Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/a5VjISKzB5OHVPbIcpAmzw2vVVY.roa
File: a5VjISKzB5OHVPbIcpAmzw2vVVY.roa (raw, json)
Hash identifier: IbL8QfOTW3H+VPdlptYPq13rZd+vhPVLsoo3KN+W6PE=
Subject key identifier: 6B:95:63:21:22:B3:07:93:87:54:F6:C8:72:90:26:CF:0D:AF:55:56
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 1BF3
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/a5VjISKzB5OHVPbIcpAmzw2vVVY.roa
Signing time: Fri 17 Jan 2025 01:27:18 +0000
ROA not before: Fri 17 Jan 2025 01:27:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 23650
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7155 (0x1bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jan 17 01:27:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6B95632122B307938754F6C8729026CF0DAF5556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:9e:49:4e:fe:70:70:b9:98:29:7b:50:7b:
ec:57:be:d8:07:61:f6:55:f4:f4:5d:15:2b:dd:be:
56:42:8d:38:ee:01:5c:aa:6e:fe:20:6b:96:cd:49:
ec:25:01:68:34:b8:5b:6f:5b:4a:55:2e:ca:b9:93:
4e:82:0f:50:8f:eb:54:88:0b:23:b0:3b:fb:35:a8:
ff:df:d1:4d:cb:bb:d3:ef:65:6b:b9:e0:39:ed:4a:
df:7b:73:af:8a:0f:c3:98:42:aa:95:1e:f4:53:44:
fc:18:8d:dc:e4:4d:11:4e:93:b7:cb:5a:d3:12:9a:
9f:2b:69:6d:74:5a:2d:af:0e:de:c5:38:4a:e5:01:
b4:83:dc:ee:3b:ff:bb:78:99:e6:b2:2c:39:16:dc:
a3:8c:77:0f:28:12:91:24:2b:91:85:f8:5c:53:ef:
b8:2d:77:7c:35:44:d2:26:cc:3a:fb:00:0a:ec:46:
0a:a7:fb:2f:57:b1:46:b8:8c:ab:cf:94:7e:20:9d:
64:dd:70:8e:52:69:d2:36:15:bc:66:3b:3e:a0:e1:
13:5b:fc:67:57:83:ee:c8:53:25:e9:d5:e1:f1:5f:
ce:9d:48:27:32:90:35:ee:48:0e:4e:11:08:e9:47:
8b:02:40:9d:32:fb:68:12:c5:c6:a4:44:47:33:cd:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:63:21:22:B3:07:93:87:54:F6:C8:72:90:26:CF:0D:AF:55:56
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/a5VjISKzB5OHVPbIcpAmzw2vVVY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9a:0e:42:28:3c:c7:8c:70:97:c5:e9:a4:12:8f:6a:1b:8f:f4:
03:51:4d:1a:9b:4f:83:d8:4d:d5:5c:7a:f7:05:9a:b7:55:71:
c1:d3:39:aa:31:96:60:8e:82:ec:4b:64:0a:77:a4:25:7c:c2:
db:52:a7:0f:f3:7e:c9:4f:b9:f1:e0:06:a4:4a:44:67:5b:4f:
1d:0f:6c:28:9a:4c:1b:0e:da:8c:64:fd:0b:b4:73:a3:c3:f0:
84:56:99:13:58:f1:4b:48:01:69:80:77:85:55:7b:d1:7d:f0:
48:bd:33:64:f6:21:2e:2c:50:7e:28:95:22:d6:a4:ce:5b:ad:
50:26:62:fc:39:7e:84:50:58:7b:27:87:c9:33:fb:04:e1:0e:
35:2e:88:eb:c1:ac:61:83:dc:82:c1:db:63:54:fa:7f:7a:95:
eb:8e:09:f9:8e:ad:40:a1:3a:ce:51:71:25:f7:82:3a:f8:b3:
77:7a:80:e8:b3:37:65:0a:a9:92:d3:37:b3:63:fe:35:96:fa:
4f:0a:5f:ba:f3:08:38:b5:37:b4:fa:64:fe:ba:f1:c9:dc:64:
7f:21:72:72:8e:b9:8a:20:1b:7d:0d:80:22:d6:2f:ab:3a:0b:
4d:57:89:1f:69:ea:2c:dd:4b:5e:12:27:b2:60:17:bb:78:3d:
36:bb:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:39 2025 by rpki-client