Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/IjOalNpdPDs3gxhI0D5OaH51sQA.roa
File: IjOalNpdPDs3gxhI0D5OaH51sQA.roa (raw, json)
Hash identifier: vyd8V/94c2HTG/sEYhJnsIiS/a6VWjaXDmtaOkYIrcg=
Subject key identifier: 22:33:9A:94:DA:5D:3C:3B:37:83:18:48:D0:3E:4E:68:7E:75:B1:00
Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Certificate serial: 018F
Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/IjOalNpdPDs3gxhI0D5OaH51sQA.roa
Signing time: Tue 08 Oct 2024 10:02:33 +0000
ROA not before: Tue 08 Oct 2024 10:02:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63631
IP address blocks: 119.161.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Validity
Not Before: Oct 8 10:02:33 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=22339A94DA5D3C3B37831848D03E4E687E75B100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:10:3b:da:64:68:e9:d7:3a:20:6d:12:ec:
de:bd:59:98:49:7e:bf:6e:3a:9c:57:81:9a:50:ef:
22:c2:f1:c3:49:72:14:85:97:87:f4:7a:4d:7a:9a:
e9:64:67:2e:b6:ce:3c:00:a8:10:a9:bf:e6:83:34:
a7:37:b5:73:57:2b:7d:01:94:3a:b6:8e:db:85:b6:
f2:5c:4c:a7:8a:5e:6d:74:5f:63:1b:38:47:54:fe:
9b:31:db:35:35:54:f7:8e:d3:92:59:34:61:74:a2:
3b:ff:26:4e:6e:90:c9:a1:f6:2c:80:44:26:19:ad:
fc:28:fd:a8:34:4c:62:74:56:65:f8:65:33:7e:6e:
f7:2a:45:7d:35:4f:2f:dc:8c:25:86:9d:66:50:39:
31:af:b8:a5:fd:3f:96:ce:e3:8c:dd:ca:20:4d:63:
7d:be:d3:4a:5c:21:83:34:d3:9d:59:80:56:ad:d9:
3d:8e:43:a9:67:ea:38:01:b4:28:b0:03:34:1d:1b:
13:ff:1f:1f:d1:e7:0d:09:bb:fd:f5:88:39:50:a3:
d9:db:90:86:fe:68:6d:2d:51:2e:fb:89:b4:03:0c:
36:5e:af:5a:68:3d:58:62:a5:75:b6:48:62:74:e5:
ea:84:9e:d2:ee:b7:78:2e:2b:10:56:3a:a9:84:70:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:9A:94:DA:5D:3C:3B:37:83:18:48:D0:3E:4E:68:7E:75:B1:00
X509v3 Authority Key Identifier:
keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/IjOalNpdPDs3gxhI0D5OaH51sQA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.161.160.0/21
Signature Algorithm: sha256WithRSAEncryption
71:6d:b2:c9:ef:b7:65:e2:6d:8c:fe:84:30:d7:ba:bc:03:54:
d8:b3:6c:53:da:00:32:b1:cc:78:c2:54:90:2a:92:c7:de:28:
98:fc:97:0e:89:9e:5a:59:8c:e1:d6:e7:b7:63:04:a6:82:7b:
c3:54:53:e8:3e:c0:65:f8:d9:fb:49:bb:40:39:5a:c0:af:5e:
b9:f2:72:ff:42:86:74:3a:88:14:51:91:6e:97:a5:4d:a4:01:
d0:86:90:6b:1c:5e:2f:1f:4a:a9:8e:a0:d3:60:ca:a2:15:f8:
13:9b:f7:6b:e0:6a:ce:65:bf:8c:5d:59:6d:a8:8d:1a:be:e9:
43:19:e9:8a:a5:4a:7d:9e:b8:64:24:67:11:f9:6e:a9:b3:6f:
a2:08:05:04:f8:d8:8b:a5:81:b0:b5:69:ff:d6:18:3c:de:28:
d8:fb:fa:ca:08:bf:17:d6:22:4c:5b:3f:16:4b:73:2e:57:0b:
11:87:25:af:69:4c:86:d5:44:ca:f8:54:9b:c9:04:ce:bf:f5:
c8:b9:ef:cb:d1:1b:02:cc:76:51:f7:0f:ea:1d:c3:04:56:ff:
11:04:24:8e:e0:f4:a3:7d:9f:88:5b:61:69:5a:40:9f:bc:ba:
15:1c:fa:89:ff:68:2f:c3:7e:69:0a:97:cd:27:4f:0a:2d:f2:
4c:8b:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:22:31 2025 by rpki-client