Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/S08gk3iwLLEpMcj1QO7K4KhStgU.roa
File: S08gk3iwLLEpMcj1QO7K4KhStgU.roa (raw, json)
Hash identifier: yOf9iY1WMYzrbZrzaW1zGaZqbmiHAxIWjmbN/VW8KO8=
Subject key identifier: 4B:4F:20:93:78:B0:2C:B1:29:31:C8:F5:40:EE:CA:E0:A8:52:B6:05
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 1BF9
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/S08gk3iwLLEpMcj1QO7K4KhStgU.roa
Signing time: Fri 17 Jan 2025 01:27:20 +0000
ROA not before: Fri 17 Jan 2025 01:27:20 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138950
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7161 (0x1bf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jan 17 01:27:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4B4F209378B02CB12931C8F540EECAE0A852B605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:67:0a:b8:67:11:92:4f:49:f1:67:6e:45:
32:eb:c5:54:28:85:94:f9:8f:d2:a1:ca:2f:74:47:
7a:64:cb:3d:a2:e6:59:b1:3d:42:5e:80:80:ec:72:
74:ec:a7:3c:4d:92:08:6f:f2:d7:80:f7:68:c6:95:
5f:57:25:84:5e:72:5b:8c:f4:0b:6e:20:9b:a6:ab:
cd:99:96:5a:36:eb:9a:95:86:53:cb:06:79:fa:35:
c4:c7:6e:c6:85:ca:8c:79:63:d7:77:0a:26:8c:db:
f9:c0:cb:28:95:1b:31:9e:41:01:b7:f1:9b:25:a3:
7c:8d:7b:59:47:31:4c:a7:3a:62:8d:74:8f:fc:f3:
c0:71:93:37:3c:c6:92:c1:e2:66:bb:fd:cb:7a:23:
6e:ef:a2:7b:76:8d:db:a7:c5:ec:24:40:54:ea:fe:
41:65:d0:75:20:c1:92:d0:1a:22:e9:89:6c:5d:94:
fb:a1:d0:a9:b0:cc:99:2c:40:62:b6:c0:b5:6e:7b:
6a:29:46:14:3e:be:83:14:77:3a:e4:9f:d9:8c:dd:
76:fa:d6:16:01:b0:a6:32:0f:97:70:20:82:90:be:
fc:5a:2b:1c:98:6c:f3:9b:95:04:7a:af:70:18:a6:
83:8c:1b:57:53:a5:c9:19:01:57:dd:7c:6d:a6:5f:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:20:93:78:B0:2C:B1:29:31:C8:F5:40:EE:CA:E0:A8:52:B6:05
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/S08gk3iwLLEpMcj1QO7K4KhStgU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2c:87:a9:2e:0e:10:96:00:71:53:f3:dc:d2:4a:42:11:11:31:
b8:31:d6:ba:0a:8b:af:ed:cd:20:fb:52:45:a8:75:de:49:38:
d4:0a:9d:65:24:dc:cc:71:de:75:50:f0:c2:25:a6:3c:d4:5c:
a8:ab:07:35:87:d5:0f:8b:a5:62:8b:8f:ee:84:0e:24:1d:42:
7c:40:b2:3b:1d:e8:41:f1:57:63:e3:2f:c7:0d:b7:f3:4a:3f:
5f:20:33:cb:36:76:aa:9e:50:f5:ab:be:38:35:32:92:27:d9:
47:33:4e:19:c4:51:5e:63:ef:6e:c0:51:8b:02:48:01:d3:a4:
f1:54:2c:bc:3b:3b:2b:d2:04:c1:b3:d4:12:4e:2e:40:ca:ad:
0f:16:25:a2:72:4e:13:91:6f:5e:36:72:a0:24:4f:19:b6:96:
53:73:4f:8c:9d:6b:84:2d:85:ab:3d:9c:a4:56:3e:27:23:7d:
cb:28:d0:d8:c9:3c:32:81:66:d4:ca:8b:dc:5b:e1:ac:3a:3b:
6e:90:e5:64:76:ba:fd:07:30:a2:78:a8:ea:fd:7d:20:06:d8:
c4:8f:53:7d:c9:f0:f4:78:63:97:80:ea:43:6e:c2:c1:a3:d8:
3c:1e:6f:0b:1b:b5:55:27:92:0b:a7:b5:9b:17:4e:53:ba:da:
16:fc:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:44:16 2025 by rpki-client