Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/L2JhrifN3eHAFjWTqkpFYpuAwa8.roa
File: L2JhrifN3eHAFjWTqkpFYpuAwa8.roa (raw, json)
Hash identifier: sD7LPUN7HVQbPnupp2g2ocERCW5ojdpKbeV6F04+5H4=
Subject key identifier: 2F:62:61:AE:27:CD:DD:E1:C0:16:35:93:AA:4A:45:62:9B:80:C1:AF
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 038D
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/L2JhrifN3eHAFjWTqkpFYpuAwa8.roa
Signing time: Tue 23 Apr 2024 14:05:24 +0000
ROA not before: Tue 23 Apr 2024 14:05:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 18811
IP address blocks: 124.175.192.0/21 maxlen: 24
124.175.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909 (0x38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Apr 23 14:05:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2F6261AE27CDDDE1C0163593AA4A45629B80C1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:be:24:a2:5d:a0:72:50:cb:42:17:2a:b1:cf:
c5:f6:ca:ff:4c:3c:fe:c9:69:53:0f:0c:00:70:f0:
7a:d6:9b:2f:e8:07:b8:7b:84:53:94:1b:03:65:15:
dd:2c:3f:5d:20:62:d7:6c:4b:71:f5:46:33:de:f3:
21:c5:c2:72:08:86:66:5e:f3:59:2b:a9:de:c3:5c:
08:f4:29:7d:f1:4c:63:ca:cd:90:7d:1b:95:14:f8:
1d:6d:e3:46:bd:08:ff:7e:b0:8e:8c:41:20:e9:52:
bd:aa:db:bc:e8:a1:bc:6f:b7:cd:a1:f8:d3:40:72:
40:10:c5:58:ac:e5:15:30:bf:0c:ce:b5:ed:7a:c4:
73:2a:76:fd:c8:ca:f6:02:49:9b:26:70:58:55:70:
ea:a6:da:e1:33:9f:95:64:97:38:b4:94:ab:eb:38:
09:12:45:6d:c0:ca:0b:04:1e:ae:e4:95:9b:a6:a9:
ee:58:0f:40:06:9c:0a:16:ab:75:69:6f:4f:6d:38:
81:6e:42:e0:4b:a8:95:be:f2:fd:e6:d8:14:db:5d:
a0:33:b8:70:d1:ce:1f:17:01:ea:41:3c:4b:06:ea:
ee:b1:f9:12:04:81:24:2c:1a:d5:bb:c7:d6:a0:c3:
99:5c:9b:c3:8c:27:38:a4:0a:91:2e:78:06:5b:b0:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:61:AE:27:CD:DD:E1:C0:16:35:93:AA:4A:45:62:9B:80:C1:AF
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/L2JhrifN3eHAFjWTqkpFYpuAwa8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.192.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:eb:07:a9:fd:dc:ac:7a:b1:a4:71:99:ed:81:b2:f2:86:0d:
e3:5d:0a:c6:02:9b:3e:ba:4a:15:0f:07:ec:b8:91:62:3f:79:
b1:46:c0:c4:c9:a9:4d:25:48:48:97:fb:c5:a8:97:0c:b9:52:
9c:cc:a6:bf:15:65:e8:22:42:29:79:24:68:5f:c2:a3:f5:2e:
31:94:d1:0d:bd:6b:b1:7d:76:40:51:d2:94:5e:4e:6e:dd:50:
ee:e1:2e:2c:2c:68:b6:d2:2a:af:0e:53:02:4f:82:d9:fc:20:
4b:3c:41:b6:4a:92:a2:9c:00:15:40:27:5c:47:5a:25:2d:ac:
f4:de:ad:a5:97:2c:88:f9:4a:38:85:0b:57:b9:52:cd:f4:91:
f5:57:4d:62:d8:d7:3e:cd:cb:5e:98:0c:8f:f4:2a:85:f7:20:
fc:3c:6d:c2:5c:cd:70:08:9a:d9:d1:19:2e:c0:fd:db:b7:8f:
f3:73:30:2b:b3:69:d9:2a:8b:09:e9:0f:71:b8:6b:5b:03:f3:
70:e5:5b:e8:6b:bc:93:97:bf:e2:9f:00:a4:8b:f1:67:d7:37:
55:8a:60:dd:26:37:4f:54:e7:cd:f3:1c:30:d7:47:c3:9f:5f:
22:66:60:20:6b:82:a7:f5:d9:9c:e5:0c:82:08:a4:41:39:da:
40:c1:36:f0
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICA40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA0MjMx
NDA1MjRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJGNjI2MUFFMjdDRERE
RTFDMDE2MzU5M0FBNEE0NTYyOUI4MEMxQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqviSiXaByUMtCFyqxz8X2yv9MPP7JaVMPDABw8HrWmy/oB7h7
hFOUGwNlFd0sP10gYtdsS3H1RjPe8yHFwnIIhmZe81krqd7DXAj0KX3xTGPKzZB9
G5UU+B1t40a9CP9+sI6MQSDpUr2q27zoobxvt82h+NNAckAQxVis5RUwvwzOte16
xHMqdv3IyvYCSZsmcFhVcOqm2uEzn5Vklzi0lKvrOAkSRW3AygsEHq7klZumqe5Y
D0AGnAoWq3Vpb09tOIFuQuBLqJW+8v3m2BTbXaAzuHDRzh8XAepBPEsG6u6x+RIE
gSQsGtW7x9agw5lcm8OMJzikCpEueAZbsNI/AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUL2JhrifN3eHAFjWTqkpFYpuAwa8wHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvTDJKaHJpZk4zZUhBRmpXVHFr
cEZZcHVBd2E4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHyv
wDANBgkqhkiG9w0BAQsFAAOCAQEAqusHqf3crHqxpHGZ7YGy8oYN410KxgKbPrpK
FQ8H7LiRYj95sUbAxMmpTSVISJf7xaiXDLlSnMymvxVl6CJCKXkkaF/Co/UuMZTR
Db1rsX12QFHSlF5Obt1Q7uEuLCxottIqrw5TAk+C2fwgSzxBtkqSopwAFUAnXEda
JS2s9N6tpZcsiPlKOIULV7lSzfSR9VdNYtjXPs3LXpgMj/Qqhfcg/DxtwlzNcAia
2dEZLsD927eP83MwK7Np2SqLCekPcbhrWwPzcOVb6Gu8k5e/4p8ApIvxZ9c3VYpg
3SY3T1TnzfMcMNdHw59fImZgIGuCp/XZnOUMggikQTnaQME28A==
-----END CERTIFICATE-----
Generated at Wed Jun 26 18:22:48 2024 by rpki-client on console-ams.rpki-client.org