Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa
File: Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa (raw, json)
Hash identifier: m4W5sYfutDIBGUa1Xlob/CH9YeApB50kyDS7XSN9X8k=
Subject key identifier: 12:2C:F8:52:1B:93:4E:2E:B7:77:F1:8B:3E:A4:4D:74:16:22:64:09
Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Certificate serial: 12CB
Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa
Signing time: Fri 17 Jan 2025 01:23:34 +0000
ROA not before: Fri 17 Jan 2025 01:23:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63719
IP address blocks: 2401:2780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4811 (0x12cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Validity
Not Before: Jan 17 01:23:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=122CF8521B934E2EB777F18B3EA44D7416226409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:0b:10:36:c9:ee:3c:59:e8:2b:f4:64:2a:
c7:7e:a2:d2:ce:23:27:56:b6:83:28:f0:30:06:43:
fa:5d:74:e9:11:df:b2:70:f4:9e:c7:ef:97:04:6c:
37:92:5c:38:c0:0a:3a:76:b1:30:b2:e8:ab:b9:d4:
c5:f4:a6:ab:72:34:b0:d5:cc:0d:30:34:93:54:8b:
87:0f:38:b3:64:e4:69:dc:1b:00:a8:c4:5c:5e:e9:
9b:d4:04:05:fa:0f:c1:0b:f0:f9:53:f3:2d:9d:ee:
fb:a6:1a:5b:02:67:2a:87:93:c0:81:5f:d8:9e:9d:
57:68:62:0b:20:c1:1b:7f:af:3a:4e:b0:4c:0e:bb:
e7:cb:c0:0a:d5:e4:b4:33:0e:9e:5f:91:ab:a1:03:
a3:24:3e:04:31:f5:9b:08:bb:a0:6f:d8:be:1b:1d:
e2:99:94:38:19:19:90:52:ca:c1:25:3e:94:2c:fd:
1c:40:96:cd:e9:7e:ba:66:d6:1f:f5:dc:ad:ff:d2:
ee:5f:48:db:d2:c5:e6:48:21:18:6e:0b:b5:0a:ce:
39:46:ee:11:f8:8a:5f:53:73:e2:7b:46:e9:90:4f:
35:df:49:a8:19:83:14:c7:32:9a:9d:81:cf:52:b0:
8a:e0:54:7d:81:42:02:32:7c:43:e4:be:df:6d:5a:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2C:F8:52:1B:93:4E:2E:B7:77:F1:8B:3E:A4:4D:74:16:22:64:09
X509v3 Authority Key Identifier:
keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:2780::/32
Signature Algorithm: sha256WithRSAEncryption
76:81:00:b0:aa:db:5b:f2:cc:b9:12:02:f6:ca:d6:df:b1:e0:
f2:ae:1d:73:12:27:15:07:45:c4:7b:28:6b:49:37:d5:e8:21:
e5:dd:fc:7d:43:df:7f:8a:d8:9a:3b:81:cf:fa:41:d1:61:98:
91:48:3d:1d:c4:53:da:c8:e6:40:99:e4:b5:69:b0:3e:58:27:
28:5c:61:ea:b5:2c:ed:a3:c8:c8:3a:0c:fc:ef:3b:7e:a8:27:
bd:29:5c:9a:9f:29:c4:cd:72:f2:c4:3a:c4:23:d7:d5:03:57:
61:62:2e:34:8c:22:da:46:59:68:f4:8b:85:1a:22:4e:fe:1a:
35:73:48:aa:a3:26:57:27:59:22:0f:a0:0e:fa:f4:a8:84:e2:
0c:0e:d6:c9:0c:92:01:81:c4:bc:e8:7b:be:82:a0:23:c6:74:
90:ea:5e:12:6e:19:bb:e2:1d:37:60:ef:05:dc:91:11:5e:30:
d8:bc:55:82:cf:4d:41:5c:b2:5c:c9:a9:6f:83:cd:be:e2:55:
56:1a:25:89:8d:7f:c8:be:1a:f3:c8:a5:76:9e:cf:b5:70:8b:
b1:4e:f0:bd:7b:0e:d1:92:77:3d:ff:57:e7:85:9f:f3:40:20:
54:27:2d:87:c2:b6:b2:8c:a1:e2:b0:47:cb:fd:d1:8b:0c:63:
9a:58:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:39 2025 by rpki-client