Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/S4HbotJRQ5_GhRWt9jAb8IEQHDw.roa
File: S4HbotJRQ5_GhRWt9jAb8IEQHDw.roa (raw, json)
Hash identifier: otv2lZAvLzrW3EDlzi9Lnv7aEft9dRekQtock8hNwT0=
Subject key identifier: 4B:81:DB:A2:D2:51:43:9F:C6:85:15:AD:F6:30:1B:F0:81:10:1C:3C
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1D05
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/S4HbotJRQ5_GhRWt9jAb8IEQHDw.roa
Signing time: Fri 17 Jan 2025 01:26:46 +0000
ROA not before: Fri 17 Jan 2025 01:26:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 58466
IP address blocks: 2401:3480:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7429 (0x1d05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jan 17 01:26:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4B81DBA2D251439FC68515ADF6301BF081101C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:ff:99:29:d5:a5:21:bc:7a:cc:91:dd:ae:
31:23:dd:3c:25:56:ff:6c:29:7d:a1:b8:f2:23:dd:
59:2d:11:72:3e:36:72:80:d8:00:e6:ce:00:6b:ae:
04:d3:e7:83:51:eb:70:62:06:49:61:72:39:af:9c:
71:0e:63:71:e0:e0:d7:a2:6e:9f:b2:55:c7:ad:6e:
f8:9c:24:ec:14:9a:81:5a:ba:f9:ec:4f:8b:c2:1f:
09:fc:07:f1:00:c7:2c:5e:fc:4a:c9:6d:58:44:95:
fe:62:db:9a:10:db:45:4e:0e:64:86:e0:a4:80:5c:
5b:10:f1:13:78:6a:9d:57:e1:46:cc:ab:7c:97:5c:
33:f2:cf:00:14:fe:09:92:6b:fc:e5:91:ec:16:0a:
64:21:37:cd:c2:9c:af:75:05:1b:0c:c7:64:60:45:
3c:69:8f:9e:b3:54:8b:eb:f4:fd:84:69:20:d4:a8:
23:a8:9f:76:b7:d9:16:a1:39:bd:7b:12:51:56:ce:
23:af:81:cf:ea:f2:45:93:5d:13:7d:0e:44:d1:ad:
02:dd:75:ce:20:e3:8a:e2:78:db:cd:32:e2:cb:f3:
1d:67:69:e0:9a:53:ad:eb:70:b8:4b:c9:74:9d:e6:
30:68:3b:e9:1c:38:6e:35:0a:30:1e:c1:08:e8:10:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:81:DB:A2:D2:51:43:9F:C6:85:15:AD:F6:30:1B:F0:81:10:1C:3C
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/S4HbotJRQ5_GhRWt9jAb8IEQHDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3480:3000::/36
Signature Algorithm: sha256WithRSAEncryption
a5:44:f2:f8:2e:a9:2b:64:85:eb:cc:b7:99:bd:a0:2c:81:96:
54:a1:34:2b:e1:53:f0:1d:a5:7c:27:fb:71:eb:37:4e:83:4a:
f5:f8:48:6b:02:5e:8f:9b:f9:4b:37:d6:b5:18:e8:a7:36:b4:
76:5d:23:6f:97:1a:f5:aa:a6:3f:03:15:0e:c1:a3:09:06:8e:
11:de:64:2d:d7:c2:7b:59:23:44:c8:be:a4:fe:54:d1:93:95:
0b:44:54:88:11:15:61:74:f7:08:73:4a:36:48:06:86:2f:a9:
32:31:60:cd:dd:6c:ae:dd:43:bd:cf:03:0b:dd:2f:a4:97:ed:
f3:d3:66:a6:e2:50:42:ca:8f:ec:90:2e:66:8d:c6:65:93:02:
0d:e0:0c:82:64:0e:51:18:c7:ea:b0:9b:79:da:9c:67:22:5d:
64:60:d9:33:29:84:d2:d4:df:e7:55:91:cf:b2:a9:4f:6d:db:
ab:78:e1:f1:fa:74:78:a9:cc:ab:34:92:84:00:ff:b8:4c:24:
3e:ae:c3:1d:8b:d5:17:24:c5:7f:bf:00:ed:41:07:13:a0:06:
f2:02:e3:ef:3e:e5:f5:8c:b9:2b:f8:3b:ee:33:1c:77:22:1e:
00:a3:86:e1:28:b7:e9:d8:73:8e:b1:09:66:82:b8:9b:87:ae:
cf:d4:20:1b
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3
MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw
MTI2NDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRCODFEQkEyRDI1MTQz
OUZDNjg1MTVBREY2MzAxQkYwODExMDFDM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7BP+ZKdWlIbx6zJHdrjEj3TwlVv9sKX2huPIj3VktEXI+NnKA
2ADmzgBrrgTT54NR63BiBklhcjmvnHEOY3Hg4Neibp+yVcetbvicJOwUmoFauvns
T4vCHwn8B/EAxyxe/ErJbVhElf5i25oQ20VODmSG4KSAXFsQ8RN4ap1X4UbMq3yX
XDPyzwAU/gmSa/zlkewWCmQhN83CnK91BRsMx2RgRTxpj56zVIvr9P2EaSDUqCOo
n3a32RahOb17ElFWziOvgc/q8kWTXRN9DkTRrQLddc4g44rieNvNMuLL8x1naeCa
U63rcLhLyXSd5jBoO+kcOG41CjAewQjoEBzTAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUS4HbotJRQ5/GhRWt9jAb8IEQHDwwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI
l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L1M0SGJvdEpSUTVfR2hS
V3Q5akFiOElFUUhEdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD
BgQkATSAMDANBgkqhkiG9w0BAQsFAAOCAQEApUTy+C6pK2SF68y3mb2gLIGWVKE0
K+FT8B2lfCf7ces3ToNK9fhIawJej5v5SzfWtRjopza0dl0jb5ca9aqmPwMVDsGj
CQaOEd5kLdfCe1kjRMi+pP5U0ZOVC0RUiBEVYXT3CHNKNkgGhi+pMjFgzd1srt1D
vc8DC90vpJft89NmpuJQQsqP7JAuZo3GZZMCDeAMgmQOURjH6rCbedqcZyJdZGDZ
MymE0tTf51WRz7KpT23bq3jh8fp0eKnMqzSShAD/uEwkPq7DHYvVFyTFf78A7UEH
E6AG8gLj7z7l9Yy5K/g77jMcdyIeAKOG4Si36dhzjrEJZoK4m4euz9QgGw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:34 2025 by rpki-client