Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa
File: CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa (raw, json)
Hash identifier: hdqcb05bFxknkcwIdqOcWs1KgdleQYiVPEkSdv5OTow=
Subject key identifier: 08:AA:91:53:20:A4:42:00:DD:0A:F6:F7:F4:52:E5:F2:79:37:1A:9F
Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial: 08
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa
Signing time: Tue 14 Jan 2025 08:18:20 +0000
ROA not before: Tue 14 Jan 2025 08:18:20 +0000
ROA not after: Wed 14 Jan 2026 07:53:29 +0000
asID: 17969
IP address blocks: 125.62.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Validity
Not Before: Jan 14 08:18:20 2025 GMT
Not After : Jan 14 07:53:29 2026 GMT
Subject: CN=08AA915320A44200DD0AF6F7F452E5F279371A9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:e4:80:71:1e:17:b6:9d:b4:c6:8a:68:b3:
d5:7a:16:1e:90:79:a4:56:ea:24:c6:85:21:d9:99:
e7:8f:52:77:1f:51:49:09:e5:97:74:32:22:5e:bc:
fb:14:c1:64:61:18:18:ad:55:3d:e6:c3:1e:8a:ba:
e2:7e:45:8b:9b:8d:ef:a2:48:5a:2e:08:a4:28:2d:
02:1e:35:31:2b:7b:17:e2:6d:be:b0:f8:2d:1a:99:
52:d6:c5:bb:85:ac:4e:5f:9d:e4:ba:f6:ca:06:f8:
14:d4:a4:81:c0:3f:1d:cf:ee:88:36:3b:2b:26:96:
73:2d:a0:98:58:40:eb:d7:20:bb:de:65:2d:32:85:
9d:08:af:31:0a:46:0c:44:97:4b:cd:29:f7:b0:92:
88:80:5c:3c:0a:71:57:09:a7:3c:00:83:b4:bc:cf:
9e:18:23:b0:fd:d0:89:5b:f2:94:b9:b6:11:15:fd:
9c:f9:e0:16:a3:95:cf:25:01:ba:c1:e9:d2:aa:8a:
ab:cc:53:db:57:44:fc:95:53:41:aa:57:ef:03:0b:
74:21:0d:b3:ca:d6:be:6f:4b:c5:ba:7e:08:d8:8e:
3f:8b:3c:56:84:0a:e0:45:6a:5b:23:e9:08:55:6c:
bb:77:19:01:14:a6:8a:13:7a:f0:29:b0:55:2f:85:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AA:91:53:20:A4:42:00:DD:0A:F6:F7:F4:52:E5:F2:79:37:1A:9F
X509v3 Authority Key Identifier:
keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/CKqRUyCkQgDdCvb39FLl8nk3Gp8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.62.0.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:a9:a0:4d:e1:72:e2:00:6d:95:94:c9:8a:c1:f3:fc:e3:2e:
7a:34:2a:f0:d5:4e:08:27:ee:7e:87:c6:9b:34:7f:bd:4d:1d:
de:d9:54:49:e6:3c:03:9c:2c:2a:e3:22:d2:da:c9:4e:ec:f0:
dd:e7:1c:5d:b3:8c:20:96:34:f5:e2:aa:ca:9a:17:2b:37:df:
be:62:95:92:19:3e:c9:6d:bd:64:d0:b3:c7:0e:0f:ec:04:da:
47:d9:a9:e7:9c:51:1a:98:18:18:b2:4d:db:ce:a2:65:24:7e:
e1:ad:c6:d0:45:e4:df:89:1a:c7:99:6b:e6:73:07:b1:88:c1:
f2:62:ad:96:27:8e:1b:23:f6:7c:ed:6e:1c:9f:8e:1a:9f:50:
44:37:44:be:5a:b3:b2:e3:82:19:69:fb:98:be:36:d6:ef:86:
cb:1a:8c:5c:be:a8:60:37:88:19:90:7b:5b:8f:f7:3b:5e:4e:
e1:37:b9:fe:6f:b4:e2:48:ee:b4:ab:92:48:43:f8:b1:ae:78:
20:d7:62:80:f8:66:04:e7:40:94:a6:05:1b:85:00:a8:28:98:
f9:00:a9:f2:87:8a:2b:f5:52:25:a5:ed:f0:70:fd:1f:fd:7c:
71:e8:e4:6c:4b:11:1a:97:04:fd:8d:ea:66:df:39:82:04:e6:
65:4e:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:52 2025 by rpki-client