Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/TDl0_AU5PTw-rw-TymScnt56-og.roa
File: TDl0_AU5PTw-rw-TymScnt56-og.roa (raw, json)
Hash identifier: t0LG5e9nnJeC9jPCNRt178BO3tQQzn4jKli2mncZzyA=
Subject key identifier: 4C:39:74:FC:05:39:3D:3C:3E:AF:0F:93:CA:64:9C:9E:DE:7A:FA:88
Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Certificate serial: 0193
Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/TDl0_AU5PTw-rw-TymScnt56-og.roa
Signing time: Tue 08 Oct 2024 10:02:34 +0000
ROA not before: Tue 08 Oct 2024 10:02:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63631
IP address blocks: 2407:9080::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Validity
Not Before: Oct 8 10:02:34 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4C3974FC05393D3C3EAF0F93CA649C9EDE7AFA88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:b8:d1:7b:b2:97:63:8e:d9:f6:21:6e:f0:
10:4d:bf:c8:90:0f:6f:cf:87:28:7c:52:3c:39:fb:
27:f7:3e:aa:49:e2:79:ef:71:c5:19:95:6a:1a:28:
12:ea:69:13:ee:2e:1e:00:d0:16:b4:96:a3:88:d0:
6f:87:26:c6:cb:c5:6c:5f:ab:7e:59:90:04:d0:ee:
63:8b:86:1e:9f:68:a5:b4:f1:3b:e2:ad:27:7c:0d:
8c:56:f6:32:0c:c0:55:3f:56:c0:65:44:fb:ca:eb:
0e:62:64:46:f7:5a:f3:d4:4c:0c:3b:d3:79:bb:56:
06:36:b0:42:29:c1:17:d8:d8:53:06:83:54:c1:99:
83:20:02:9c:43:81:83:9b:6e:1c:b9:7e:dc:52:07:
15:1b:7f:0a:81:1c:bd:9a:0e:d9:76:3a:0b:da:ba:
96:49:6a:9c:3e:5f:46:78:26:88:9f:fc:e3:49:1e:
2b:bb:9c:ab:03:41:8d:d4:f0:fa:ee:61:76:e0:62:
eb:9f:64:85:bf:55:d5:0f:46:ca:3a:09:44:6b:b1:
15:2a:03:04:30:32:f6:b5:c5:7a:42:6d:00:c8:f4:
a5:af:cd:70:e0:2e:61:ef:24:2c:3c:45:a1:66:81:
5a:94:68:19:de:65:26:6b:81:ff:5f:33:e9:2f:8e:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:39:74:FC:05:39:3D:3C:3E:AF:0F:93:CA:64:9C:9E:DE:7A:FA:88
X509v3 Authority Key Identifier:
keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/TDl0_AU5PTw-rw-TymScnt56-og.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9080::/32
Signature Algorithm: sha256WithRSAEncryption
9e:6c:29:b4:49:00:69:d3:57:f7:e0:7b:b3:e0:d2:87:07:30:
a3:ba:9e:76:e0:7f:51:02:6f:d0:e9:f6:25:82:f0:a3:67:1a:
5a:a5:44:e8:55:47:63:ed:2d:ff:4a:94:3e:41:5a:cd:5c:1b:
cc:d5:f9:f4:b3:7b:3d:15:e0:63:07:d1:4c:81:26:a9:1e:53:
f3:b9:06:97:52:48:8e:61:cf:05:ec:3b:39:64:c4:6c:26:f6:
e2:77:92:51:bb:1e:36:c8:02:07:d9:99:92:4c:f7:3d:c8:69:
b3:51:c6:32:e0:22:13:75:04:32:e8:51:56:de:76:20:c3:53:
a1:f0:08:c5:c1:30:b1:10:ac:e8:c1:4b:71:08:5a:29:dd:ac:
23:2e:05:ea:22:a7:3f:50:c7:bc:36:d5:d7:9f:71:8f:f8:0e:
37:33:af:4a:8c:fb:d0:9e:00:bc:77:4d:c7:f8:63:21:56:8f:
dc:af:91:d8:6e:a8:ff:8d:18:7d:73:a3:9c:c7:48:c6:22:cc:
3f:83:52:f4:7e:e6:97:56:ca:90:13:d3:e9:fd:4e:7d:b6:76:
72:a4:61:28:55:63:70:35:05:5c:f9:34:c9:71:27:15:1c:12:
56:17:eb:c4:62:9d:96:a1:10:a0:e0:cd:94:66:4b:74:c9:fe:
91:af:51:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:20:29 2025 by rpki-client