Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/I4t8S7wXzRpV_lu0fFLT4HMMGzg.roa
File: I4t8S7wXzRpV_lu0fFLT4HMMGzg.roa (raw, json)
Hash identifier: jEeVJOIjdYMWGfh49iogsPidGly8ChKCUqbqSaC2l4g=
Subject key identifier: 23:8B:7C:4B:BC:17:CD:1A:55:FE:5B:B4:7C:52:D3:E0:73:0C:1B:38
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 16FE
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/I4t8S7wXzRpV_lu0fFLT4HMMGzg.roa
Signing time: Wed 13 Mar 2024 01:21:51 +0000
ROA not before: Wed 13 Mar 2024 01:21:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 59077
IP address blocks: 2401:3480::/36 maxlen: 36
2401:3480:2000::/36 maxlen: 36
2401:3480:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5886 (0x16fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Mar 13 01:21:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=238B7C4BBC17CD1A55FE5BB47C52D3E0730C1B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:91:f1:34:67:2b:5e:08:a7:61:4d:0d:37:
a9:f8:78:da:72:51:7c:e8:f0:b7:6b:40:7c:9a:57:
2c:81:c9:c1:22:30:01:f5:07:17:81:c1:48:18:d1:
10:fe:42:4a:f9:13:63:71:26:76:90:0c:33:fd:2a:
85:e0:8a:4b:23:8a:94:95:25:0a:0e:53:58:aa:34:
38:0b:fd:b2:2b:b5:ad:ad:53:ea:f0:07:c5:56:a6:
2d:e1:54:3c:12:a8:9c:79:fb:84:18:0a:b4:f9:c6:
b9:e3:b3:04:c0:2a:c3:54:57:81:41:be:16:9f:6b:
09:1c:53:a1:e3:c9:14:d2:d5:33:06:28:c3:79:8f:
d8:cc:6c:1d:91:72:9f:d7:91:99:ff:51:51:aa:bc:
10:dc:88:da:d7:5f:7a:81:df:38:4e:ca:f1:87:b8:
79:29:5a:f0:c8:f9:a7:37:12:66:13:41:08:22:b2:
66:ef:3b:2d:75:48:b0:0d:f5:13:ae:bb:55:08:13:
54:ac:e5:8c:2d:a8:36:be:7a:ea:fe:83:32:1f:4b:
63:04:31:86:cd:57:71:e5:ff:93:56:1a:64:b3:3a:
5e:35:96:e5:44:20:af:bd:0c:70:e8:28:20:41:5b:
90:0a:d7:f0:fe:f4:67:cf:83:52:5f:87:62:7e:35:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:7C:4B:BC:17:CD:1A:55:FE:5B:B4:7C:52:D3:E0:73:0C:1B:38
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/I4t8S7wXzRpV_lu0fFLT4HMMGzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3480::/36
2401:3480:2000::/35
Signature Algorithm: sha256WithRSAEncryption
3f:03:93:69:2a:55:00:f2:38:74:08:b1:5f:ed:82:57:f8:d6:
58:35:7e:c5:2f:30:29:11:34:c5:7f:14:ee:9a:3d:5e:d2:8f:
7e:07:b1:d2:ab:ea:d6:9c:de:51:67:3c:b3:21:d1:f6:dd:4e:
87:81:e8:bd:db:3a:6f:a3:d0:bc:f5:51:09:4b:1b:9f:cb:81:
04:c3:58:ce:2b:95:c7:93:c7:37:7b:18:62:f2:ff:12:5f:ca:
5c:47:66:6b:7e:a0:ce:e2:92:10:60:c1:94:b7:29:67:f7:21:
7c:c1:98:7e:4b:91:1c:68:16:73:f4:83:d1:05:0e:1d:7f:a8:
d7:9a:dd:95:66:a8:3d:8d:30:ab:1d:19:cd:f1:72:af:e4:50:
e4:dc:28:11:c3:61:d5:c2:cb:95:bc:f7:78:0b:fc:7c:f8:0e:
58:5f:ca:3c:44:4d:4c:19:01:33:0e:32:03:09:a1:70:f0:79:
97:e2:dc:2f:f9:ea:88:87:2b:c4:b5:26:04:85:a9:55:fa:50:
88:e4:57:67:eb:aa:a9:79:00:a7:22:ef:ab:7b:c7:1c:6d:81:
8f:39:b5:12:ef:e9:22:a1:f5:26:b8:17:63:a7:20:21:8c:28:
3c:16:b9:75:e2:1f:79:d0:23:a7:e0:a3:32:b6:d6:23:31:fb:
62:20:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:21 2025 by rpki-client