Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/ERGuAEO4hc2K_QNhDs0oPd2Ovhs.roa
File: ERGuAEO4hc2K_QNhDs0oPd2Ovhs.roa (raw, json)
Hash identifier: /xveDAj10Cqwa30t8+mVrd6NxA4uKtlsdoO1YjXjPOM=
Subject key identifier: 11:11:AE:00:43:B8:85:CD:8A:FD:03:61:0E:CD:28:3D:DD:8E:BE:1B
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 1BD0
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/ERGuAEO4hc2K_QNhDs0oPd2Ovhs.roa
Signing time: Fri 17 Jan 2025 01:27:37 +0000
ROA not before: Fri 17 Jan 2025 01:27:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139021
IP address blocks: 218.247.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7120 (0x1bd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jan 17 01:27:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1111AE0043B885CD8AFD03610ECD283DDD8EBE1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:66:07:e5:87:94:6e:3a:8b:ff:5a:a8:53:
0f:2b:05:a6:ca:05:a0:ef:07:97:e0:d6:ec:2f:f0:
1d:a8:29:69:a1:0f:80:06:b5:68:b6:94:d7:e2:85:
d3:e4:af:65:16:46:1c:45:5d:59:fc:93:eb:03:25:
df:1a:64:da:0c:4b:87:a5:ec:ae:48:d5:dd:de:88:
b2:d3:c9:80:07:6a:d8:19:6c:dc:2c:5a:f4:0c:a0:
68:b6:1b:61:c6:88:c8:40:83:67:7d:f2:18:bb:1b:
d2:f1:7a:0a:3a:3a:ac:51:23:7f:9f:67:c6:e2:3a:
bc:24:fe:49:56:eb:f8:5b:78:91:e5:57:db:41:1f:
2f:3a:c3:e9:45:fc:9a:42:63:92:b8:b0:04:5d:1e:
3d:0d:46:de:45:5f:0b:eb:62:a0:c2:b9:d4:57:20:
fa:41:fd:29:61:fc:bc:95:c4:3b:56:b2:72:f6:56:
f4:16:94:e8:b1:b8:cc:c6:50:38:57:e2:0c:e8:5b:
8f:18:b0:d8:d9:7f:3f:be:0b:5b:59:9d:e5:ec:c9:
a6:25:75:da:70:73:4d:21:11:8d:4c:43:f8:37:83:
23:6a:5b:2e:bf:9b:62:fd:40:d9:e1:86:d4:76:e2:
3f:3d:6a:34:61:5d:57:13:bd:82:2d:10:a7:77:d1:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:AE:00:43:B8:85:CD:8A:FD:03:61:0E:CD:28:3D:DD:8E:BE:1B
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/ERGuAEO4hc2K_QNhDs0oPd2Ovhs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.247.80.0/22
Signature Algorithm: sha256WithRSAEncryption
41:14:3d:b9:20:31:72:3f:a5:99:af:c1:e9:34:4b:c9:48:6e:
22:7b:19:af:ac:8c:b8:a7:48:96:92:d4:ed:9b:3d:ef:a3:2b:
74:c9:a6:12:7e:2f:43:1a:40:cf:b5:1b:29:ab:ac:60:c4:bd:
56:0b:0a:16:49:fe:14:88:62:71:43:40:32:e2:18:5b:10:51:
64:81:fc:5d:6b:73:77:07:fb:48:32:4c:45:8b:46:4c:68:bb:
c1:7a:fd:32:f0:b1:30:a9:70:a6:46:c9:95:f9:c1:6b:86:b0:
79:a6:bb:0b:fa:3a:82:e2:c1:48:c2:50:b9:e2:0f:19:7a:be:
02:3b:82:70:48:49:35:3d:bb:ca:1d:f3:81:fe:fb:54:4b:41:
6c:16:42:63:6f:f5:d9:ae:4f:91:1b:8c:bf:17:1b:db:b6:97:
29:02:8a:3c:e5:5b:48:b7:17:57:02:36:62:bc:c7:e8:88:d6:
d9:a8:0b:2a:ec:4f:b2:5b:e8:1d:e3:16:a0:70:4e:85:28:a8:
00:45:ac:85:20:da:c6:7c:45:d4:52:b4:ac:cc:1c:33:07:08:
b1:d9:6f:45:a9:46:82:55:ad:f8:10:9b:af:bc:4d:7b:ef:07:
aa:78:c2:06:64:68:01:02:6d:c4:c5:97:41:bf:46:c6:3c:bb:
c4:24:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:17 2025 by rpki-client