Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/Ai_3ZGUyOymZlKBltfpaWRLJljU.roa
File: Ai_3ZGUyOymZlKBltfpaWRLJljU.roa (raw, json)
Hash identifier: RXJ0qyo/XfiO+M7uEJrRZHaYreFCxlz3slo/TQRRhOc=
Subject key identifier: 02:2F:F7:64:65:32:3B:29:99:94:A0:65:B5:FA:5A:59:12:C9:96:35
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 2025
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/Ai_3ZGUyOymZlKBltfpaWRLJljU.roa
Signing time: Fri 17 Jan 2025 01:24:09 +0000
ROA not before: Fri 17 Jan 2025 01:24:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 212237
IP address blocks: 2403:6380:60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8229 (0x2025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jan 17 01:24:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=022FF76465323B299994A065B5FA5A5912C99635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:ea:33:d7:5f:33:fe:16:6d:95:8d:3b:dd:
52:0e:ab:2e:de:f4:54:35:51:12:18:88:0a:3b:44:
88:f0:31:3d:93:56:70:0d:7a:20:ba:4f:02:f9:0c:
be:55:13:9e:9c:64:fb:66:04:17:22:9a:6c:38:70:
cc:68:d7:fb:25:72:36:30:8c:b0:c7:27:6d:b1:da:
d6:4c:02:c8:59:e7:94:6d:02:2a:86:dc:ab:28:2c:
cd:98:a8:f5:77:a6:b5:2a:ce:99:9b:ed:b0:9d:d7:
3e:33:2d:b0:ff:5c:0a:20:71:40:a1:ec:40:89:7b:
e1:e2:06:46:1b:24:08:7c:4b:20:03:bf:0c:75:56:
16:31:2e:d5:38:ee:b8:d1:82:51:11:37:32:b5:ec:
88:4d:61:db:3a:63:52:67:07:a1:1a:42:8a:df:fd:
9c:d8:49:d2:b7:eb:92:01:51:b3:4d:71:a1:3d:92:
80:3c:20:69:b7:51:a6:1f:b0:4a:c3:69:e6:f5:64:
7a:38:89:09:85:9c:a6:dd:d8:20:e9:fb:a4:30:78:
54:b1:9f:56:23:c7:6c:cd:55:52:3a:b4:ee:63:bd:
e0:8d:20:7a:40:cc:bc:c4:c4:21:81:87:ab:c0:7e:
23:a9:33:eb:55:9f:c3:c6:53:e2:e6:2d:6f:8e:aa:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:F7:64:65:32:3B:29:99:94:A0:65:B5:FA:5A:59:12:C9:96:35
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/Ai_3ZGUyOymZlKBltfpaWRLJljU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:6380:60::/44
Signature Algorithm: sha256WithRSAEncryption
04:ed:7d:f6:98:a9:fe:34:e3:7e:40:fd:fb:bd:91:17:5e:61:
7b:c0:d5:15:5a:5c:63:72:6d:d7:04:f8:24:c3:35:c5:81:94:
05:60:b4:7d:b0:6c:cd:92:2d:87:1a:cd:a0:53:6a:d9:7e:9d:
df:6d:9e:82:97:e6:6a:cb:94:74:b9:3d:84:fd:ec:a2:44:e8:
86:0c:36:d3:5d:be:3e:6d:39:20:a2:55:1e:b2:7d:20:fc:03:
eb:9b:a4:1c:f2:d3:c3:80:93:b5:3f:a2:1a:f6:4e:2a:35:1d:
d6:e3:f2:bb:31:95:b0:30:b1:cf:2d:32:77:ff:09:ae:f8:53:
2c:da:df:01:cb:06:88:c4:c7:3a:ea:25:fa:74:ac:11:d5:87:
43:e5:a4:94:a0:1d:1a:3c:9d:0b:de:63:a0:02:00:3a:c7:9b:
ad:d4:58:78:96:ba:44:4a:a1:5f:4c:21:57:34:37:04:2f:e6:
f7:9c:9f:a4:99:4d:b5:fb:3a:e8:e3:99:76:9b:c9:13:f4:d2:
26:ef:77:1c:a6:51:47:83:e8:f1:f6:e4:1f:f0:e9:42:d9:f5:
00:2a:65:10:f5:3a:77:f9:d5:43:5c:b0:76:15:1b:8b:f6:47:
9c:a8:16:4f:b1:ee:5b:2b:06:98:78:d1:b3:07:30:9b:aa:cf:
89:d9:f3:16
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICICUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx
MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTAxMTcw
MTI0MDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyMkZGNzY0NjUzMjNC
Mjk5OTk0QTA2NUI1RkE1QTU5MTJDOTk2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoeOoz118z/hZtlY073VIOqy7e9FQ1URIYiAo7RIjwMT2TVnAN
eiC6TwL5DL5VE56cZPtmBBcimmw4cMxo1/slcjYwjLDHJ22x2tZMAshZ55RtAiqG
3KsoLM2YqPV3prUqzpmb7bCd1z4zLbD/XAogcUCh7ECJe+HiBkYbJAh8SyADvwx1
VhYxLtU47rjRglERNzK17IhNYds6Y1JnB6EaQorf/ZzYSdK365IBUbNNcaE9koA8
IGm3UaYfsErDaeb1ZHo4iQmFnKbd2CDp+6QweFSxn1Yjx2zNVVI6tO5jveCNIHpA
zLzExCGBh6vAfiOpM+tVn8PGU+LmLW+OqlEDAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUAi/3ZGUyOymZlKBltfpaWRLJljUwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk
yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx
MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvQWlfM1pHVXlPeW1a
bEtCbHRmcGFXUkxKbGpVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCQDY4AAYDANBgkqhkiG9w0BAQsFAAOCAQEABO199pip/jTjfkD9+72RF15h
e8DVFVpcY3Jt1wT4JMM1xYGUBWC0fbBszZIthxrNoFNq2X6d322egpfmasuUdLk9
hP3sokTohgw2012+Pm05IKJVHrJ9IPwD65ukHPLTw4CTtT+iGvZOKjUd1uPyuzGV
sDCxzy0yd/8JrvhTLNrfAcsGiMTHOuol+nSsEdWHQ+WklKAdGjydC95joAIAOseb
rdRYeJa6REqhX0whVzQ3BC/m95yfpJlNtfs66OOZdpvJE/TSJu93HKZRR4Po8fbk
H/DpQtn1ACplEPU6d/nVQ1ywdhUbi/ZHnKgWT7HuWysGmHjRswcwm6rPidnzFg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:30 2025 by rpki-client on console.sobornost.net