Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/I-uQGrh2Q6qg89jrFtkRmzENoe0.roa
File: I-uQGrh2Q6qg89jrFtkRmzENoe0.roa (raw, json)
Hash identifier: Depiq44HBl39EzMJPK1i1nQ9abG5TAtbWX5wWww6tCA=
Subject key identifier: 23:EB:90:1A:B8:76:43:AA:A0:F3:D8:EB:16:D9:11:9B:31:0D:A1:ED
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4C24
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/I-uQGrh2Q6qg89jrFtkRmzENoe0.roa
Signing time: Tue 25 Mar 2025 06:07:53 +0000
ROA not before: Tue 25 Mar 2025 06:07:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63603
IP address blocks: 163.53.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19492 (0x4c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Mar 25 06:07:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=23EB901AB87643AAA0F3D8EB16D9119B310DA1ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:30:3d:38:b9:36:7b:aa:e4:24:e5:a9:fc:
d3:44:2b:53:75:5d:c2:36:75:34:46:3b:ee:ad:65:
cd:2b:46:fb:fd:df:8c:08:9f:35:23:6c:14:10:60:
98:e1:2a:79:84:d5:2c:00:51:e5:d3:d1:ff:65:cf:
4d:f0:15:fa:c6:a7:73:77:dd:f5:76:83:e2:55:e8:
a9:8a:c7:74:4b:92:9b:a4:ba:1f:44:eb:70:ff:bb:
f0:b2:15:83:a2:21:70:7e:e4:99:13:14:cb:49:1e:
f3:92:f3:95:05:fe:c5:45:90:94:9b:a5:e5:49:4f:
68:30:8e:78:3c:03:54:e6:22:ae:cd:43:3a:d2:91:
67:f8:66:e9:1f:51:f7:8c:c4:60:d4:84:b2:f4:52:
ba:54:e7:f5:ec:3f:8f:65:dd:0c:55:33:67:6d:e9:
25:d1:7b:93:69:61:2b:3b:f4:b2:29:fa:fc:c0:e8:
b1:97:54:ae:0f:61:9f:d4:ea:15:d5:24:5d:4c:db:
b3:9a:e4:2d:e8:80:5a:c8:2b:fb:37:3e:94:fe:dc:
37:90:8f:57:0d:3a:26:c1:7b:5d:f5:63:e4:a9:9c:
fb:82:bd:b1:41:e8:6c:d5:d8:64:3e:91:90:86:c2:
6a:19:c3:74:08:17:ed:a2:25:4b:7f:07:9a:63:41:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:90:1A:B8:76:43:AA:A0:F3:D8:EB:16:D9:11:9B:31:0D:A1:ED
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/I-uQGrh2Q6qg89jrFtkRmzENoe0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.53.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f1:73:c7:d6:37:f8:56:e9:68:78:5c:ee:ae:44:ec:58:d9:
f6:3b:10:4f:22:b0:70:06:82:10:c7:97:47:22:ad:1b:15:e3:
75:cc:f0:31:5e:2c:9f:9d:c8:e1:0b:e6:f3:0a:86:ee:29:b7:
2a:1a:df:2a:95:27:c4:02:05:54:f3:b3:5a:55:d6:40:3a:c7:
08:04:b6:21:b9:7e:f4:6d:c2:20:d5:ea:d6:f4:f4:90:51:6d:
7b:87:24:82:db:1d:cc:5e:2d:7d:40:d9:c6:e6:c7:24:12:4c:
18:9f:eb:cd:13:79:26:c8:d8:04:3a:1a:c3:fc:ec:08:98:f4:
99:78:b4:c9:c8:6d:2a:97:26:f1:4f:b4:ed:74:df:c5:f5:03:
a0:aa:b3:4f:06:51:e0:08:07:fa:c6:06:b1:ab:2f:21:4b:9f:
16:42:17:6c:8a:b0:e0:ca:e5:3b:dd:18:ac:c1:e6:3c:e6:4c:
13:7e:df:97:ae:2b:b4:1f:ab:b9:fe:12:03:3a:49:a7:ca:8b:
da:5e:86:f0:b9:5e:c4:03:ff:0f:c4:16:06:f1:6e:00:23:8f:
8e:bf:db:db:9c:ed:18:e8:4e:df:f2:e7:5f:93:f3:15:2c:f5:
17:ce:13:95:8c:63:da:e4:ed:2b:81:21:62:c8:9c:9c:88:ae:
c4:67:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:35 2025 by rpki-client