Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/5gv8NleysD8vl08l6aoCX-p4xqQ.roa
File: 5gv8NleysD8vl08l6aoCX-p4xqQ.roa (raw, json)
Hash identifier: tjzD0+CnyrFF+9hnhQ6B5JFuFle1cgkJByBQ1F5rqFQ=
Subject key identifier: E6:0B:FC:36:57:B2:B0:3F:2F:97:4F:25:E9:AA:02:5F:EA:78:C6:A4
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1C60
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/5gv8NleysD8vl08l6aoCX-p4xqQ.roa
Signing time: Wed 05 Feb 2025 02:41:09 +0000
ROA not before: Wed 05 Feb 2025 02:41:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59033
IP address blocks: 202.160.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7264 (0x1c60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Feb 5 02:41:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E60BFC3657B2B03F2F974F25E9AA025FEA78C6A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:08:e0:d9:0c:71:c9:61:19:dc:c1:9c:34:
49:17:82:6f:bd:e2:32:f6:d2:9f:c7:a3:10:bf:6e:
76:07:23:f5:81:f3:49:e1:b7:e4:7e:20:57:20:ed:
b1:58:a0:df:af:c0:83:b5:a1:4f:13:06:9e:48:4f:
5c:cd:80:7e:06:4a:2c:88:54:30:77:04:e1:bd:73:
bd:d1:34:f1:d9:a2:ab:ec:f5:48:92:eb:63:72:fc:
a5:2e:99:d2:e8:8f:1f:f1:b9:ce:d5:28:7a:a4:bc:
8e:dc:d8:4c:f5:30:ae:a2:4f:a8:d5:33:e6:e8:bf:
1c:87:54:0a:9f:81:51:d6:cb:53:11:8c:24:e4:0d:
f8:69:d2:b6:9a:3f:d2:22:c7:92:13:c5:5b:07:f3:
64:98:e1:1d:af:05:a3:1c:42:0a:d8:96:f1:a6:7c:
de:91:3c:64:97:cc:be:23:2d:19:14:64:2d:7a:dc:
be:e5:90:cd:4f:24:4f:60:b7:c9:e3:16:29:e6:c2:
b5:ac:60:76:9b:21:b3:f8:74:fd:2a:66:38:56:95:
30:eb:1f:01:2c:d9:ea:0e:ef:c8:75:ae:7a:f9:78:
f3:b1:0b:62:7e:7e:1d:92:7e:1f:c4:a5:fa:ea:6f:
71:40:65:86:bd:a5:f8:9e:3a:3b:4d:21:59:0c:64:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:FC:36:57:B2:B0:3F:2F:97:4F:25:E9:AA:02:5F:EA:78:C6:A4
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/5gv8NleysD8vl08l6aoCX-p4xqQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
05:ff:fd:72:f7:3b:20:d6:aa:39:49:bd:c8:cc:11:6e:7a:87:
cf:05:25:9a:03:2c:9c:1a:b4:3b:66:06:1a:b4:36:e6:94:1d:
7a:36:e7:1d:57:66:f5:7c:39:b1:44:9f:13:6e:1d:d4:27:eb:
ea:70:2d:36:d7:9a:2c:e7:b5:58:1e:2d:fd:86:74:92:85:84:
a8:b8:05:fd:9d:c0:7a:33:8b:ae:4f:98:39:dd:b8:ba:42:6c:
3c:46:7f:4c:60:ec:e0:97:0e:71:11:e7:0a:25:bd:c3:f6:44:
0f:da:3f:89:19:f8:33:ec:f2:73:40:e1:98:6e:bd:ed:44:1f:
85:33:0c:6c:13:fc:e0:1b:25:ae:0e:ee:53:7a:a6:30:d9:9d:
4b:e3:37:eb:24:5a:fc:be:4e:96:46:e9:68:d2:7c:79:64:d6:
f3:36:54:af:c9:7e:66:0d:62:66:45:57:b0:d9:56:ad:b9:2c:
b4:f4:e2:34:bc:9b:75:e6:f8:a5:f4:0b:ba:2f:10:5c:1d:f9:
bc:50:d6:27:cb:f9:f3:c7:bf:59:3f:d8:e8:87:50:ae:2f:5b:
55:b1:d8:cc:d1:ed:a7:af:19:7c:b8:30:88:e7:cf:3b:c5:6e:
c1:06:11:a9:c5:8e:7e:5f:c7:28:7a:7e:c5:2e:8c:8e:b6:bc:
32:17:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:57 2025 by rpki-client