Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa
File: 5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa (raw, json)
Hash identifier: 1G9TvIGpOI19k+vNY2vWqyAcGnf/NgnyIFlBuchbsrU=
Subject key identifier: E5:94:C0:F4:EA:4B:9C:8C:AB:1F:1C:96:E4:6E:18:43:11:D2:EE:4F
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 1BCE
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa
Signing time: Fri 17 Jan 2025 01:27:36 +0000
ROA not before: Fri 17 Jan 2025 01:27:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139021
IP address blocks: 218.247.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7118 (0x1bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jan 17 01:27:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E594C0F4EA4B9C8CAB1F1C96E46E184311D2EE4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:03:23:42:b8:d6:50:f7:19:bf:8a:76:a9:
98:48:fc:4a:46:bb:ec:de:2b:03:d5:0d:bb:5c:c6:
ac:f5:c2:d0:53:8d:54:9f:81:44:c2:63:4d:77:0b:
7f:8e:98:0c:ce:48:2e:20:95:cb:de:ff:37:50:58:
c6:f7:34:1b:d8:36:71:f8:0e:ac:fb:3f:a9:0f:c3:
2f:4d:da:71:f3:7d:f4:2c:3f:4d:e3:4f:f3:c7:06:
96:da:2a:1d:bd:ce:86:87:4f:88:6b:ae:7e:f7:a5:
07:26:45:d4:01:17:5d:d2:f1:63:37:d3:1c:7a:56:
6d:de:27:c8:b9:48:57:c2:17:51:90:7d:53:c1:fd:
ee:1a:d4:0f:ce:84:ec:fa:5c:3d:05:07:e5:48:ca:
78:94:00:ae:1d:60:85:de:37:7c:e0:ae:1c:61:6d:
d6:56:7e:df:85:34:7b:92:2e:26:e8:4e:a1:18:65:
fa:cf:7a:57:d0:04:fa:6b:85:45:d7:a0:33:3b:67:
5b:09:f4:ec:b5:0d:d1:b5:60:7f:d0:f1:7a:0a:73:
83:43:7b:19:29:51:06:19:eb:b9:b2:ae:18:fa:77:
8b:b7:b6:9a:e9:98:63:07:15:9e:44:86:a2:b2:43:
72:b0:0e:fe:d9:b7:bc:56:0c:58:26:2a:27:c6:57:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:C0:F4:EA:4B:9C:8C:AB:1F:1C:96:E4:6E:18:43:11:D2:EE:4F
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.247.64.0/20
Signature Algorithm: sha256WithRSAEncryption
93:be:5e:41:5f:36:3f:eb:92:c4:1d:d8:fb:fb:8a:ac:e2:3e:
59:35:80:47:26:b6:54:57:8c:c8:38:ce:64:1a:ff:43:36:2f:
62:7f:5f:82:05:ef:62:01:24:41:bc:c8:a0:12:45:32:18:f4:
7d:91:b3:42:f1:b8:48:0a:da:ef:83:07:b9:83:98:bb:cd:86:
4b:0f:52:a3:e8:8d:a8:f3:72:ef:dd:ea:aa:39:7e:c8:b4:49:
54:62:35:7f:a2:f8:6b:37:69:26:be:c0:2a:22:06:ac:eb:c9:
d3:86:4a:6d:0c:f2:d1:71:28:aa:e5:61:d7:cf:8d:3e:2f:4f:
5f:aa:64:c2:90:40:1d:9d:55:ff:f6:36:5a:6d:4c:93:60:27:
29:16:c0:1b:64:35:43:4f:85:2d:93:e3:a0:cd:25:50:80:f8:
27:16:14:1a:05:b0:11:ab:b8:93:69:ea:bc:9f:bd:81:24:6b:
12:45:38:ba:05:db:e1:e1:96:d6:5e:a4:91:0d:5f:fb:c3:2d:
db:e8:81:87:37:16:cd:a7:d6:a1:cc:7f:b4:c2:12:34:68:c8:
ce:04:88:6a:ac:04:18:3f:da:0a:f3:47:c3:b9:9f:66:30:4e:
05:f8:3d:a0:35:b8:71:f0:ad:3d:f3:46:e5:03:56:96:94:40:
61:bc:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:14 2025 by rpki-client