Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/gjWiTT_VQ2bn68fGawe6oIO2_S0.roa
File: gjWiTT_VQ2bn68fGawe6oIO2_S0.roa (raw, json)
Hash identifier: BkWsHeV1KDkEmsUKsFm/vFyb5VqZw0273JHoxzP0Nzs=
Subject key identifier: 82:35:A2:4D:3F:D5:43:66:E7:EB:C7:C6:6B:07:BA:A0:83:B6:FD:2D
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 15ED
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/gjWiTT_VQ2bn68fGawe6oIO2_S0.roa
Signing time: Wed 13 Mar 2024 01:22:28 +0000
ROA not before: Wed 13 Mar 2024 01:22:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 18257
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5613 (0x15ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Mar 13 01:22:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8235A24D3FD54366E7EBC7C66B07BAA083B6FD2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:f3:c9:14:97:77:2b:ed:81:cb:d4:02:c2:
e2:93:12:dc:c1:76:1b:a5:84:fe:85:b6:28:3d:4e:
83:44:d0:55:50:c6:09:9e:b0:9a:b6:15:8c:aa:fe:
50:d1:dc:db:c1:aa:b0:d2:f2:40:a6:4c:ed:6d:3d:
c9:86:4f:38:e3:e7:7e:f8:ac:58:3a:0e:b8:04:9e:
04:2d:f1:d6:20:b9:6f:ba:f5:97:10:1e:f0:4d:22:
b3:14:be:36:d2:de:a4:42:3f:ca:e6:5d:64:cc:26:
ba:f5:a1:0c:0e:84:3b:12:5a:d2:83:4f:9f:29:f6:
b9:f8:de:94:6f:b6:9b:73:84:2d:f7:55:86:1f:67:
2c:bb:e3:42:7a:05:08:ac:69:45:4b:3e:14:ea:b2:
95:5a:43:15:b8:ce:fc:bb:7a:1f:e7:f6:f2:c0:d2:
ca:14:bf:7a:1d:09:23:db:b9:a3:31:e8:95:b3:99:
5c:6d:42:79:fb:3e:44:e3:f8:49:65:df:37:9f:97:
d3:c7:d4:fa:1d:fd:a8:18:1f:54:7a:4d:8d:2a:1e:
d6:4a:97:6f:b4:fd:24:c3:1d:95:60:1d:d1:8e:d2:
4c:0d:c4:ef:29:e0:9c:29:c3:88:1f:47:7d:f4:f3:
2b:b8:71:4c:4f:a9:5d:6e:78:10:65:5f:98:f2:b1:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:35:A2:4D:3F:D5:43:66:E7:EB:C7:C6:6B:07:BA:A0:83:B6:FD:2D
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/gjWiTT_VQ2bn68fGawe6oIO2_S0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ab:74:f2:b3:9d:5f:da:66:95:ba:84:fb:2a:36:7e:9e:74:29:
6d:90:45:c6:05:d5:5e:5e:db:6f:81:af:09:eb:1f:1e:7f:f1:
0e:74:91:42:37:59:16:cf:32:45:d0:04:9e:53:6d:64:f7:c6:
3b:c8:49:85:ad:bc:1c:ea:9e:6f:0d:e2:45:69:89:23:2d:7d:
ca:3d:f6:b2:03:71:bd:9e:62:d8:b9:07:d5:98:24:68:d3:bb:
26:33:39:95:40:35:af:56:16:d4:9c:f6:f6:02:30:2f:80:13:
0d:77:fe:18:b7:14:79:58:d9:d8:c6:c8:6a:8b:60:e3:f4:0c:
39:63:e4:7c:4f:47:bf:6c:1c:07:a2:08:63:44:27:44:73:1a:
e3:d5:5a:6e:9f:90:42:39:de:42:24:90:0b:a8:be:db:0c:09:
08:b5:c4:6b:20:d0:2e:0f:ec:66:29:f5:86:e2:c0:00:7e:b9:
82:ce:e6:a1:74:a1:60:af:1a:dd:fa:7a:ee:f2:f2:67:18:64:
d9:7d:9e:8f:af:23:d9:9e:fc:06:cc:0e:39:66:b2:90:f4:65:
33:d9:8f:80:71:96:73:7a:36:56:ea:92:ae:13:a1:de:94:53:
e8:7c:2d:0b:bb:08:a6:2f:72:2d:0b:6f:ad:4c:81:b6:a9:10:
a1:fe:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:18 2025 by rpki-client