Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/cREs8hmh_CmOnkUd4fU9j_ntn0w.roa
File: cREs8hmh_CmOnkUd4fU9j_ntn0w.roa (raw, json)
Hash identifier: CP7BSCAsooYTWgzemNYrDx/XFHt9xqP+ChJ75EbH+cE=
Subject key identifier: 71:11:2C:F2:19:A1:FC:29:8E:9E:45:1D:E1:F5:3D:8F:F9:ED:9F:4C
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1D4C
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/cREs8hmh_CmOnkUd4fU9j_ntn0w.roa
Signing time: Wed 26 Mar 2025 02:11:17 +0000
ROA not before: Wed 26 Mar 2025 02:11:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4515
IP address blocks: 123.49.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7500 (0x1d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Mar 26 02:11:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=71112CF219A1FC298E9E451DE1F53D8FF9ED9F4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:aa:60:1f:f2:08:01:1e:09:43:50:cf:3f:
dd:f6:1e:b2:f3:45:47:36:f3:58:30:5b:87:44:d2:
6f:99:c2:af:1d:73:1c:18:5f:c7:d3:9b:6d:a9:8d:
99:59:f7:43:ac:04:3d:82:32:fc:49:af:e3:53:12:
e1:cb:86:9d:c6:8e:ac:91:a7:5c:8f:27:2b:52:a1:
15:3f:ab:91:17:50:10:b7:6f:02:b6:23:bd:c3:bd:
8d:fd:e1:5c:5b:a2:db:94:85:16:d2:81:95:f2:9f:
3c:e1:dd:7c:94:f0:60:6e:2f:e2:28:28:fe:f7:d3:
57:15:c2:56:4b:20:10:e7:df:0a:60:32:4b:18:3e:
fd:9c:32:d4:0e:80:ae:e9:8b:f1:ca:7b:0e:46:5c:
75:b5:5a:57:19:a7:9e:10:56:2b:40:33:f8:13:96:
fc:f8:8b:9e:37:52:69:eb:3e:fa:c5:4a:09:8a:c4:
04:3c:b2:02:49:bf:11:4e:f4:f7:c0:88:f3:5d:f3:
58:b6:60:31:b8:d1:86:4d:87:50:52:0a:f9:ed:56:
7d:1a:eb:c3:51:cf:5b:b6:42:71:4d:5f:9a:38:27:
16:21:0f:9e:d5:e5:ff:39:a4:bd:3c:76:4d:99:a0:
3f:6e:88:ed:00:62:19:e6:6b:6f:2c:75:68:b2:66:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:11:2C:F2:19:A1:FC:29:8E:9E:45:1D:E1:F5:3D:8F:F9:ED:9F:4C
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/cREs8hmh_CmOnkUd4fU9j_ntn0w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7d:7d:0c:fb:73:de:18:5e:97:00:90:c3:ad:fe:1f:07:fe:
94:8d:45:0b:ec:ba:c8:9a:65:b6:9a:0b:61:4d:ab:43:d1:30:
f4:1a:91:f1:9d:36:0c:08:bf:37:8b:0a:ca:9e:20:d0:a1:ab:
8a:f7:b2:a3:fd:e0:5a:0f:7e:3c:ae:b8:fa:72:d0:61:3a:55:
62:92:e2:fa:2c:29:40:d6:e5:24:ee:d3:ae:04:7f:7c:56:52:
22:06:d7:06:b4:81:fa:2a:ad:01:9b:73:de:8b:81:15:a6:af:
83:7e:eb:e0:db:8f:85:2a:ab:d7:e8:47:fe:48:9f:f6:2f:bc:
c3:5f:43:63:04:bb:8d:87:ee:6a:4e:32:1d:47:b7:1d:af:ad:
ef:e4:9d:37:91:01:2a:5e:c3:24:e0:5d:dc:09:16:25:cf:6d:
b9:b0:9f:ae:0e:0f:7b:bc:3b:3e:78:52:c8:0b:61:1f:e9:6a:
9b:bb:0e:d4:aa:80:f8:bb:52:b2:5f:7a:0c:53:54:f5:be:03:
5e:f3:94:3d:6e:a8:77:df:62:0f:3b:ca:81:25:36:14:93:a0:
7a:e5:82:8a:8b:2d:d7:0e:45:59:c2:c7:4a:17:e9:64:c8:2c:
e2:a6:29:49:5d:96:1c:20:7c:d2:89:dc:3b:7c:1a:73:a6:33:
aa:73:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:35 2025 by rpki-client