Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/k3O1Nd4DbSodsyWRi07EJUrNlkQ.roa
File: k3O1Nd4DbSodsyWRi07EJUrNlkQ.roa (raw, json)
Hash identifier: 6+ANxpnzey4Klf1S8DfB2hc6EZutyB0kEHptxML/vYU=
Subject key identifier: 93:73:B5:35:DE:03:6D:2A:1D:B3:25:91:8B:4E:C4:25:4A:CD:96:44
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14BB
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/k3O1Nd4DbSodsyWRi07EJUrNlkQ.roa
Signing time: Wed 11 Sep 2024 02:23:44 +0000
ROA not before: Wed 11 Sep 2024 02:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 59803
IP address blocks: 2403:1b80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5307 (0x14bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9373B535DE036D2A1DB325918B4EC4254ACD9644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:54:6a:23:30:54:3e:0f:d5:73:36:4c:19:cf:
26:bc:30:19:a2:92:2d:22:c7:f1:f7:2d:f8:5d:08:
36:0e:64:f4:0c:a2:18:b9:ef:48:e8:b5:00:51:3a:
2a:ee:8f:f2:7d:b6:99:9e:eb:63:d4:2f:2b:87:3e:
69:0a:de:1b:e0:2f:1c:f7:d2:ce:10:3b:aa:4d:c9:
81:1b:64:be:8f:8f:a3:d4:fe:ac:30:2d:b8:ca:82:
15:f5:ad:0d:7b:6e:3c:ac:03:25:db:ae:4c:30:89:
cf:7d:8e:5c:12:67:8d:15:35:17:28:05:ea:59:1d:
06:94:65:dc:fc:b8:fd:5a:73:d6:8b:82:ba:ef:a1:
56:97:5a:5f:12:c0:5a:c1:e7:8a:8b:12:25:4c:6a:
c0:df:72:92:22:ef:46:a3:3e:c7:75:6d:5c:3d:2c:
53:35:3d:e8:14:25:6e:e3:70:f3:75:5a:d1:12:62:
46:19:52:de:cb:7f:52:7d:59:11:14:72:66:7f:9c:
d9:52:9c:2d:0a:99:b8:0c:8b:df:1e:bb:fc:54:39:
7d:5e:01:24:9f:45:68:fe:85:27:0b:ac:7e:53:05:
2a:61:2f:e8:be:34:9b:61:fc:85:03:e0:d5:7d:39:
d9:84:c1:c8:55:b4:d0:ba:a8:13:ef:cb:bf:9e:79:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:73:B5:35:DE:03:6D:2A:1D:B3:25:91:8B:4E:C4:25:4A:CD:96:44
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/k3O1Nd4DbSodsyWRi07EJUrNlkQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
66:96:11:42:ff:9c:c0:06:ac:28:f8:8f:87:e5:08:1c:48:44:
bd:25:51:b3:82:1a:8e:12:15:47:93:ae:b4:ce:c1:35:d6:86:
8e:00:7a:05:bb:25:e8:e4:97:71:7d:27:01:60:5d:3e:9f:75:
b3:2c:da:76:ea:f0:75:e2:ad:87:61:a7:d7:4f:ba:8e:fa:54:
0f:83:c3:de:27:9b:d5:da:37:e1:a6:a8:c4:c9:db:01:e1:22:
ef:73:46:41:db:b7:a5:e6:e4:ff:f4:c1:fe:b7:18:31:c7:54:
aa:ba:68:59:04:7a:58:16:af:94:d7:ee:76:cc:c6:60:e9:35:
68:5e:b4:11:81:c1:89:57:5a:f1:d4:cf:9a:08:72:bb:30:d9:
34:28:0a:da:32:db:1b:e6:38:99:14:c0:04:b7:23:69:5d:7b:
73:74:68:a3:7d:24:4e:f2:ac:d9:f6:54:78:54:af:6c:62:79:
97:2f:db:89:b7:39:c7:98:54:a0:e5:d4:6c:82:ae:c6:31:7f:
6a:75:a3:2f:ed:3d:4b:f0:75:62:be:09:17:40:14:f2:47:74:
93:1a:4f:ec:b6:eb:63:5f:97:0f:d0:77:4b:f0:10:17:d5:33:
81:10:cb:09:c4:aa:e2:54:73:c0:98:94:a6:b4:8f:b9:da:6a:
25:a2:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:36 2025 by rpki-client