Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/tcNYjLabfsgNtY7A28BVLcZRkQA.roa
File: tcNYjLabfsgNtY7A28BVLcZRkQA.roa (raw, json)
Hash identifier: VUZerhSHKXntthuMx1ErUjEcpUO2cjj7+J4Ad/TWPuc=
Subject key identifier: B5:C3:58:8C:B6:9B:7E:C8:0D:B5:8E:C0:DB:C0:55:2D:C6:51:91:00
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 1BC4
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/tcNYjLabfsgNtY7A28BVLcZRkQA.roa
Signing time: Fri 17 Jan 2025 01:29:06 +0000
ROA not before: Fri 17 Jan 2025 01:29:06 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 9808
IP address blocks: 121.255.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7108 (0x1bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Jan 17 01:29:06 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B5C3588CB69B7EC80DB58EC0DBC0552DC6519100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:9d:2f:2a:82:97:be:3e:6a:e5:9c:d3:7a:
80:c3:6e:b8:6a:32:7b:4c:4f:ac:58:a7:bc:cc:f0:
23:f6:94:7c:4c:1b:f8:ad:0e:32:f7:d7:aa:1c:a7:
c1:d2:4e:9e:91:d5:1e:3f:6d:15:a8:8f:d7:7b:d5:
49:65:0a:ca:c1:93:da:b8:00:1b:85:c5:a9:49:b4:
d0:39:5f:b7:46:42:38:42:bc:2c:c6:41:47:c6:df:
de:fe:9e:23:c3:76:83:f9:7c:94:1c:f4:2e:a2:9f:
f0:6b:c2:f5:57:9f:d8:a3:34:23:93:4f:a4:a8:b5:
32:c8:74:13:2b:50:6e:50:b1:ec:06:06:79:67:ee:
b7:d1:c1:7a:bf:5d:48:5d:4f:f8:77:fe:e0:6b:83:
b7:3f:0a:2a:26:b5:95:b8:67:89:2b:bc:d4:44:7f:
ec:eb:25:80:8e:55:9f:29:9a:ad:d4:2b:de:98:05:
52:c6:b5:01:6f:ed:48:84:a2:6e:3a:8b:61:b9:86:
0d:51:c5:fd:f4:6e:36:2d:97:3e:a7:ef:0b:b3:67:
3a:a6:0d:2e:24:95:5f:be:db:8a:f4:e5:b4:f8:1d:
43:66:79:1a:15:52:4b:fc:c5:19:b9:58:0b:fd:12:
c5:db:64:31:15:e4:e5:35:7a:9b:64:3e:31:11:83:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C3:58:8C:B6:9B:7E:C8:0D:B5:8E:C0:DB:C0:55:2D:C6:51:91:00
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/tcNYjLabfsgNtY7A28BVLcZRkQA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:75:f4:26:2e:db:19:15:64:62:33:ca:16:43:43:bb:57:c2:
0d:37:8e:57:b3:72:69:f4:1d:90:6f:ee:53:85:59:3d:2f:51:
bc:7a:a3:92:e8:8e:3d:e4:dc:f8:53:b1:76:ac:06:01:bc:43:
e1:bc:60:7c:fa:e6:4a:2c:8d:ed:c6:1f:cd:42:f6:ef:37:18:
5e:57:b3:b3:da:12:10:59:47:3f:7a:31:12:97:31:c7:8b:db:
a1:cb:97:ea:f5:3d:75:78:1a:37:3d:d0:47:9f:87:4f:ac:42:
e4:47:2c:d5:48:e4:03:5d:39:0d:9f:d6:5c:22:ec:5d:be:5d:
96:28:0a:f7:a0:83:5f:6e:bb:e0:4a:10:b0:1a:f2:12:67:0c:
d9:75:dd:10:c5:3f:27:ed:98:83:82:6f:46:be:d3:ed:a2:14:
ca:dd:d5:4d:54:bb:77:80:1b:69:5c:9b:54:82:6c:a5:18:f2:
22:56:dc:13:24:fa:b2:cc:68:93:89:a0:b4:06:46:03:19:d1:
85:11:5d:06:57:9f:59:a3:93:2c:33:ec:4b:44:eb:ba:22:f5:
c0:68:e6:94:90:63:b0:3d:21:14:62:8c:2b:ec:cc:f1:5b:86:
82:bf:1a:37:98:bd:22:60:ee:8b:5b:2a:3f:7b:4e:37:e3:e2:
12:bd:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:43:58 2025 by rpki-client