Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/A5JTKb0vZnDvo8UpkVya-cognAk.roa
File: A5JTKb0vZnDvo8UpkVya-cognAk.roa (raw, json)
Hash identifier: CatxJSbWJ7+LP6IwzCOTxH/un/wX5sS84QqKLcPwfp0=
Subject key identifier: 03:92:53:29:BD:2F:66:70:EF:A3:C5:29:91:5C:9A:F9:CA:20:9C:09
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 11ED
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/A5JTKb0vZnDvo8UpkVya-cognAk.roa
Signing time: Thu 14 Nov 2024 08:20:02 +0000
ROA not before: Thu 14 Nov 2024 08:20:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 103.235.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4589 (0x11ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Nov 14 08:20:02 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=03925329BD2F6670EFA3C529915C9AF9CA209C09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:ed:5d:72:78:92:d5:00:fc:bb:8a:95:71:
31:7d:66:da:3e:28:d6:60:cd:de:a7:67:32:2b:68:
c5:30:54:3d:a4:28:79:7e:51:12:f4:38:4c:04:70:
83:05:35:15:82:31:8f:f7:62:60:f7:45:45:00:26:
f4:9c:ec:4e:d9:df:61:4d:66:89:c2:9a:a0:34:67:
5b:5b:50:db:71:88:c8:d8:30:29:1e:5f:59:14:cb:
78:d1:d9:77:cc:87:61:ec:91:01:cd:e4:82:9b:9f:
c1:52:56:8a:e2:05:d0:6d:b8:f6:56:8c:08:df:6e:
f7:fe:9f:42:38:87:22:cb:82:4f:b4:67:5c:7d:e3:
86:1c:68:0b:34:59:7b:87:6a:9c:40:5a:ed:02:88:
e8:68:9c:70:46:87:54:c1:6c:f8:f1:36:23:34:41:
75:e5:bd:52:09:2d:14:d0:4c:1a:ee:9f:be:32:b8:
b8:0c:a3:7e:bd:7c:61:12:a6:fb:d0:e9:fd:45:bd:
df:b5:4f:75:65:c6:ec:99:08:ed:90:2d:e7:0f:2e:
d3:5f:b7:28:cc:72:dc:75:aa:d6:2d:7b:87:27:e6:
c9:e6:40:3d:c4:ee:eb:a3:26:9f:53:b1:b7:1f:c4:
01:d1:50:b6:52:fe:8b:24:72:6b:96:72:87:8e:38:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:53:29:BD:2F:66:70:EF:A3:C5:29:91:5C:9A:F9:CA:20:9C:09
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/A5JTKb0vZnDvo8UpkVya-cognAk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.128.0/22
Signature Algorithm: sha256WithRSAEncryption
79:9d:ce:65:86:cc:34:81:07:b3:ad:48:ea:47:47:d5:7e:92:
a6:29:2e:79:18:e5:56:bf:3b:5e:95:cf:d6:10:56:1e:13:ab:
28:36:76:54:62:70:03:fa:3e:3b:d5:3c:49:e2:de:bd:4d:f8:
b1:55:32:f1:85:a7:db:41:57:ae:0e:33:58:b4:b5:61:c3:73:
c4:23:7b:44:9c:53:2a:b6:c5:2f:0e:86:ab:e1:a2:f8:fe:b8:
51:35:65:8d:4b:01:a4:2f:1c:db:68:bb:46:bf:fc:58:b4:92:
77:8b:41:9f:44:fb:bc:49:54:30:9a:f7:4d:db:a7:69:b5:5d:
a7:0c:75:c3:2a:d6:77:bf:f5:00:95:3c:90:17:2e:1b:e3:51:
5e:26:d6:83:80:25:d1:4a:41:49:7c:17:42:2a:bf:19:11:bb:
b3:58:a4:f6:d3:29:17:d7:d3:98:11:9f:f4:c3:7b:93:94:86:
c2:9c:0f:ef:94:fc:e9:89:54:47:c2:11:65:65:ad:6a:eb:83:
0e:75:c2:36:ce:65:11:c7:bf:94:57:63:4c:b1:50:eb:da:44:
f8:8e:42:72:c7:11:25:6f:fb:a4:6f:8e:cc:e3:fb:7f:b9:28:
47:52:92:f8:3c:b5:85:2d:70:29:7e:5a:0a:71:fd:17:82:fb:
e6:91:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:12 2025 by rpki-client