Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/wetF1EOCyhjF7SUzg5hyzYMH25A.roa
File: wetF1EOCyhjF7SUzg5hyzYMH25A.roa (raw, json)
Hash identifier: eDdCWeEU16qIS+Z2wrwgNXLRb/dpccc7xnl67LZF7Bo=
Subject key identifier: C1:EB:45:D4:43:82:CA:18:C5:ED:25:33:83:98:72:CD:83:07:DB:90
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1802
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wetF1EOCyhjF7SUzg5hyzYMH25A.roa
Signing time: Fri 17 Jan 2025 01:24:26 +0000
ROA not before: Fri 17 Jan 2025 01:24:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59803
IP address blocks: 2403:1b80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6146 (0x1802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C1EB45D44382CA18C5ED2533839872CD8307DB90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:fd:2e:73:9a:49:39:60:54:09:97:d8:75:
3b:21:9e:fb:23:0f:88:ad:e7:26:f5:69:8a:96:16:
81:83:b0:1a:fa:c9:5c:e4:de:c6:94:53:96:93:6e:
52:ee:80:f7:64:f3:bb:38:ed:62:2b:42:c8:f1:05:
3c:ff:4a:c2:bd:42:1d:24:02:11:11:57:73:d8:35:
a6:5b:1b:3a:fe:21:50:9f:20:86:f9:d8:28:91:7a:
c2:b7:b9:d7:5c:7f:a4:b1:67:cf:07:5a:1d:0e:04:
e9:06:f7:73:eb:e2:44:7c:25:b1:fd:21:31:8b:15:
90:05:34:51:c5:61:be:f0:fc:b9:85:9c:e8:8d:b5:
a8:70:59:cb:5d:04:a8:8b:2c:5c:fe:7b:f5:56:9f:
b8:eb:bf:fa:2b:f8:97:c4:36:af:c7:49:15:4b:ca:
55:13:06:3c:37:f0:10:65:07:3b:82:9b:ed:67:36:
b1:f1:a2:9a:4f:2b:cb:ed:09:3c:20:fa:16:fc:2c:
20:32:37:ca:0d:0b:c1:e6:56:a7:be:80:dc:4d:d6:
7d:de:cd:5c:d3:3f:fe:9d:78:35:70:8c:7d:5b:eb:
40:c1:6e:1f:a6:5c:cd:65:29:92:f1:81:9c:9c:95:
1b:9e:3c:03:d3:23:8c:13:71:20:f5:f3:ea:2f:30:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:45:D4:43:82:CA:18:C5:ED:25:33:83:98:72:CD:83:07:DB:90
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wetF1EOCyhjF7SUzg5hyzYMH25A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
68:39:e2:41:c5:5f:1c:00:04:c4:ef:4d:30:ba:7e:39:27:2e:
0c:bc:8b:33:5b:8e:93:90:5d:4a:5b:d8:12:47:8f:62:83:94:
cf:a2:34:dd:bc:e3:34:b8:0f:40:9d:5a:9c:d4:5d:b1:c9:33:
ed:3d:4f:fe:97:1c:83:fa:bd:e2:b2:f9:9d:32:00:74:1b:b2:
62:42:96:ae:0b:80:eb:df:18:b9:0e:ba:3d:cb:35:cb:e5:cc:
c8:e6:09:10:06:b3:35:74:49:6f:86:06:e0:ea:e8:d3:d0:10:
ad:64:fb:36:ba:06:77:dd:38:7e:2b:80:cf:20:4b:ad:78:be:
7d:56:f0:98:7d:c5:3e:c3:9a:65:3f:30:b5:54:c0:79:dd:8a:
8d:86:6d:60:70:87:95:4e:50:5f:eb:8e:8e:7b:0e:9a:dc:7f:
51:84:e4:75:20:c7:d6:5b:64:ed:ac:8e:cb:ba:9c:17:ab:42:
96:ad:42:ed:51:54:d2:bb:6c:ea:4d:ad:3d:e3:4b:23:93:90:
e4:01:f3:be:06:90:3e:b9:b5:9f:c7:29:39:2e:a0:74:7f:b4:
da:2d:53:c7:62:1b:b1:3f:67:42:bd:dc:3a:5e:f6:47:6d:44:
a3:32:c1:ee:e5:f4:6b:5e:46:8c:8c:20:bd:ec:2c:f3:16:80:
ae:5f:de:20
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICGAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMxRUI0NUQ0NDM4MkNB
MThDNUVEMjUzMzgzOTg3MkNEODMwN0RCOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu+f0uc5pJOWBUCZfYdTshnvsjD4it5yb1aYqWFoGDsBr6yVzk
3saUU5aTblLugPdk87s47WIrQsjxBTz/SsK9Qh0kAhERV3PYNaZbGzr+IVCfIIb5
2CiResK3uddcf6SxZ88HWh0OBOkG93Pr4kR8JbH9ITGLFZAFNFHFYb7w/LmFnOiN
tahwWctdBKiLLFz+e/VWn7jrv/or+JfENq/HSRVLylUTBjw38BBlBzuCm+1nNrHx
oppPK8vtCTwg+hb8LCAyN8oNC8HmVqe+gNxN1n3ezVzTP/6deDVwjH1b60DBbh+m
XM1lKZLxgZyclRuePAPTI4wTcSD18+ovMHAHAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUwetF1EOCyhjF7SUzg5hyzYMH25AwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3dldEYxRU9DeWhqRjdT
VXpnNWh5ellNSDI1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD
BQAkAxuAMA0GCSqGSIb3DQEBCwUAA4IBAQBoOeJBxV8cAATE700wun45Jy4MvIsz
W46TkF1KW9gSR49ig5TPojTdvOM0uA9AnVqc1F2xyTPtPU/+lxyD+r3isvmdMgB0
G7JiQpauC4Dr3xi5Dro9yzXL5czI5gkQBrM1dElvhgbg6ujT0BCtZPs2ugZ33Th+
K4DPIEuteL59VvCYfcU+w5plPzC1VMB53YqNhm1gcIeVTlBf646Oew6a3H9RhOR1
IMfWW2TtrI7LupwXq0KWrULtUVTSu2zqTa0940sjk5DkAfO+BpA+ubWfxyk5LqB0
f7TaLVPHYhuxP2dCvdw6XvZHbUSjMsHu5fRrXkaMjCC97CzzFoCuX94g
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:07 2025 by rpki-client