Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/aUoWcbVXpewHNgZ9a28zyJFa0w4.roa
File: aUoWcbVXpewHNgZ9a28zyJFa0w4.roa (raw, json)
Hash identifier: FYvDVDMFsN0nqvkhwLmrwl73yaj7BcP7CbHt7H3tlGQ=
Subject key identifier: 69:4A:16:71:B5:57:A5:EC:07:36:06:7D:6B:6F:33:C8:91:5A:D3:0E
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1BF8
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/aUoWcbVXpewHNgZ9a28zyJFa0w4.roa
Signing time: Fri 17 Jan 2025 01:26:38 +0000
ROA not before: Fri 17 Jan 2025 01:26:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63641
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.245.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7160 (0x1bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Jan 17 01:26:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=694A1671B557A5EC0736067D6B6F33C8915AD30E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:03:6a:32:1f:47:ef:46:5a:a0:50:e5:a9:99:
11:46:08:a5:34:ec:ae:bb:8a:ae:39:aa:a2:a7:97:
0f:a9:b2:e5:a2:bc:ae:ef:ce:d8:33:d7:74:92:a9:
a8:b2:06:d2:90:79:f3:42:26:13:37:0d:3d:59:cd:
80:25:02:e2:a7:3f:fc:02:50:a5:11:dc:ac:fd:38:
74:01:60:c2:10:b9:ce:1d:ef:bb:36:1d:9f:eb:e4:
c2:05:40:da:2e:30:5b:4b:8f:55:21:e1:2d:63:7e:
00:26:6e:c0:f7:58:84:b6:e9:33:8c:42:0d:07:d4:
31:bc:ec:a8:56:e0:ef:a9:74:ea:f2:83:11:e6:59:
b8:00:84:2a:5e:db:2d:aa:f8:61:9b:a4:7d:f2:88:
2e:c4:30:1d:c3:21:61:b4:54:7b:92:1c:06:6c:af:
2f:d6:ac:36:5e:b2:90:32:28:4d:7f:44:a5:fb:62:
26:42:89:20:87:3d:c6:ec:ec:72:9a:7b:f5:55:d3:
1a:ea:de:9f:2b:59:73:b3:f0:ba:22:11:af:99:aa:
ee:3b:97:43:e2:42:b6:32:20:48:ab:00:ff:4b:ce:
f3:d0:1c:32:73:95:92:88:6c:e0:45:2c:42:14:11:
0c:e9:e1:af:53:71:fe:e6:44:e4:13:f4:30:15:57:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4A:16:71:B5:57:A5:EC:07:36:06:7D:6B:6F:33:C8:91:5A:D3:0E
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/aUoWcbVXpewHNgZ9a28zyJFa0w4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.245.0-123.49.247.255
Signature Algorithm: sha256WithRSAEncryption
8e:d8:a5:81:15:2a:b1:c1:25:e2:e1:47:0d:a6:46:ca:3e:e8:
d3:5c:ff:24:0f:47:af:40:63:6e:e1:b6:6e:a1:f1:d8:b0:25:
68:b0:cb:de:bd:b1:6d:81:05:85:a1:75:a6:36:77:3a:19:e8:
2e:a8:88:47:40:6f:5f:94:43:e2:91:ea:8b:d4:b1:62:a0:94:
9b:02:45:07:12:49:39:0b:9a:e9:45:d8:ca:80:3a:3c:48:3c:
da:0d:55:62:d7:a3:cc:89:c4:28:bc:b4:da:6a:94:30:ed:9a:
3e:ad:63:ca:00:b9:2e:5a:ae:87:9d:3e:38:73:76:9c:f5:16:
59:64:9a:ca:7b:79:e6:e0:f1:de:30:19:bc:67:70:b9:0b:0f:
28:b9:5d:f8:b2:a1:19:84:18:d5:f3:44:d8:68:4d:89:55:19:
f8:10:38:cb:5d:b4:e6:9f:de:83:90:a7:de:6d:cf:88:89:5b:
1e:dc:7b:c2:23:15:5e:bd:32:78:6d:68:65:6b:f1:de:d2:3b:
ab:40:f5:ee:44:d8:0d:8a:19:26:31:31:41:3d:53:f0:a7:b1:
a9:c1:45:e7:69:86:52:55:d0:52:a9:5f:5d:33:ad:a3:ab:3a:
4c:1d:9c:a9:e5:46:14:82:12:8c:bd:29:c4:a2:a3:c3:43:13:
96:35:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:35 2025 by rpki-client