Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/0MKOK7KMu-3XF08bHGSUmZyLzRo.roa
File: 0MKOK7KMu-3XF08bHGSUmZyLzRo.roa (raw, json)
Hash identifier: +2uF26gV+DvCKxDS0jLV/whIk/fDwPLMECpprSQa+EI=
Subject key identifier: D0:C2:8E:2B:B2:8C:BB:ED:D7:17:4F:1B:1C:64:94:99:9C:8B:CD:1A
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 0F9A
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0MKOK7KMu-3XF08bHGSUmZyLzRo.roa
Signing time: Tue 26 Nov 2024 06:40:38 +0000
ROA not before: Tue 26 Nov 2024 06:40:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3994 (0xf9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Nov 26 06:40:38 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D0C28E2BB28CBBEDD7174F1B1C6494999C8BCD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:39:74:fd:43:ee:78:42:da:9c:ee:b0:d1:
25:c3:3c:d6:99:9e:a3:7a:e7:92:86:0f:8a:ec:97:
f1:c8:ac:1f:95:e8:7d:dc:3d:57:34:4a:a5:33:66:
14:26:3b:ae:b6:d9:ef:8a:bf:1b:a0:26:98:df:6c:
62:ec:01:04:7a:98:0c:8b:a8:c2:a7:6f:4f:9e:83:
82:f8:ad:98:57:a7:d4:c4:da:20:49:9a:46:cf:2d:
97:cf:b4:d2:e7:b8:6f:40:0f:9f:8a:28:df:61:94:
fd:d7:6b:e5:6d:fb:5b:09:34:36:ce:70:b2:f4:9d:
5f:1b:67:33:e8:61:5f:00:51:eb:76:97:1a:bd:0d:
ee:b6:be:76:70:2b:aa:33:48:03:99:5e:a5:38:49:
19:e3:f0:0c:9c:52:10:5d:87:fa:62:22:4c:32:5d:
f4:80:13:1e:73:08:d7:f6:f1:c9:3b:5a:0c:f6:e9:
08:94:b5:ba:5c:e5:7b:60:91:e6:f3:a5:a6:8f:31:
ec:e9:84:45:e1:4e:69:26:e8:4b:b3:b7:6d:67:3a:
d0:19:cf:6e:e2:39:a3:9e:65:a6:aa:1f:ff:4b:ab:
ee:cd:15:5e:51:c7:6b:04:1d:5f:86:79:7f:6b:1e:
16:33:90:94:05:3e:eb:40:92:af:37:30:08:eb:a2:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:8E:2B:B2:8C:BB:ED:D7:17:4F:1B:1C:64:94:99:9C:8B:CD:1A
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0MKOK7KMu-3XF08bHGSUmZyLzRo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.128.0/19
Signature Algorithm: sha256WithRSAEncryption
80:b8:f1:bc:75:a5:ee:53:91:47:ac:cf:bd:bf:d5:4c:81:95:
18:fc:a5:3a:66:e5:60:a8:f3:ea:1d:d4:ba:4a:96:26:d3:24:
40:25:6d:65:78:d9:f1:28:70:4d:f2:00:e1:92:81:9a:b3:82:
02:36:3d:9a:ff:dc:c6:b7:02:c4:16:4d:fe:d4:43:cc:73:79:
87:83:12:3f:35:8a:b1:b1:c3:8f:da:e4:8e:4d:d6:04:99:c1:
9a:e0:e3:23:a2:c1:29:01:7c:e7:dd:de:f9:75:16:45:84:bb:
f9:eb:e3:f4:58:6b:fd:46:aa:12:fc:f1:16:5e:8d:e6:9b:80:
4c:e8:50:2a:02:95:16:f3:bb:45:b7:8a:fd:04:d7:75:4e:30:
23:a4:8d:9e:87:c4:76:b9:98:cc:cd:51:20:8a:85:a0:ee:b3:
b4:9a:c4:4c:23:d4:8c:45:38:22:7c:ea:d7:eb:bc:49:0f:e5:
24:18:3d:78:31:2a:12:85:21:10:67:3f:23:b7:73:9d:af:62:
2f:8a:79:82:a2:ab:e4:99:2b:7a:0e:16:48:cb:f2:36:d0:23:
6e:4d:dc:13:fc:2b:e2:f6:35:37:8f:78:3a:1b:fe:ba:ed:df:
ae:d0:a7:5c:f6:fa:37:7a:67:70:59:e8:dc:22:cc:5e:f4:d5:
0e:63:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:19:13 2025 by rpki-client