Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/vNjioWiQKWOYvKzvvRRsQO4AftA.roa
File: vNjioWiQKWOYvKzvvRRsQO4AftA.roa (raw, json)
Hash identifier: lRDdC4pBhtHMqAtHZOgxXsE0QLSzXvk/ir07rNAjaKI=
Subject key identifier: BC:D8:E2:A1:68:90:29:63:98:BC:AC:EF:BD:14:6C:40:EE:00:7E:D0
Certificate issuer: /CN=39E47899249325DB499BFC6910919D2F36003E9A
Certificate serial: 18BA
Authority key identifier: 39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/vNjioWiQKWOYvKzvvRRsQO4AftA.roa
Signing time: Fri 27 Sep 2024 02:57:43 +0000
ROA not before: Fri 27 Sep 2024 02:57:43 +0000
ROA not after: Sat 27 Sep 2025 02:42:48 +0000
asID: 4847
IP address blocks: 2403:8080:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6330 (0x18ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39E47899249325DB499BFC6910919D2F36003E9A
Validity
Not Before: Sep 27 02:57:43 2024 GMT
Not After : Sep 27 02:42:48 2025 GMT
Subject: CN=BCD8E2A16890296398BCACEFBD146C40EE007ED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:99:cd:c1:88:29:10:6c:4b:07:13:63:f2:
07:49:41:a1:e8:ea:01:83:f4:2c:3f:d1:4f:76:a8:
22:76:b7:2c:1f:c2:21:39:da:fe:d2:5f:ad:a4:c4:
d4:bf:d3:99:be:2c:fd:53:ac:20:b8:2d:e1:fc:4d:
52:f9:a4:b6:b3:5a:5c:31:a7:64:a0:f6:2e:95:f8:
66:2b:31:87:c7:39:9e:a6:b9:71:ac:9b:ee:d7:e2:
cd:c9:41:cb:a0:60:da:24:ee:e2:83:72:73:3d:d1:
53:c8:cf:da:21:44:06:c1:31:de:23:7a:f3:11:4b:
d2:ed:ab:7f:48:6f:17:32:f9:ae:31:05:97:04:2c:
c1:0b:8e:ae:f2:d0:a3:a5:46:65:78:22:cf:6d:f7:
05:da:2e:33:4e:40:b1:67:33:06:ec:63:7e:b1:fb:
c1:e5:bb:4a:e6:34:f3:6a:7b:ed:65:ca:ca:1e:95:
6e:2c:9f:10:e8:02:56:06:15:cd:d3:c6:f3:b4:e1:
aa:23:46:5b:2f:79:50:76:d7:d5:8f:96:a3:ee:03:
e2:64:14:3e:0a:43:af:27:e8:bc:b8:a3:5d:b8:c5:
92:6a:cc:d1:da:16:dc:fb:2a:da:d5:6d:8b:2a:46:
16:8b:d0:59:40:c6:05:10:07:8a:42:0d:93:99:da:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:E2:A1:68:90:29:63:98:BC:AC:EF:BD:14:6C:40:EE:00:7E:D0
X509v3 Authority Key Identifier:
keyid:39:E4:78:99:24:93:25:DB:49:9B:FC:69:10:91:9D:2F:36:00:3E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/OeR4mSSTJdtJm_xpEJGdLzYAPpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OeR4mSSTJdtJm_xpEJGdLzYAPpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/vNjioWiQKWOYvKzvvRRsQO4AftA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:8080:101::/48
Signature Algorithm: sha256WithRSAEncryption
b4:52:ef:4c:ce:ba:0a:66:66:a8:95:55:f6:69:6a:86:8e:d4:
2b:53:8e:07:ae:08:6b:97:dc:c8:5d:a4:e6:5f:19:f5:c7:da:
01:60:1b:40:ef:aa:56:e7:40:45:57:b9:a9:99:63:bf:e8:fb:
7e:cc:0c:5b:d7:7b:cd:5d:70:2e:5d:00:5c:43:57:1a:51:23:
33:9a:9e:5a:27:93:ed:9f:14:42:f9:44:9d:cb:a2:87:7c:33:
95:56:60:07:02:4b:ed:ae:1e:be:f6:d3:df:41:48:02:7a:1f:
86:3b:8b:f4:64:08:ec:b4:05:e6:14:e4:49:be:b5:60:59:42:
a7:9b:34:6e:7b:4e:c8:4e:5a:c1:cc:07:88:e0:c4:75:f2:87:
27:50:19:42:66:19:be:07:79:a6:5a:1b:61:da:fc:33:dd:fc:
00:0f:a7:79:85:db:4b:ea:10:d0:f2:ef:ca:2c:8a:5c:32:b9:
41:fb:ee:cc:72:fd:f3:0e:b6:52:ed:4b:99:44:84:78:9f:a8:
56:35:c7:5c:41:15:2d:44:74:c2:5c:a8:fe:70:ee:86:f0:32:
f7:d3:51:4c:46:b3:91:02:09:f6:7b:3a:53:ec:31:75:38:f2:
67:dd:f7:62:e3:e8:57:16:f8:f4:2d:9b:3f:a2:54:c2:f6:40:
3d:07:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:33 2025 by rpki-client on console.sobornost.net