Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/lH1Y9TVXmeomL2NOA-yurt6RtIM.roa
File: lH1Y9TVXmeomL2NOA-yurt6RtIM.roa (raw, json)
Hash identifier: jDf3ji8HpH+hlXC5spkG5TU2SG8q47V/ENczQXo1fXg=
Subject key identifier: 94:7D:58:F5:35:57:99:EA:26:2F:63:4E:03:EC:AE:AE:DE:91:B4:83
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18C7
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lH1Y9TVXmeomL2NOA-yurt6RtIM.roa
Signing time: Fri 17 Jan 2025 01:25:33 +0000
ROA not before: Fri 17 Jan 2025 01:25:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59803
IP address blocks: 2403:1b80::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6343 (0x18c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=947D58F5355799EA262F634E03ECAEAEDE91B483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:f9:69:ed:8f:6b:5d:4b:40:0a:ef:39:a1:
ed:5b:b6:99:3d:49:6c:92:36:fa:00:d0:82:1c:0b:
e7:3b:73:f2:96:8e:3d:62:54:4b:af:e0:71:66:81:
b6:d8:43:19:38:28:36:e4:60:91:dd:b9:7c:40:ec:
62:91:f7:59:73:ee:fa:ae:64:ce:61:5e:0e:d7:9e:
21:26:94:da:96:c3:1e:42:71:db:be:81:92:8c:74:
75:1b:b5:59:38:b6:35:f8:18:69:8b:bb:b8:7e:ca:
91:30:2a:6c:cd:22:d5:df:c7:b8:62:68:76:a0:8e:
d1:25:75:69:3d:60:e6:12:45:84:b6:ec:02:5b:36:
b2:d7:bf:08:fc:b3:79:cc:f6:74:b7:6f:ad:9e:52:
b9:67:1b:de:7f:2c:9f:f2:05:8e:da:1a:a5:21:4e:
a4:71:61:f4:b7:6d:72:da:54:82:d7:53:ef:ba:7f:
3d:19:8c:e1:cc:bb:18:63:f8:b8:da:12:d5:49:f4:
ed:56:a8:c5:42:7e:0f:2f:15:af:d2:7c:bb:8e:5f:
7f:bc:f1:0f:fd:89:bd:66:d5:f4:00:55:44:67:dd:
41:8d:a7:a9:79:54:4b:4d:1d:e6:82:11:1d:7d:24:
5f:d6:17:58:57:ad:6a:8e:02:da:06:e3:04:f0:b3:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7D:58:F5:35:57:99:EA:26:2F:63:4E:03:EC:AE:AE:DE:91:B4:83
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lH1Y9TVXmeomL2NOA-yurt6RtIM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:1b80::/48
Signature Algorithm: sha256WithRSAEncryption
83:4e:f9:50:61:7a:b0:42:ea:9e:01:57:dd:0a:b4:7e:06:a6:
c4:46:30:dc:2c:f8:df:45:30:c1:f8:94:b2:54:ef:d4:f3:52:
8d:2a:0c:7e:fa:2f:6b:d6:a6:01:66:4d:4f:5b:75:88:62:68:
85:1f:fa:92:22:00:7d:02:72:b0:44:4b:ae:0b:9b:bb:a5:12:
e7:f8:5b:40:d6:a2:f3:24:e0:83:16:7b:63:14:d4:6c:81:48:
24:ea:c1:ce:77:ae:48:55:c5:ec:34:90:6c:8f:41:7f:29:95:
a2:23:41:1a:14:d1:fa:0c:bb:06:24:27:8e:c9:34:39:52:d2:
a6:44:a0:71:57:c2:20:68:0e:50:bb:8a:ea:9a:ca:d7:4a:91:
3e:b0:6e:be:36:83:e3:d2:fb:ad:94:f7:49:ef:5c:81:67:24:
d7:ff:96:93:f5:10:90:7d:17:0c:ac:59:bd:0c:09:7b:69:8a:
c0:80:bb:58:86:db:d9:7d:d9:ca:ac:43:6a:bf:0d:18:36:e1:
f7:70:1f:a0:ee:c5:a5:a9:df:a6:04:d6:41:a5:ce:fd:9b:69:
03:bd:4c:72:aa:53:9a:30:e8:3c:8b:11:91:15:05:95:7c:ee:
30:62:5b:33:dd:df:43:ff:24:6d:6d:47:fe:64:48:a7:6e:37:
6e:6b:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:16:34 2025 by rpki-client