Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2187/rGX-jlWmT5UXNDCJbyr29sYL8j0.roa
File: rGX-jlWmT5UXNDCJbyr29sYL8j0.roa (raw, json)
Hash identifier: SC8327IqDeIkUpm5PLMYz5uE5ihFgGUKeXxDbb+NB5c=
Subject key identifier: AC:65:FE:8E:55:A6:4F:95:17:34:30:89:6F:2A:F6:F6:C6:0B:F2:3D
Certificate issuer: /CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
Certificate serial: 8F
Authority key identifier: 45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/rGX-jlWmT5UXNDCJbyr29sYL8j0.roa
Signing time: Fri 16 Aug 2024 08:33:51 +0000
ROA not before: Fri 16 Aug 2024 08:33:51 +0000
ROA not after: Sat 19 Jul 2025 08:42:41 +0000
asID: 4812
IP address blocks: 124.14.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
Validity
Not Before: Aug 16 08:33:51 2024 GMT
Not After : Jul 19 08:42:41 2025 GMT
Subject: CN=AC65FE8E55A64F95173430896F2AF6F6C60BF23D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:66:25:65:ca:21:6a:c3:d9:6e:fd:48:a7:
8f:c1:fa:bb:a3:a1:9a:e0:75:01:0d:73:ba:f7:75:
23:95:61:8c:7a:54:ae:41:93:11:f6:25:dd:d4:17:
b5:6f:be:fc:e8:b1:ab:cc:59:4f:eb:0c:d4:8b:13:
7d:fd:f0:49:2a:3b:ae:2c:50:8e:a4:b5:29:6b:8a:
c8:e6:e3:fd:d5:12:61:d2:3f:57:b3:cc:f8:e7:ef:
13:8e:41:83:cd:84:30:e6:91:f4:1d:ce:7d:fe:63:
97:ff:37:2f:6a:42:f2:a1:4b:51:f3:a8:34:7f:79:
ca:85:d5:f0:1d:bb:70:6e:0e:a0:51:9c:44:9d:1b:
ba:06:6c:cf:9e:b6:10:9a:1f:85:e2:47:4e:1c:52:
df:58:ed:a1:c3:f4:8b:5c:cc:10:4e:83:3b:bf:03:
df:d7:df:1c:80:a8:4e:c9:47:a0:da:74:9a:3d:f0:
8a:f1:9c:d7:a2:61:11:cc:39:f5:42:d9:9d:f1:1a:
1d:48:21:89:60:65:21:9f:4d:35:f7:63:ef:36:cc:
49:c7:72:50:75:69:80:3b:a2:d6:37:4f:6f:a7:c3:
a3:56:a6:c7:de:2a:e7:23:ba:12:00:a8:2c:a7:ea:
3e:6f:af:19:18:36:03:d4:9f:4d:56:26:a6:99:ae:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:FE:8E:55:A6:4F:95:17:34:30:89:6F:2A:F6:F6:C6:0B:F2:3D
X509v3 Authority Key Identifier:
keyid:45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/rGX-jlWmT5UXNDCJbyr29sYL8j0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.14.1.0/24
Signature Algorithm: sha256WithRSAEncryption
52:53:7b:8d:bd:cc:86:ba:9c:19:b8:24:e3:3b:6e:80:29:c8:
2d:09:d2:38:86:d0:a8:5f:5a:96:9c:d0:f5:43:83:1a:20:c2:
ec:ad:27:d0:4a:e4:5f:dc:94:6a:cc:d5:f3:b1:4e:42:92:a0:
4c:36:1d:74:f4:ce:08:9d:f1:3d:05:c5:04:5d:fe:67:d2:17:
f3:6f:ed:09:ef:7d:06:ce:e1:f7:3b:d2:3e:e8:4c:67:69:2e:
21:91:e0:df:d9:d6:27:0d:29:3e:4b:c8:3c:dc:27:43:4c:b9:
79:8d:61:c7:d0:4f:ed:eb:7e:63:fd:59:f6:b2:33:65:d2:3a:
04:64:a1:35:e8:53:75:4d:37:3f:f5:98:e7:cd:41:3c:8a:45:
9b:18:50:47:02:31:0a:32:94:bf:2c:17:27:d3:c4:7b:3f:47:
fa:89:96:56:ab:d7:b3:06:9a:9f:6b:b6:23:12:3f:4b:e9:73:
f7:72:06:52:24:01:61:2a:49:16:e2:4f:c9:4c:c2:38:72:f7:
be:d1:1f:52:8b:54:bf:f7:4a:40:46:44:c0:fa:8e:6b:ae:92:
06:9b:2c:79:12:5a:02:7d:d1:8a:6c:f6:67:9b:64:87:4a:0c:
28:5c:eb:a5:93:27:3b:04:60:da:8d:00:3f:37:fc:2a:03:4a:
e0:0b:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:02 2025 by rpki-client