Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/8XuaQYWqAosk5TuaOf6-1JtuKSA.roa
File: 8XuaQYWqAosk5TuaOf6-1JtuKSA.roa (raw, json)
Hash identifier: pxCC0uWdsQUNhiPuaSwbuV4Q37Ms9JGXEfduetoli9Y=
Subject key identifier: F1:7B:9A:41:85:AA:02:8B:24:E5:3B:9A:39:FE:BE:D4:9B:6E:29:20
Certificate issuer: /CN=F07EA8449694AA3572EE15A0D86B5E0EB4A08504
Certificate serial: 1F35
Authority key identifier: F0:7E:A8:44:96:94:AA:35:72:EE:15:A0:D8:6B:5E:0E:B4:A0:85:04
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8XuaQYWqAosk5TuaOf6-1JtuKSA.roa
Signing time: Fri 21 Mar 2025 03:28:11 +0000
ROA not before: Fri 21 Mar 2025 03:28:11 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59000
IP address blocks: 2401:5180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7989 (0x1f35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F07EA8449694AA3572EE15A0D86B5E0EB4A08504
Validity
Not Before: Mar 21 03:28:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F17B9A4185AA028B24E53B9A39FEBED49B6E2920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:ae:c6:9c:28:16:24:8b:a8:0e:a3:82:33:
8e:66:5f:bc:29:a7:df:a8:0f:f7:90:29:8f:6e:df:
6c:b6:61:22:b3:f7:e9:50:30:a0:47:71:07:26:31:
65:f9:95:51:8a:1b:c5:19:97:bb:2c:e8:9d:e8:95:
71:11:a1:d9:8d:2b:9c:f4:19:41:a6:e9:75:d8:48:
da:c8:4a:84:62:9b:75:cd:96:a4:a7:b7:b7:dc:f9:
52:44:ca:8c:c7:e6:89:3e:6e:36:da:f2:0f:be:84:
6d:70:68:7b:1b:32:0d:62:c6:93:26:32:b7:f2:36:
82:22:c0:4e:06:ae:e4:f4:2a:13:f9:9a:eb:83:99:
6a:9f:e2:ee:ed:20:10:62:b0:c2:05:2a:5d:84:4a:
b6:fa:d1:16:c2:5c:ee:80:d8:88:a4:4e:a4:0b:e4:
22:ba:a2:7a:53:ea:b2:a5:a2:03:47:bb:d6:87:27:
a6:b6:37:59:87:96:4e:b9:ef:64:fb:04:fb:5d:89:
62:2c:f1:f4:da:05:ef:ea:1a:38:25:96:63:1a:08:
73:c3:eb:bf:a9:a7:1b:69:44:31:f3:ac:ad:da:82:
95:be:1e:99:cf:c6:df:a0:38:a8:15:b8:51:37:d5:
a0:31:ca:a9:cb:d1:77:5c:4a:93:e6:07:df:4c:41:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7B:9A:41:85:AA:02:8B:24:E5:3B:9A:39:FE:BE:D4:9B:6E:29:20
X509v3 Authority Key Identifier:
keyid:F0:7E:A8:44:96:94:AA:35:72:EE:15:A0:D8:6B:5E:0E:B4:A0:85:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8H6oRJaUqjVy7hWg2GteDrSghQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8H6oRJaUqjVy7hWg2GteDrSghQQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/8XuaQYWqAosk5TuaOf6-1JtuKSA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:5180::/32
Signature Algorithm: sha256WithRSAEncryption
9d:dc:2d:df:29:c3:36:4b:7f:2c:ee:c7:2c:ca:89:78:70:09:
7d:ec:15:26:66:3f:8e:ff:3d:38:c2:b0:6d:3f:a0:2c:81:ef:
4f:f4:fa:40:6d:08:07:d3:3e:ef:62:71:1e:6c:57:de:70:a3:
cf:fc:dc:0b:aa:05:ae:94:3c:c8:81:64:4f:89:07:9d:81:9c:
4d:af:cd:2a:1a:c3:68:50:8f:04:bc:e5:48:eb:4a:c1:33:a5:
39:2f:5d:b0:0e:02:74:be:0d:41:ef:62:4a:af:af:81:be:46:
71:bd:8e:ae:b8:b3:9a:3a:8f:6c:78:36:ce:15:f5:82:83:63:
6f:48:04:91:90:cb:6b:52:b7:6d:4b:1e:97:ab:3f:b7:20:e8:
01:0a:34:6c:15:eb:e6:c3:35:10:92:e9:18:a8:22:28:e8:6f:
36:ac:a8:cd:30:45:df:8b:48:71:21:9a:f0:23:8c:eb:e6:5b:
e4:4a:16:0f:9a:53:13:52:b8:04:4d:77:4b:9e:da:e6:e5:17:
8a:74:ad:d5:35:00:01:50:7a:c5:2d:0f:5a:d6:54:3a:36:55:
d1:85:8d:14:d3:ad:60:bd:64:a0:e0:7d:e9:aa:77:33:08:36:
54:9b:42:26:3e:48:8c:36:2a:e8:c7:75:7c:54:96:6f:2a:88:
61:8e:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:29 2025 by rpki-client