Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1023/phU4YJh5EUs8U1V3CbndmrNmfO0.roa
File: phU4YJh5EUs8U1V3CbndmrNmfO0.roa (raw, json)
Hash identifier: CZhyDj2FMIi+v5w3tJPQMA4talNR9mcJmi9qREPZn/A=
Subject key identifier: A6:15:38:60:98:79:11:4B:3C:53:55:77:09:B9:DD:9A:B3:66:7C:ED
Certificate issuer: /CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
Certificate serial: 03
Authority key identifier: 32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/phU4YJh5EUs8U1V3CbndmrNmfO0.roa
Signing time: Wed 06 Nov 2024 09:54:29 +0000
ROA not before: Wed 06 Nov 2024 09:54:29 +0000
ROA not after: Thu 06 Nov 2025 09:48:25 +0000
asID: 132883
IP address blocks: 203.83.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32D5EC15C5E564E470EC7B14CD47DE2D862ACE83
Validity
Not Before: Nov 6 09:54:29 2024 GMT
Not After : Nov 6 09:48:25 2025 GMT
Subject: CN=A61538609879114B3C53557709B9DD9AB3667CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:32:74:4a:6b:89:a9:53:14:63:20:46:41:
ca:6f:03:56:71:29:34:29:80:8e:19:29:27:83:8e:
fb:25:8f:92:a4:99:c5:62:2a:d9:dc:e2:ca:67:1b:
cd:1d:62:cc:63:dd:3a:4b:a1:d2:8b:ba:6f:7e:6b:
5c:9f:ef:1f:dd:3d:8e:87:e7:6c:73:06:e9:c7:54:
4b:43:0c:83:1d:94:a7:7c:23:b2:77:6e:f8:88:9d:
9e:8e:d6:8e:c2:c7:ac:05:b6:66:6d:19:81:e0:1c:
5f:25:ca:af:a3:08:00:b4:82:43:30:45:23:df:c3:
4e:37:2e:5d:ce:6e:a3:09:bd:70:1e:35:a5:3d:ec:
ae:de:c9:2f:0f:a9:dc:ca:69:12:23:c3:11:94:65:
c4:d7:6a:2d:66:53:95:e4:aa:e9:9e:49:65:b8:1e:
a5:9f:26:b2:53:76:97:a2:d3:b6:75:15:39:86:62:
59:aa:5e:74:8c:4a:80:9d:64:ce:3d:44:c4:ed:dd:
34:47:23:0f:34:ed:1c:00:a8:e2:e1:1d:52:3b:c9:
72:9d:ee:4a:a4:55:65:0f:2c:ca:96:b8:0b:5d:d4:
15:19:8b:59:a7:95:58:84:a1:81:18:e5:c0:e8:e9:
0b:25:4e:bd:39:80:d5:87:e7:f2:95:82:a2:20:84:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:15:38:60:98:79:11:4B:3C:53:55:77:09:B9:DD:9A:B3:66:7C:ED
X509v3 Authority Key Identifier:
keyid:32:D5:EC:15:C5:E5:64:E4:70:EC:7B:14:CD:47:DE:2D:86:2A:CE:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/MtXsFcXlZORw7HsUzUfeLYYqzoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MtXsFcXlZORw7HsUzUfeLYYqzoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1023/phU4YJh5EUs8U1V3CbndmrNmfO0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.83.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:83:8f:ec:56:91:66:8e:21:10:37:31:5b:51:18:e3:8d:d7:
d5:4a:1a:8f:3a:d4:77:79:a8:3a:32:0d:44:97:fe:95:2e:1d:
bb:25:9c:2c:cc:24:78:79:a8:8a:29:50:4b:ae:83:bd:a8:93:
8f:11:19:65:f9:6f:a7:1b:37:c4:6b:e6:df:5e:61:1d:5e:40:
6f:2e:87:e4:24:fc:86:92:49:da:06:f9:63:3e:f2:90:2c:36:
68:97:70:af:03:7b:e0:48:17:53:d1:67:13:16:f0:d5:fb:e9:
22:ef:34:57:cf:bc:13:5a:6b:91:6c:29:80:0d:24:45:b1:17:
5a:5f:bd:51:33:61:42:74:88:41:7c:06:9d:e7:73:29:1c:58:
7e:b9:78:99:18:8e:38:3c:02:14:04:4c:6e:0d:ad:61:07:79:
ce:2c:52:73:41:47:de:1f:f9:a0:be:80:aa:7e:74:68:bb:0f:
89:d2:0a:ae:90:26:f5:f9:48:32:f2:a8:f7:49:7c:ae:d1:d5:
08:c2:25:b0:c6:f7:0e:8c:2a:ac:e0:ba:13:ca:9f:d5:a8:0d:
0e:f2:d3:99:4f:67:13:24:96:57:3b:4b:d8:52:f1:db:74:f6:
59:2b:5e:86:1f:43:38:7f:7f:05:0c:fa:c8:89:72:5a:be:1f:
f1:4c:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:25 2025 by rpki-client