Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/rN5X1L8tl_GX_nzqwu1OyA5bT10.roa
File: rN5X1L8tl_GX_nzqwu1OyA5bT10.roa (raw, json)
Hash identifier: Gdm71Ynfr1CK1VYWBpYU6mNFZ9abPsblKlI3Q/vvryI=
Subject key identifier: AC:DE:57:D4:BF:2D:97:F1:97:FE:7C:EA:C2:ED:4E:C8:0E:5B:4F:5D
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1D03
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/rN5X1L8tl_GX_nzqwu1OyA5bT10.roa
Signing time: Fri 17 Jan 2025 01:26:45 +0000
ROA not before: Fri 17 Jan 2025 01:26:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 23724
IP address blocks: 2401:3480::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7427 (0x1d03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jan 17 01:26:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ACDE57D4BF2D97F197FE7CEAC2ED4EC80E5B4F5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:9e:05:4f:96:7f:e7:ef:21:57:1f:34:47:
29:d9:cf:51:d0:34:4e:43:43:9e:26:67:f6:25:3b:
0c:c0:2a:f8:e1:03:cf:68:c8:af:71:b3:42:24:2b:
7b:d1:77:49:76:52:63:67:2e:c0:aa:1c:e8:3f:d6:
eb:24:50:31:e7:f8:d5:b9:3a:1c:3b:78:89:cb:42:
bb:13:8f:55:a5:b3:b1:b9:0f:55:e9:23:d2:0e:5f:
2f:a8:4c:bc:87:73:b2:0e:23:b1:b4:77:b1:66:07:
1f:29:29:0b:0d:d5:c0:97:36:2e:f1:93:03:d6:b0:
06:f5:79:e7:f4:d2:4b:0d:9a:bf:6c:be:82:b4:8d:
f2:a1:1d:f7:77:b0:e4:7b:97:dd:05:f9:77:16:2f:
f5:a5:8e:5c:fa:0d:84:66:97:fd:97:f6:ae:13:47:
f2:41:d9:ae:64:0e:eb:02:8d:dc:3a:a1:8a:5a:cd:
fd:97:95:97:1c:d6:b4:e5:31:7f:3e:f4:07:4e:23:
d5:c9:24:c0:97:fc:56:0a:70:29:01:4a:5f:83:c2:
56:27:d0:4b:57:d2:5a:c6:e9:db:7a:78:59:b2:83:
f1:00:85:ef:ea:a7:f2:0a:8b:da:27:ea:a0:d0:b5:
d4:7d:4f:46:75:e6:19:dd:9b:f0:45:6b:0e:4d:3b:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DE:57:D4:BF:2D:97:F1:97:FE:7C:EA:C2:ED:4E:C8:0E:5B:4F:5D
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/rN5X1L8tl_GX_nzqwu1OyA5bT10.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3480::/36
Signature Algorithm: sha256WithRSAEncryption
b7:90:c1:6e:22:9a:20:6b:d7:c5:98:ec:65:9b:35:9e:a0:a1:
96:33:27:f2:b1:28:98:59:a2:ca:68:74:b3:43:2c:dd:72:df:
a7:11:c8:30:f3:f9:04:fa:99:4f:4d:f0:72:89:df:5f:7d:7d:
9a:fa:ab:45:c8:0f:b7:1b:37:4f:0e:99:6d:0d:bc:76:87:98:
fb:71:f6:6a:72:1c:a3:aa:04:3b:29:20:df:90:b0:62:e8:94:
1e:2e:c3:45:4c:a2:f6:e7:a0:07:a1:d5:ff:c3:da:2a:e6:26:
4f:a7:9c:18:55:bc:17:83:2c:37:7a:f3:03:84:09:25:9b:b7:
a7:bf:40:e4:94:db:f9:c8:8c:b8:d2:1f:36:71:ee:15:99:ed:
0e:b1:ef:85:ab:6a:7a:85:24:b0:42:a1:ce:5d:ef:2f:7c:ed:
f4:8b:e5:15:54:0f:93:da:d2:6c:dc:df:ef:a6:41:ba:87:28:
eb:af:38:45:1f:aa:3b:c0:90:94:8b:a1:03:9e:5a:23:24:a0:
56:a0:a9:4e:3c:7a:92:25:15:f2:08:e4:ef:7d:9f:8f:41:82:
84:c2:5a:1d:1e:6e:c4:cd:9f:8e:95:7c:4e:db:26:77:f6:98:
94:c8:ee:8f:7f:96:d2:db:cf:9c:ed:17:b6:2b:65:73:d4:dd:
db:6d:3f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:10 2025 by rpki-client