Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/OlrGKbm_5LqtcCt6zE3f2bsHpHo.roa
File: OlrGKbm_5LqtcCt6zE3f2bsHpHo.roa (raw, json)
Hash identifier: 0InvCCX8dmQtbbbD1TB9/AY+GZmHtnh1y6/8B8fnNSM=
Subject key identifier: 3A:5A:C6:29:B9:BF:E4:BA:AD:70:2B:7A:CC:4D:DF:D9:BB:07:A4:7A
Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Certificate serial: 116F
Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/OlrGKbm_5LqtcCt6zE3f2bsHpHo.roa
Signing time: Fri 15 Nov 2024 09:13:18 +0000
ROA not before: Fri 15 Nov 2024 09:13:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63199
IP address blocks: 2400:5280:4800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4463 (0x116f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Validity
Not Before: Nov 15 09:13:18 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3A5AC629B9BFE4BAAD702B7ACC4DDFD9BB07A47A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:60:77:d5:a3:80:94:dd:63:da:43:af:4e:
6d:9a:06:29:ff:20:c7:8a:91:c6:f3:a4:31:84:0a:
bd:bf:59:42:db:3e:f8:70:8d:f3:42:bd:d9:9d:39:
e6:b4:58:64:f1:3c:0c:cc:c4:85:4a:c4:41:4e:de:
45:18:25:e3:3c:f3:9e:5e:56:44:e3:aa:11:18:31:
27:38:e2:14:62:30:c8:ba:01:ba:2e:cc:78:68:ae:
2a:7b:06:62:14:f1:ef:3c:be:f5:25:e5:79:20:16:
9a:93:15:0c:93:bf:1c:12:0b:56:6a:38:39:09:80:
52:d6:94:6e:43:a6:5c:72:50:4e:c2:60:eb:49:1d:
51:b6:3b:80:4b:1f:27:0c:28:b0:49:79:c1:e5:1c:
05:68:75:09:68:17:55:fc:12:6b:b5:f6:22:fe:3a:
7c:40:5f:46:38:fc:a3:b1:04:7b:c0:37:26:02:2e:
ac:10:37:ef:02:3e:f3:4b:1d:08:00:89:9b:2c:18:
dd:ad:f8:41:d8:9f:17:0d:bd:10:bb:02:eb:cb:45:
a7:3d:4f:91:1e:a1:f0:35:d2:63:e7:0f:fd:3d:53:
aa:df:b5:4b:2a:c0:5d:19:33:df:2c:ec:f5:7f:72:
6c:57:6d:75:eb:ed:2d:ed:7e:ef:95:3e:ef:10:88:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5A:C6:29:B9:BF:E4:BA:AD:70:2B:7A:CC:4D:DF:D9:BB:07:A4:7A
X509v3 Authority Key Identifier:
keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/OlrGKbm_5LqtcCt6zE3f2bsHpHo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5280:4800::/38
Signature Algorithm: sha256WithRSAEncryption
3a:f4:2e:06:98:23:28:58:4e:23:39:4a:e8:7a:99:8b:d1:ca:
54:11:3d:98:73:89:82:df:0a:c5:88:6e:21:fa:a3:fd:7d:57:
b1:1a:53:b1:a2:ef:9a:ee:fa:21:ce:34:71:82:af:79:91:fe:
3b:3b:12:7b:3a:6b:a5:16:07:39:ac:5e:a6:9b:74:11:30:b4:
64:cf:23:71:60:0f:d7:08:49:1f:f5:26:fa:d9:6f:d9:d0:14:
ce:ba:88:8b:ef:e6:f0:05:80:ee:f3:1e:b3:b3:28:5a:51:a8:
74:96:ce:f1:d6:d5:59:9d:1d:2d:61:c3:a5:da:3d:57:12:b3:
3a:31:2e:00:5c:63:e8:da:c1:20:f4:48:30:3d:5c:43:a8:9c:
1a:9c:7f:03:68:27:df:d0:3a:65:73:a0:ef:df:9c:38:8e:9f:
9b:c7:5e:ff:9f:13:75:6d:06:12:6e:4e:7b:64:ee:34:ef:f3:
ba:fa:02:90:a4:e4:37:09:cb:c4:e5:71:8c:0a:bd:85:9c:d6:
7f:e6:d8:6e:46:eb:06:0e:00:44:f8:a7:ac:87:6b:c5:e6:31:
ea:9e:b7:53:7f:fc:89:b7:b0:17:0f:cd:0b:a9:b8:05:af:56:
dc:ab:3a:e4:e2:55:97:a0:f0:b0:2e:0b:e0:77:56:98:2c:83:
2f:0a:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:42:32 2025 by rpki-client