Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/noTTkGKBBA0IiF1s9t5qUE627a8.roa
File: noTTkGKBBA0IiF1s9t5qUE627a8.roa (raw, json)
Hash identifier: 7atMi/MrgnmN/IZ16hRnHqf3SP1bFaVyEPj4clXkIuM=
Subject key identifier: 9E:84:D3:90:62:81:04:0D:08:88:5D:6C:F6:DE:6A:50:4E:B6:ED:AF
Certificate issuer: /CN=23320A4BAF0AF9313530EC99D3686433703E071F
Certificate serial: 1EDD
Authority key identifier: 23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/noTTkGKBBA0IiF1s9t5qUE627a8.roa
Signing time: Fri 17 Jan 2025 01:29:02 +0000
ROA not before: Fri 17 Jan 2025 01:29:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 54994
IP address blocks: 203.130.50.0/24 maxlen: 24
203.130.52.0/24 maxlen: 24
203.130.63.0/24 maxlen: 24
220.243.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7901 (0x1edd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23320A4BAF0AF9313530EC99D3686433703E071F
Validity
Not Before: Jan 17 01:29:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9E84D3906281040D08885D6CF6DE6A504EB6EDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7b:3d:a9:a5:2e:8a:b5:80:11:53:06:c9:b0:
62:8e:58:5c:e2:4b:6a:73:67:49:ac:49:d4:c0:dd:
61:28:ce:c7:3e:cb:01:26:3c:d6:c2:d8:35:0f:1e:
4b:5e:82:71:ca:0c:70:76:32:87:8a:fd:b5:b7:50:
af:6a:3e:88:62:99:c0:0f:9a:d9:8c:9b:74:fa:26:
91:39:ae:ab:2d:78:3e:82:1f:2e:bb:0f:dc:d1:85:
57:fb:fa:a7:fb:ca:d4:72:17:ea:0f:8d:38:f6:bd:
1b:67:45:f5:4c:e0:ed:d5:33:3c:32:f2:09:f8:b4:
7c:1b:cb:01:9d:c7:bb:58:22:d7:5a:f1:a3:96:35:
a7:bb:56:e1:81:8b:97:a4:5c:db:84:c3:7f:6d:cd:
47:c6:69:cd:10:77:aa:e1:e4:ad:b6:86:d8:fe:74:
6a:51:4b:3f:51:da:ea:f5:ec:a6:a7:d6:2a:d6:6e:
8d:8a:aa:37:f5:d8:e8:bd:b7:1a:b0:a3:1f:00:d0:
66:e1:74:f9:9f:12:f4:ee:57:65:46:c5:df:7c:32:
8c:8f:fb:d8:4b:c8:09:2f:0e:45:3d:be:e4:95:b3:
43:4c:73:da:c9:b1:79:15:48:a6:45:53:4d:6a:01:
4d:86:e2:cf:c5:04:c6:e4:2c:8a:86:77:b4:ed:f1:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:D3:90:62:81:04:0D:08:88:5D:6C:F6:DE:6A:50:4E:B6:ED:AF
X509v3 Authority Key Identifier:
keyid:23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/noTTkGKBBA0IiF1s9t5qUE627a8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.130.50.0/24
203.130.52.0/24
203.130.63.0/24
220.243.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:03:ce:02:e0:7e:e8:c7:c1:2e:f2:73:77:67:f4:74:d1:78:
49:8f:50:36:67:69:4c:9c:a8:43:06:bf:a7:2f:70:f4:0f:9e:
10:10:f2:1d:6a:02:94:fe:c2:d0:ba:c4:07:a6:b5:d4:a8:2a:
5c:c8:15:a9:04:d8:d1:03:bd:4f:97:fa:9e:1e:83:73:a5:c2:
01:b6:94:e5:1e:6e:0a:4d:14:a2:9b:b4:c6:09:ac:7f:8f:d6:
f4:24:64:fd:f6:ff:7b:02:50:95:a4:29:d4:3f:bd:2d:fe:34:
2b:64:b3:16:9b:5f:08:e6:88:81:08:0d:4c:87:7a:0c:9b:08:
a2:b3:42:4d:0c:85:3b:44:32:bf:b8:f0:4b:ec:66:d9:19:8a:
ec:c0:21:99:3b:bd:74:1a:8c:80:74:53:c0:cc:26:4c:71:5c:
c6:7f:69:66:d0:28:1d:ab:b2:8e:c7:c7:8d:01:95:bb:7f:3a:
71:43:88:12:56:b9:86:50:8d:14:0c:a4:bd:86:7c:80:cc:7e:
fd:52:db:31:66:9f:fd:6c:98:6d:55:c8:24:dc:4e:9b:4b:96:
be:ce:93:47:b0:c4:56:33:61:5a:3a:33:f2:68:93:51:b0:10:
33:76:73:d1:a7:d6:9f:00:1d:50:07:8e:67:d3:54:e6:03:a4:
9b:ee:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:24 2025 by rpki-client