16:12:3F:39:81:80:23:C3:66:47:22
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 12ED
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/daZd1fCZmG6OFhI_OYGAI8NmRyI.roa
Signing time: Sat 29 Jun 2024 19:44:16 +0000
ROA not before: Sat 29 Jun 2024 19:44:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 50983
IP address blocks: 2403:1b80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4845 (0x12ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jun 29 19:44:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=75A65DD5F099986E8E16123F39818023C3664722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:2a:eb:18:99:15:2e:f7:93:b7:6c:6b:da:
a4:e2:cb:30:38:6f:db:d0:7c:a0:bc:64:c0:b0:ba:
2e:70:d8:05:4b:c6:34:61:b7:9c:61:de:ef:99:b3:
2c:78:1a:e5:73:8c:f7:83:c7:07:b3:6a:b0:dc:22:
93:fa:4d:f9:b9:81:23:b7:a6:67:a5:fc:38:84:2f:
80:97:89:df:90:bb:21:20:94:67:a6:f6:9f:20:fd:
d2:ab:11:d7:00:63:a3:61:8d:01:cc:fc:51:05:af:
f7:4c:25:b7:5d:6c:ea:0d:5a:1a:05:b5:8e:24:77:
76:e6:ce:7a:ad:e3:f8:48:29:f4:9c:d6:e8:cf:26:
a7:2d:b9:8a:03:19:9b:59:77:f2:b6:61:61:f1:0c:
ea:00:0e:34:18:28:6b:29:bb:2f:16:8c:29:a8:0d:
b2:f1:84:5c:a7:00:09:b0:2c:f5:5e:fc:a3:fd:8b:
9a:4c:4e:dc:6f:50:a0:82:75:20:fb:f6:11:a4:11:
78:12:17:ff:d0:b2:37:c7:53:e3:61:ba:bc:bc:36:
71:80:43:ad:39:2a:73:ed:d1:b5:11:b4:5d:3f:8d:
c8:a4:30:44:5f:15:9b:be:1b:ab:9e:f4:a7:7b:5b:
b2:d0:5d:a1:fe:7b:27:0d:72:6b:f6:7c:4d:4d:b5:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A6:5D:D5:F0:99:98:6E:8E:16:12:3F:39:81:80:23:C3:66:47:22
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/daZd1fCZmG6OFhI_OYGAI8NmRyI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
b8:15:c3:72:79:49:7b:8e:36:73:61:c9:85:53:9b:35:1f:62:
29:d5:db:c8:00:c0:60:4a:5a:79:e8:a5:17:54:55:9f:59:99:
fc:68:af:18:3d:d8:4f:e4:ac:64:22:ba:e1:ed:fa:ce:3b:4d:
54:b2:fd:1e:8f:c0:56:46:86:43:78:e7:10:c5:64:ce:d2:3e:
c6:49:34:9b:0b:7a:79:55:a0:2a:4b:23:b4:45:49:73:a9:d8:
9d:14:6f:4b:94:3d:e6:b3:6b:37:19:97:ea:98:a1:cb:e7:cd:
29:ca:2b:4e:f4:9b:94:7e:93:eb:87:26:fa:42:2e:12:32:51:
d5:30:26:ae:cd:6a:b7:ef:46:78:d0:79:2c:08:37:fd:99:3c:
30:7c:af:98:9f:05:70:b6:af:0e:7e:23:e8:a0:ce:b3:ca:ca:
7a:1f:b6:e9:59:26:bd:79:14:f4:1c:d6:ae:2c:be:d4:da:a1:
ab:d3:f8:53:ce:e7:ac:ba:02:f0:34:a7:71:72:c5:a5:d5:42:
96:2f:35:af:64:c3:8a:7b:f6:84:7a:97:1e:9a:a3:4c:b9:0b:
a9:8c:9a:a3:f4:f4:24:4f:27:2f:b5:44:b8:44:2f:ee:1a:33:
dc:cc:df:36:43:25:c0:23:92:f4:53:3d:ec:69:85:db:ca:2b:
ed:2b:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:46 2025 by rpki-client