Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/vgG1DwSli2E_QtW0ZA00iXIlWpk.roa
File: vgG1DwSli2E_QtW0ZA00iXIlWpk.roa (raw, json)
Hash identifier: U71AUVysiP19qowrWgbKCsjaF8O8bddfNrFNfIxJTuY=
Subject key identifier: BE:01:B5:0F:04:A5:8B:61:3F:42:D5:B4:64:0D:34:89:72:25:5A:99
Certificate issuer: /CN=86DB0D88746FFC0814E589A139240F2F742D0C56
Certificate serial: 12BF
Authority key identifier: 86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/vgG1DwSli2E_QtW0ZA00iXIlWpk.roa
Signing time: Wed 22 Jan 2025 05:51:28 +0000
ROA not before: Wed 22 Jan 2025 05:51:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63566
IP address blocks: 122.11.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4799 (0x12bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86DB0D88746FFC0814E589A139240F2F742D0C56
Validity
Not Before: Jan 22 05:51:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BE01B50F04A58B613F42D5B4640D348972255A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:1c:ad:ad:18:a9:72:e6:61:78:32:07:1c:
75:69:02:df:ae:cd:05:10:18:29:05:13:27:6b:52:
38:17:db:04:2b:31:ae:01:68:d9:78:df:5d:95:22:
21:d2:51:10:78:88:07:69:ea:94:00:99:3d:a8:6d:
82:bd:54:48:f0:fb:2c:68:21:1a:46:98:f9:80:21:
f4:e7:a4:b0:9e:99:b2:e3:ac:9a:6b:5b:1c:55:78:
88:39:dd:e6:49:e5:e6:6c:be:8f:d5:7c:ad:65:b9:
cf:29:1d:54:51:87:95:2f:a1:b7:19:bc:6b:25:2e:
fd:4c:32:38:c5:ce:75:6b:38:98:3f:ad:09:76:13:
22:90:eb:38:ad:ea:c4:c8:03:5e:fe:7b:0d:73:f3:
0e:4f:b7:43:db:10:e7:49:2b:f2:d6:a0:2c:a3:78:
3e:79:58:64:74:de:27:22:77:2b:79:11:4c:aa:bc:
ec:75:8c:fa:52:af:02:3d:4e:be:f2:e4:a2:8c:26:
4f:0a:00:a1:02:b0:0d:88:f9:da:47:37:c0:4f:4e:
36:fa:42:19:d1:83:fc:c6:6b:f5:ee:41:41:b9:02:
f7:b2:42:4b:37:b9:da:32:a5:fe:6e:28:02:99:7e:
95:3e:2f:cc:03:0f:a3:10:b2:b6:04:21:ad:73:a8:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:B5:0F:04:A5:8B:61:3F:42:D5:B4:64:0D:34:89:72:25:5A:99
X509v3 Authority Key Identifier:
keyid:86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/vgG1DwSli2E_QtW0ZA00iXIlWpk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.11.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b6:5c:a3:e9:20:72:c4:80:84:12:45:12:17:27:0c:94:c7:21:
e9:6b:b7:b1:2f:09:63:10:17:a1:d8:65:9c:48:5b:20:96:6b:
3b:5f:e4:05:9f:99:7b:94:cf:dd:64:0e:a0:07:37:7b:eb:5d:
9a:5f:bb:9c:77:8f:57:b8:3e:ec:1d:19:ae:b8:5c:b0:a3:72:
23:80:c9:14:04:52:81:2d:a1:bb:1d:07:7e:91:a8:ba:05:a0:
09:b0:63:d1:76:2b:51:55:d1:ca:b1:62:12:e1:56:bd:15:54:
45:f8:17:2c:be:8b:5a:d0:c2:68:20:a9:fa:53:4d:99:48:ec:
8c:99:bb:9a:de:be:b0:13:e5:c4:07:fc:51:48:a1:91:51:6a:
04:a7:9b:ff:97:8b:5d:f6:a5:a8:fc:a1:09:c3:7b:86:36:cf:
df:fa:4e:be:24:7b:6f:54:7e:47:bd:99:a1:41:35:9f:0b:3c:
ed:44:e1:b5:43:78:a2:87:36:62:27:37:60:a7:4d:26:59:53:
fb:01:b3:7c:ee:28:b4:23:26:9c:58:b6:d7:b7:9e:a3:50:7d:
6d:92:0a:a4:da:13:49:de:ea:16:45:ae:5a:0a:38:b8:3a:5c:
8b:d2:a7:60:3b:68:88:8a:1c:48:7d:43:1e:0e:1b:2b:b5:f6:
53:a5:26:5f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICEr8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODZE
QjBEODg3NDZGRkMwODE0RTU4OUExMzkyNDBGMkY3NDJEMEM1NjAeFw0yNTAxMjIw
NTUxMjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJFMDFCNTBGMDRBNThC
NjEzRjQyRDVCNDY0MEQzNDg5NzIyNTVBOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC//RytrRipcuZheDIHHHVpAt+uzQUQGCkFEydrUjgX2wQrMa4B
aNl4312VIiHSURB4iAdp6pQAmT2obYK9VEjw+yxoIRpGmPmAIfTnpLCembLjrJpr
WxxVeIg53eZJ5eZsvo/VfK1luc8pHVRRh5UvobcZvGslLv1MMjjFznVrOJg/rQl2
EyKQ6zit6sTIA17+ew1z8w5Pt0PbEOdJK/LWoCyjeD55WGR03icidyt5EUyqvOx1
jPpSrwI9Tr7y5KKMJk8KAKECsA2I+dpHN8BPTjb6QhnRg/zGa/XuQUG5AveyQks3
udoypf5uKAKZfpU+L8wDD6MQsrYEIa1zqKsXAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUvgG1DwSli2E/QtW0ZA00iXIlWpkwHwYDVR0jBBgwFoAUhtsNiHRv/AgU5Ymh
OSQPL3QtDFYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc3
Ni9odHNOaUhSdl9BZ1U1WW1oT1NRUEwzUXRERlkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2h0c05pSFJ2X0FnVTVZbWhPU1FQTDNRdERGWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NzYvdmdHMUR3U2xpMkVf
UXRXMFpBMDBpWElsV3BrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB3oLADANBgkqhkiG9w0BAQsFAAOCAQEAtlyj6SByxICEEkUSFycMlMch6Wu3
sS8JYxAXodhlnEhbIJZrO1/kBZ+Ze5TP3WQOoAc3e+tdml+7nHePV7g+7B0Zrrhc
sKNyI4DJFARSgS2hux0HfpGougWgCbBj0XYrUVXRyrFiEuFWvRVURfgXLL6LWtDC
aCCp+lNNmUjsjJm7mt6+sBPlxAf8UUihkVFqBKeb/5eLXfalqPyhCcN7hjbP3/pO
viR7b1R+R72ZoUE1nws87UThtUN4ooc2Yic3YKdNJllT+wGzfO4otCMmnFi217ee
o1B9bZIKpNoTSd7qFkWuWgo4uDpci9KnYDtoiIocSH1DHg4bK7X2U6UmXw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:23 2025 by rpki-client