Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/DbljN0jjqppujGVxxaH450Gi6Jc.roa
File: DbljN0jjqppujGVxxaH450Gi6Jc.roa (raw, json)
Hash identifier: Nk07rDC1ImocTTB2zTNqLvHZlNpJE59UUaO7KLxqYEo=
Subject key identifier: 0D:B9:63:37:48:E3:AA:9A:6E:8C:65:71:C5:A1:F8:E7:41:A2:E8:97
Certificate issuer: /CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Certificate serial: 1DF8
Authority key identifier: 47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/DbljN0jjqppujGVxxaH450Gi6Jc.roa
Signing time: Fri 17 Jan 2025 01:26:17 +0000
ROA not before: Fri 17 Jan 2025 01:26:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 31216
IP address blocks: 2401:5180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7672 (0x1df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Validity
Not Before: Jan 17 01:26:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0DB9633748E3AA9A6E8C6571C5A1F8E741A2E897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:b9:37:08:ca:27:ab:a9:94:94:1a:f6:82:
11:80:15:f8:6e:77:d0:6a:1a:8b:46:f5:e5:64:d2:
ec:85:73:93:da:08:e3:a7:cb:bb:be:be:55:63:e4:
3c:93:b8:60:72:1d:d5:d7:d0:41:ab:14:5c:96:13:
c7:61:81:97:3f:bf:a9:e6:08:5a:83:6b:d9:e5:8b:
96:39:56:1c:3a:ac:62:e2:a5:a1:c6:ae:5a:1a:54:
81:ae:8c:b8:b8:c3:da:7e:45:f9:ef:85:45:e6:84:
0a:4e:b0:49:3f:5d:f9:56:b0:83:8e:eb:f6:b2:49:
39:56:55:3a:21:0e:41:09:81:48:03:a4:22:f0:30:
63:d9:1a:06:20:76:a6:89:a1:4a:24:82:cd:2e:64:
5f:8f:34:f7:34:5a:dd:24:e7:83:60:ee:b6:f8:38:
67:29:96:ac:25:b5:c7:c0:66:b2:8b:ff:cd:45:a4:
e7:aa:23:5b:46:01:08:70:cc:f3:0e:12:05:6e:5e:
5f:04:e0:2e:76:2c:ef:0a:2a:bd:4b:5f:24:86:73:
b0:c8:62:48:21:37:ce:01:56:4b:d6:87:c5:cc:26:
71:3c:9d:a3:6b:99:77:5c:bf:01:cb:0b:d2:06:90:
20:a8:96:8e:eb:41:06:da:02:91:f7:9e:81:0c:e7:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B9:63:37:48:E3:AA:9A:6E:8C:65:71:C5:A1:F8:E7:41:A2:E8:97
X509v3 Authority Key Identifier:
keyid:47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/DbljN0jjqppujGVxxaH450Gi6Jc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:5180::/32
Signature Algorithm: sha256WithRSAEncryption
9a:78:45:b0:74:fc:1f:c0:ad:be:3c:fd:ea:f5:f7:65:be:75:
ab:64:7c:cd:5d:c8:01:6e:4f:39:f6:d4:62:28:12:12:b0:34:
3f:b7:0c:45:52:b3:da:02:93:69:84:5b:41:e2:ba:34:f8:a8:
8b:23:a1:3c:ab:a3:b3:4d:a6:07:11:da:67:a5:9c:3d:af:08:
69:3d:06:ab:fa:43:39:d4:a9:40:f3:e2:d1:f6:2b:f3:68:32:
bf:b5:59:f2:67:88:76:69:e1:67:dc:6f:6c:fe:f2:aa:b8:09:
94:e6:18:82:f7:04:50:b1:84:52:b2:4e:d5:06:45:01:9c:54:
b7:bf:7b:b1:6a:d7:e9:c6:65:ea:ec:43:40:0b:9b:05:32:c1:
71:97:19:c3:53:cd:30:4c:bc:6b:3a:40:25:89:d8:db:44:aa:
f2:8f:50:38:67:68:17:c9:c8:67:dc:ab:79:99:9d:93:ab:64:
26:8b:5c:53:3b:36:37:f9:aa:fe:fa:5e:d5:d2:c0:71:3a:5c:
55:0b:98:27:21:97:df:8a:42:41:0b:03:b9:0b:6d:23:85:4f:
64:2f:2d:85:2e:3d:c3:a8:a8:f1:88:50:38:6e:d6:34:1f:6c:
94:88:e4:59:8c:e2:2d:d1:f7:57:80:81:9e:17:aa:92:29:e9:
fe:47:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:14 2025 by rpki-client