Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/IJstGxYeXmD9TLf7m9peIJPOZ0M.roa
File: IJstGxYeXmD9TLf7m9peIJPOZ0M.roa (raw, json)
Hash identifier: EwzaajPcvPV1aJvbfovVMb0BoCuRVrdDj6XCyXd6Lx8=
Subject key identifier: 20:9B:2D:1B:16:1E:5E:60:FD:4C:B7:FB:9B:DA:5E:20:93:CE:67:43
Certificate issuer: /CN=86DB0D88746FFC0814E589A139240F2F742D0C56
Certificate serial: 12B9
Authority key identifier: 86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/IJstGxYeXmD9TLf7m9peIJPOZ0M.roa
Signing time: Wed 22 Jan 2025 03:28:49 +0000
ROA not before: Wed 22 Jan 2025 03:28:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63566
IP address blocks: 118.194.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4793 (0x12b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86DB0D88746FFC0814E589A139240F2F742D0C56
Validity
Not Before: Jan 22 03:28:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=209B2D1B161E5E60FD4CB7FB9BDA5E2093CE6743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:6a:22:05:92:09:dc:0d:f7:9f:54:c9:2e:
f6:f2:65:2d:8a:fe:ef:65:b8:53:3e:6a:14:4d:da:
34:48:54:cd:80:07:4c:f8:fb:8a:bd:d3:bf:b1:18:
46:bd:1b:be:62:d8:31:05:0f:5b:d7:98:6d:f1:69:
55:60:04:48:2c:40:48:a8:2f:6a:d6:94:90:41:a4:
47:a8:19:f0:e4:cb:38:49:4f:3e:14:2e:8e:4f:3d:
68:e5:6a:56:36:78:69:32:f3:0d:c8:db:1f:cd:b0:
3d:40:58:cc:fb:99:6c:64:83:61:15:3c:64:f6:9b:
10:41:f8:7e:b6:7f:a6:56:b8:69:98:73:b0:f1:e1:
55:25:c5:fc:94:6c:da:bf:c0:d8:9a:13:0d:51:3d:
ad:cb:1c:13:f5:c2:f1:2d:77:cf:69:43:50:e6:c2:
47:05:40:92:27:64:7a:9d:d5:bb:1a:c5:94:f9:6f:
1f:f9:60:8b:8a:c5:99:bd:38:cd:dc:19:86:f6:81:
94:9d:78:82:5d:d2:38:c5:86:60:05:c4:0d:99:f3:
e1:78:8d:56:74:9a:a4:46:12:82:f6:3a:ee:99:bc:
af:f7:66:12:36:93:d6:9e:7a:ce:f2:2b:46:bd:0d:
5e:b4:b9:f6:07:e6:e7:13:22:62:35:c1:82:32:03:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9B:2D:1B:16:1E:5E:60:FD:4C:B7:FB:9B:DA:5E:20:93:CE:67:43
X509v3 Authority Key Identifier:
keyid:86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/IJstGxYeXmD9TLf7m9peIJPOZ0M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.194.59.0/24
Signature Algorithm: sha256WithRSAEncryption
73:21:aa:86:7d:85:7f:e9:60:20:f9:1d:6a:49:4e:f8:89:20:
4f:41:62:99:a3:38:b9:aa:7f:61:1f:06:b6:53:4c:f7:28:64:
e6:e8:33:2d:be:2c:db:91:f3:8f:90:10:7b:50:73:a1:f0:bb:
f9:74:e0:99:d0:7d:09:e2:26:a6:1d:c8:b1:c2:56:23:e4:b3:
f7:0e:70:95:c7:44:e5:b7:8f:84:1a:7d:39:d6:1b:86:53:4c:
c0:e3:3d:7b:2d:ef:fe:87:2a:a6:38:95:eb:7b:7e:fc:96:d3:
16:72:c1:45:ab:ad:f9:87:f2:c8:12:1d:28:20:3d:bb:b7:bf:
7e:72:66:51:a9:15:7b:38:8a:0c:48:9b:31:4c:a6:95:69:35:
13:49:de:c6:50:1e:cd:53:76:1e:b7:d9:7b:32:6b:26:5c:a6:
31:33:01:37:fc:18:59:12:fa:77:22:c7:89:d0:34:cf:7b:eb:
72:27:31:fc:bd:cb:98:ed:e6:7a:64:a7:13:b7:3b:26:be:a5:
e5:f9:6c:3e:30:e4:11:48:04:7d:e0:1b:8a:37:3c:6d:dc:40:
d2:09:e7:8a:f1:d4:b2:5d:15:73:87:53:ee:1a:5c:82:f3:67:
f5:37:5e:12:59:ae:66:83:10:7b:df:9d:ef:2d:3d:9b:9c:a6:
2c:5b:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:22 2025 by rpki-client