Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/oCfS0hIaiNsPZD9_Byqu1CoJ8VI.roa
File: oCfS0hIaiNsPZD9_Byqu1CoJ8VI.roa (raw, json)
Hash identifier: Hy+566HgUdo7tAmvKq5D06v1xyoGXDvCRugVB0yhFmw=
Subject key identifier: A0:27:D2:D2:12:1A:88:DB:0F:64:3F:7F:07:2A:AE:D4:2A:09:F1:52
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1D54
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/oCfS0hIaiNsPZD9_Byqu1CoJ8VI.roa
Signing time: Wed 26 Mar 2025 02:11:19 +0000
ROA not before: Wed 26 Mar 2025 02:11:19 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63641
IP address blocks: 123.49.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7508 (0x1d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Mar 26 02:11:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A027D2D2121A88DB0F643F7F072AAED42A09F152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:4b:24:0b:d1:6d:72:7c:a5:a6:a0:56:b4:
02:ba:81:82:7c:f0:4d:82:74:d6:03:b6:2b:d2:12:
47:5b:be:c7:b5:70:29:f2:4d:19:5d:cd:98:03:3c:
9d:7e:22:66:04:86:4a:c8:a8:34:f5:08:5b:29:ea:
bf:4b:09:69:c7:a0:85:4f:d3:5b:4d:21:bd:10:93:
7b:00:0c:d1:eb:a3:53:c2:8c:32:81:62:33:13:3d:
d3:13:b6:20:74:4d:9b:98:d2:c7:01:75:8b:1f:bc:
da:c9:cc:97:e7:bd:60:83:65:87:72:70:84:3a:9c:
fb:8c:77:1d:02:b7:a0:61:d1:e1:86:65:ff:a8:3d:
9b:35:12:a6:33:a6:06:f4:76:bd:ec:eb:1e:16:9f:
82:54:9f:29:1b:00:4a:e3:da:ef:aa:ad:4e:d9:f0:
4a:cd:37:f8:97:7d:ab:e3:fd:65:11:80:de:f3:90:
04:ca:fd:64:67:be:62:3c:12:f6:56:d3:a8:f0:03:
0f:c8:5c:b2:ef:77:d5:64:83:48:98:14:29:34:e1:
71:78:26:83:8d:bc:cb:f0:77:9a:f3:7e:86:68:3f:
62:fe:79:ec:43:3c:6c:12:d0:63:20:19:d8:e0:da:
4c:fc:16:3a:42:11:4f:f7:77:e5:c1:9b:27:19:52:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:D2:D2:12:1A:88:DB:0F:64:3F:7F:07:2A:AE:D4:2A:09:F1:52
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/oCfS0hIaiNsPZD9_Byqu1CoJ8VI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2f:f9:9f:6b:28:f0:0b:54:b6:5f:dd:70:9a:94:7b:57:61:
9e:14:4a:f9:aa:dd:1b:a1:1d:a7:f1:94:5f:4e:59:c4:70:0c:
2e:3d:8f:74:4d:3f:1b:d3:ab:43:8b:d6:6e:5f:4e:46:89:fb:
1c:ec:f2:0d:ad:3d:3d:6c:68:a4:0e:95:81:c9:61:6d:97:5b:
97:78:40:12:ef:28:fc:23:d8:17:70:97:ea:0d:fd:0f:b4:7a:
bd:02:ee:ba:79:64:7f:d1:27:2b:54:c7:34:aa:58:06:a1:57:
26:03:c5:37:eb:1c:ee:92:c3:ae:10:24:fa:3a:ab:91:30:ab:
25:e4:97:59:57:74:cf:00:ae:1b:60:99:54:c3:c8:8f:6e:bc:
40:fa:04:93:08:80:2c:5f:04:9c:e2:b4:ed:c1:22:dd:bd:8f:
58:f8:c9:8a:5a:99:5c:4e:86:b7:21:3e:9b:09:d7:b9:c8:57:
f5:ff:ae:6a:3b:c1:f7:2d:fc:d5:c8:c3:61:08:1f:f9:9e:23:
92:25:36:e3:6d:97:56:ff:16:5a:98:d4:de:86:f5:e1:9b:3b:
4f:17:90:ea:54:10:fa:26:74:96:2b:57:57:71:01:a2:9a:81:
9e:2b:8c:0f:4c:87:db:5c:a3:2e:d0:e5:86:26:c4:79:5e:3b:
bb:bb:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:13 2025 by rpki-client