Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/UZHfKjNy_777Q9bAPY-TRRLF7JM.roa
File: UZHfKjNy_777Q9bAPY-TRRLF7JM.roa (raw, json)
Hash identifier: gTXt1ZXlzhAqrXd8fGYX/D/fL64eBW9l+ESGdbQgWzk=
Subject key identifier: 51:91:DF:2A:33:72:FF:BE:FB:43:D6:C0:3D:8F:93:45:12:C5:EC:93
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1D4E
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/UZHfKjNy_777Q9bAPY-TRRLF7JM.roa
Signing time: Wed 26 Mar 2025 02:11:18 +0000
ROA not before: Wed 26 Mar 2025 02:11:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4515
IP address blocks: 123.49.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7502 (0x1d4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Mar 26 02:11:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5191DF2A3372FFBEFB43D6C03D8F934512C5EC93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:85:9b:5a:a7:f4:81:35:88:4f:1c:0f:20:
bf:cd:b2:c0:a2:87:ae:1a:ae:88:27:5f:19:00:7a:
28:8d:e7:1a:c0:22:a5:d0:6b:2a:54:28:8c:ec:d9:
0f:a7:90:12:9c:9d:8f:eb:04:78:ca:ee:7e:51:18:
77:a5:68:52:d6:eb:ba:8b:df:14:eb:c0:1b:03:5d:
17:52:99:8c:cf:22:a9:67:83:ad:a2:68:9c:68:f8:
a0:f6:0b:26:38:0a:fa:74:68:e3:84:a3:39:26:26:
20:4d:80:bf:8b:91:d0:32:58:26:55:b8:90:3d:65:
d7:58:1f:03:0d:33:ce:2b:77:0a:17:6e:c5:89:25:
aa:76:db:d8:76:71:93:65:a7:50:67:20:b7:3a:94:
74:e6:1d:f0:15:76:2f:01:24:d8:a4:bf:be:45:43:
92:0f:f5:79:cf:03:6e:50:e8:60:03:bc:e5:e5:f2:
87:f4:b2:c7:00:f5:65:6b:d2:4b:6c:8b:3c:10:ad:
89:1b:02:ba:ef:d3:71:b0:40:d7:54:b8:e4:25:d5:
13:ab:9d:ac:5c:12:95:5f:93:b4:a2:d1:aa:63:78:
89:54:8e:7a:9f:84:54:06:13:62:fc:be:40:a3:c3:
7f:18:38:4a:e6:29:cc:a7:b6:21:65:17:29:9f:38:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:DF:2A:33:72:FF:BE:FB:43:D6:C0:3D:8F:93:45:12:C5:EC:93
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/UZHfKjNy_777Q9bAPY-TRRLF7JM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b2:dc:f2:75:91:6f:7c:14:8f:84:ff:7d:59:8b:38:f7:48:
aa:4a:46:b9:ad:c9:81:b9:61:56:37:e6:29:9a:ea:7f:cd:a4:
e0:c5:23:b3:f2:2c:b7:b2:87:ae:9b:de:bf:d4:4f:4e:82:7b:
d2:47:e5:2d:7a:38:12:7f:52:2f:c5:d3:88:e4:13:52:6f:0f:
67:77:1c:ec:f2:88:68:da:0b:97:b2:c3:3b:34:cf:44:15:59:
38:98:cd:70:d4:3f:21:29:9e:cb:14:85:e5:92:4a:51:ed:43:
be:d5:5a:83:1a:7a:03:fb:ee:86:30:d5:a1:1c:34:c0:da:75:
89:07:37:e4:d6:d9:a4:1a:ce:38:7f:0a:bd:8e:65:dd:ea:b0:
cd:a6:8d:f3:9f:9a:74:0a:f0:c4:a3:d6:e2:b0:c3:e9:91:9f:
b9:ac:67:0a:8a:34:ac:17:8d:29:4c:b0:23:07:da:c7:19:26:
0c:02:28:7f:1d:35:5a:01:f1:96:40:37:5e:3b:7f:20:cc:16:
3d:15:55:c7:92:ad:ca:88:3d:98:b4:aa:48:77:3f:4f:ef:11:
2c:6e:ea:a1:b0:69:2b:5b:65:10:22:74:ab:89:53:1f:47:2f:
80:16:b2:34:94:1e:e1:74:6d:11:28:76:c6:00:e7:95:a2:05:
61:eb:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:48 2025 by rpki-client