Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/NMHb2UFwO_I-h1asoM3p_Xf7X-c.roa
File: NMHb2UFwO_I-h1asoM3p_Xf7X-c.roa (raw, json)
Hash identifier: rNnKVfauMNkQjQMCBnzbua+dEEBtDwfUeKuVVJYIlHk=
Subject key identifier: 34:C1:DB:D9:41:70:3B:F2:3E:87:56:AC:A0:CD:E9:FD:77:FB:5F:E7
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 1BC3
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/NMHb2UFwO_I-h1asoM3p_Xf7X-c.roa
Signing time: Fri 17 Jan 2025 01:29:05 +0000
ROA not before: Fri 17 Jan 2025 01:29:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 9808
IP address blocks: 202.141.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7107 (0x1bc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Jan 17 01:29:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=34C1DBD941703BF23E8756ACA0CDE9FD77FB5FE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:3c:87:66:c5:48:cf:4b:93:6d:df:09:da:
0a:e9:42:a3:11:93:98:9c:cd:14:ac:54:6c:a0:23:
f1:45:1b:3f:f6:0e:70:75:ca:59:09:d2:30:90:b2:
72:99:5d:b5:af:95:a5:80:3f:ce:be:99:d8:b1:5c:
0e:ba:6f:67:95:a8:f4:a5:de:4e:13:72:66:a7:56:
72:13:70:ea:c7:25:af:c5:cb:2a:41:85:a2:07:b4:
b4:9b:ea:07:4c:0e:85:62:34:17:9f:fa:75:2b:84:
cd:f0:35:e4:56:2b:06:9b:67:42:39:a7:d1:7f:cb:
19:5c:60:89:e7:b4:fe:d9:8e:c7:df:1a:fe:f6:2e:
f3:1b:b6:e1:33:b1:fa:36:2b:18:3d:b6:ff:a5:72:
f2:43:ce:20:2f:63:18:6d:a8:2f:3b:ac:d7:66:44:
a1:4e:3a:4a:d6:5e:b7:9d:2d:06:db:6f:05:17:33:
4a:72:c4:c1:7c:9b:30:18:8d:30:15:3c:dd:8a:d9:
f7:e2:6d:3f:df:06:e9:a5:80:82:a7:67:d6:f9:b6:
d9:83:b3:a8:f8:77:0f:b2:10:c7:6a:73:73:9c:95:
a2:1d:5d:ca:64:84:84:7a:ce:7c:b0:58:14:09:19:
fc:db:e3:29:54:ef:64:1a:5b:a0:e4:8f:32:96:0f:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C1:DB:D9:41:70:3B:F2:3E:87:56:AC:A0:CD:E9:FD:77:FB:5F:E7
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/NMHb2UFwO_I-h1asoM3p_Xf7X-c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.141.176.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:fc:17:ec:7d:6e:cc:11:83:85:87:66:4a:35:b5:2a:07:b9:
be:26:39:60:f0:07:c8:28:d1:53:16:c5:ed:07:00:3d:6d:cb:
5b:13:b2:b8:2c:8d:17:2b:f7:b8:32:99:b2:c7:a6:97:79:3f:
ad:45:84:d8:98:8a:b1:4f:4e:11:0d:54:94:83:c9:28:64:5e:
98:fb:b7:ae:a8:3e:3f:c0:db:e9:92:13:2f:bf:dd:50:1c:07:
14:f3:5a:e2:18:ba:a5:77:e3:89:a8:05:59:88:b4:9e:ca:4f:
18:78:0b:d7:00:61:6a:5d:35:a2:ab:f6:85:7e:c7:a2:b7:72:
0d:65:d7:37:82:ee:71:bf:86:0d:83:1d:9c:45:0e:16:3b:6e:
eb:6d:ed:05:a3:cb:c8:7b:a0:8a:2d:68:ae:a4:38:f7:aa:73:
ba:35:19:c3:50:83:aa:e2:9e:b8:b2:70:bf:4f:9c:7c:1e:4f:
87:2e:aa:52:f7:9a:1d:a2:b2:08:5a:99:76:ca:36:f9:fe:ec:
fd:b2:94:63:cb:e3:bd:50:2e:7c:19:d4:c5:ae:fe:b7:14:19:
2e:58:6b:92:4b:f9:36:06:2b:f5:b0:db:9d:2f:68:38:93:69:
eb:1e:95:c2:1d:ae:62:50:73:94:29:36:7a:d5:df:7a:d0:0a:
2c:70:bb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:52 2025 by rpki-client