Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/eZah-AngLzb8qFPY5nps7k990bY.roa
File: eZah-AngLzb8qFPY5nps7k990bY.roa (raw, json)
Hash identifier: ZrAWhkudRJM4vRG6Jn9b9j7Vh7eTCG04BPZTFrJzppk=
Subject key identifier: 79:96:A1:F8:09:E0:2F:36:FC:A8:53:D8:E6:7A:6C:EE:4F:7D:D1:B6
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1D4F
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/eZah-AngLzb8qFPY5nps7k990bY.roa
Signing time: Wed 26 Mar 2025 02:11:18 +0000
ROA not before: Wed 26 Mar 2025 02:11:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63641
IP address blocks: 123.49.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7503 (0x1d4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Mar 26 02:11:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7996A1F809E02F36FCA853D8E67A6CEE4F7DD1B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:d6:f2:e4:da:40:7d:d9:f7:24:47:4e:dc:
5e:eb:84:3d:4f:d9:46:b0:5b:a2:be:35:b4:b5:a8:
fa:52:c6:90:e2:eb:be:8a:14:a9:90:20:e2:d9:12:
48:df:97:b6:cb:d3:1f:96:9c:df:6d:3c:ea:ad:e3:
fb:25:75:bb:5b:64:79:10:10:24:12:c8:4f:a7:44:
ed:96:df:a6:d5:9d:87:c0:8c:bc:99:b0:9b:8a:00:
ee:e0:8d:bd:ab:24:5a:a6:32:16:c6:4a:28:5f:d8:
31:84:24:46:db:1c:3d:8f:f3:ee:c8:52:ff:43:81:
fd:9d:a0:c3:be:86:ca:14:c7:18:c9:8c:b6:7a:54:
42:d5:e4:6b:04:2a:7a:03:01:53:c4:b3:17:72:5f:
11:36:07:35:b5:04:80:b6:2b:f3:f4:62:f3:fb:bb:
5f:04:da:ca:e2:21:72:2d:92:58:94:e8:42:2c:b7:
7d:e7:ae:b2:b7:24:62:6c:35:98:5c:6e:20:2d:ea:
2d:1c:d8:ae:99:73:f8:96:62:dd:05:db:f7:62:58:
ed:3e:b6:02:26:e3:23:a6:59:e3:d6:b7:fc:be:99:
ea:3f:dc:9b:e7:47:8d:cc:5b:eb:a0:79:0c:4b:db:
03:af:fb:f6:46:8b:17:f9:3a:cc:7c:23:3d:3b:0b:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:A1:F8:09:E0:2F:36:FC:A8:53:D8:E6:7A:6C:EE:4F:7D:D1:B6
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/eZah-AngLzb8qFPY5nps7k990bY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e1:c2:5c:31:4d:0c:c4:09:81:e7:c7:d8:f7:a0:e4:4e:79:
04:ab:5e:f0:91:d6:0a:4d:92:86:d3:a4:ed:33:06:5f:73:85:
82:8d:71:34:5b:0e:9d:e2:b3:8f:3b:11:fd:60:54:db:13:aa:
97:db:fb:12:38:e8:43:55:90:0b:24:6a:79:52:91:2b:3a:12:
bf:48:3a:d3:ea:08:17:ee:70:b0:d6:4b:67:2f:91:c8:4c:16:
03:a2:4d:71:83:a7:46:b7:e7:db:c7:93:81:ff:24:9e:81:98:
3d:87:93:c4:d1:07:47:ee:8a:cc:50:c0:69:5b:34:5d:c0:de:
85:e5:3f:55:61:9b:8c:fb:9f:60:99:fc:8e:61:c7:84:76:b4:
47:bf:ee:47:72:2e:b1:f3:fb:73:74:41:85:0d:8c:79:6f:77:
02:ee:f2:3d:1c:20:89:3e:4d:59:a4:4d:8d:ea:0e:c6:ef:8f:
d7:6a:e6:eb:b0:1b:49:9a:81:b0:6a:8c:45:cc:b4:da:0a:89:
2b:a0:36:ac:39:e4:6c:7e:c3:09:e0:b0:9d:1a:dc:5b:c0:b0:
89:62:1a:c3:d7:23:b2:3c:7f:29:e2:39:b5:3b:19:c4:01:6d:
58:8e:c6:08:87:9a:e7:94:35:55:71:37:30:b2:c2:6c:9a:49:
27:5d:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:56 2025 by rpki-client