Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/w3pt5ET1tvSm7d0RqvtpQaSbUSg.roa
File: w3pt5ET1tvSm7d0RqvtpQaSbUSg.roa (raw, json)
Hash identifier: TdLS3FpjQ1UPLqz5X5rwpVpfmm+7VwjlrlPBgwGcC0E=
Subject key identifier: C3:7A:6D:E4:44:F5:B6:F4:A6:ED:DD:11:AA:FB:69:41:A4:9B:51:28
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1D56
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/w3pt5ET1tvSm7d0RqvtpQaSbUSg.roa
Signing time: Wed 26 Mar 2025 02:12:27 +0000
ROA not before: Wed 26 Mar 2025 02:12:27 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63641
IP address blocks: 123.49.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7510 (0x1d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Mar 26 02:12:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C37A6DE444F5B6F4A6EDDD11AAFB6941A49B5128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:6e:47:83:50:9c:b3:7b:1e:20:0a:15:10:
56:b9:55:4f:d4:fe:10:e0:cd:cf:a3:83:1b:ca:25:
43:ad:1b:fb:86:cb:ed:79:b3:6d:63:34:9c:b6:40:
04:cf:f0:73:bb:94:03:e8:53:01:6a:12:5b:16:b4:
39:93:09:fb:de:c7:d6:23:11:9c:91:c7:60:4b:87:
db:3c:ff:9d:2a:63:37:76:72:da:e2:5a:22:86:53:
21:60:53:03:05:9f:b4:fe:79:43:94:b9:41:69:bf:
7e:36:4f:ef:63:33:6f:93:4d:ba:8f:10:d3:93:b2:
bc:11:f2:20:80:67:cc:81:26:06:e6:5e:d8:ab:87:
ac:7d:ea:ed:94:42:38:d0:c4:80:73:79:ff:26:a4:
b4:81:f6:08:95:2c:6f:e7:7e:8a:d3:52:c4:b6:0c:
aa:e8:5c:dc:27:da:e9:c6:2e:87:45:01:44:37:03:
62:bb:db:2d:93:01:28:94:3e:df:c1:59:23:5d:71:
d4:17:87:50:86:bb:79:41:a9:4b:0a:ca:f8:6e:41:
dc:56:d9:3e:a6:86:70:b1:9c:90:e7:47:12:a3:e0:
b1:ae:40:66:1f:35:dc:b6:7a:5b:de:00:6d:7f:3f:
57:32:ca:73:8a:e9:e9:39:01:47:aa:8a:8c:0a:51:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:6D:E4:44:F5:B6:F4:A6:ED:DD:11:AA:FB:69:41:A4:9B:51:28
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/w3pt5ET1tvSm7d0RqvtpQaSbUSg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.241.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a3:f5:e3:a8:a8:a4:f5:0b:f3:1f:17:a1:07:a3:56:87:28:
76:d8:53:7c:8e:0d:40:79:2e:ac:7d:27:e0:0c:1a:df:ef:59:
0e:cd:5b:4c:b1:c9:6e:3e:e7:81:49:6e:33:d8:45:71:0b:73:
93:0b:f7:f7:71:7d:95:23:d4:43:49:3e:e7:13:14:ea:9e:d6:
45:a6:8a:9c:1c:40:8d:63:c6:d4:24:13:6b:c9:51:3c:ca:5a:
3a:17:7f:72:1a:c5:3b:ab:75:9e:bc:34:f1:6c:bd:85:20:19:
9e:3d:64:92:1f:85:4f:c7:d6:de:59:23:70:19:2c:1c:ba:a4:
3f:a8:82:d4:0f:fa:b8:fe:73:61:31:0d:11:93:cf:65:2e:f1:
e6:24:e2:93:c7:23:2f:0f:9e:04:e0:05:fd:9c:17:ab:0a:67:
87:e2:a8:47:b3:4a:dd:13:57:b3:9f:f2:b5:08:ab:a9:e1:a2:
54:1b:5b:c0:6f:6e:80:dd:fb:9b:a3:98:b0:98:9f:7f:26:98:
82:f1:98:77:9e:b7:11:e2:1a:f3:67:0d:9b:85:78:3a:f6:2c:
96:ba:91:2a:37:dc:d9:ec:25:3e:3a:da:e2:2d:61:8c:2c:67:
8c:2c:4f:9c:1b:9d:5a:07:ba:0f:ad:9c:f0:b1:8a:0e:59:01:
b1:2c:06:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:38 2025 by rpki-client