Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/1vtEcAc1EazV0vA1A0YAXOuqCcA.roa
File: 1vtEcAc1EazV0vA1A0YAXOuqCcA.roa (raw, json)
Hash identifier: tJMy03d8P6VVSOOtMdM2cNaDfwzqgoBtH/L5esNADK0=
Subject key identifier: D6:FB:44:70:07:35:11:AC:D5:D2:F0:35:03:46:00:5C:EB:AA:09:C0
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11DE
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1vtEcAc1EazV0vA1A0YAXOuqCcA.roa
Signing time: Fri 14 Mar 2025 09:37:08 +0000
ROA not before: Fri 14 Mar 2025 09:37:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4574 (0x11de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:37:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D6FB4470073511ACD5D2F0350346005CEBAA09C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:7d:f2:0f:39:81:b2:08:32:b0:c1:34:f8:
38:83:bc:35:18:36:b2:49:ae:23:74:51:54:fb:30:
cb:10:ce:f7:ce:9e:39:91:b0:30:38:3f:47:ae:0c:
6a:ee:6c:15:9f:b9:99:25:8a:e1:6d:fd:58:81:ab:
10:ff:22:71:3a:17:56:af:c5:de:a6:d9:4c:50:68:
2d:a5:a0:d2:ab:ce:33:01:d1:2a:b1:04:c1:73:e4:
0c:84:b8:af:f1:6e:d0:69:20:9d:20:3c:1b:91:6c:
21:76:61:ba:9a:19:db:45:9a:c8:ec:e8:74:99:a1:
43:f5:56:10:61:60:00:45:8b:d0:33:1c:fd:b6:72:
09:f6:73:90:27:fa:d3:cc:a3:e6:e7:84:bd:05:d1:
f8:7d:a6:e0:3c:18:15:d2:60:a3:bd:d4:93:f7:d5:
e2:c3:47:3a:16:bd:4e:14:26:0b:cf:90:cc:99:37:
da:6c:6f:2a:e7:58:5c:01:91:ac:a9:8e:42:e1:df:
f0:da:26:25:6b:88:7d:b1:8b:2f:98:86:54:6b:73:
7f:44:4f:05:30:24:81:0f:d4:f1:e4:e8:db:43:8e:
30:c4:9c:87:9f:c7:b8:ff:53:bc:1f:8f:5b:e5:43:
dc:42:15:92:6c:f2:f4:d1:88:67:a7:64:16:18:42:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:44:70:07:35:11:AC:D5:D2:F0:35:03:46:00:5C:EB:AA:09:C0
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1vtEcAc1EazV0vA1A0YAXOuqCcA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.88.0/22
Signature Algorithm: sha256WithRSAEncryption
38:b3:3c:07:14:5e:14:02:d7:75:a1:88:af:b3:13:0c:fb:87:
7c:94:c6:8b:bb:34:93:fa:41:4e:77:2c:99:c1:fa:0f:3e:7a:
20:ba:22:5a:28:56:61:2e:02:3f:3d:fc:10:09:f2:23:f1:24:
1b:5e:6b:84:93:ea:80:36:cb:19:00:42:77:89:e4:8b:a0:c9:
2b:2d:bb:54:d8:d5:5e:1e:64:80:a6:04:70:ad:4e:9c:a4:78:
0e:5e:8d:66:16:1a:49:c8:46:9e:50:21:b1:33:00:cb:a4:bb:
98:06:c4:ba:0e:49:a2:8c:4a:87:d5:df:cc:39:6b:8b:0c:47:
85:38:71:32:70:c9:74:d7:4f:b5:b1:ec:27:5f:62:c9:1e:f8:
84:f3:6c:3a:66:08:0e:bc:dc:0c:5d:7d:9c:95:7b:67:ff:91:
19:43:f1:e4:c0:8a:57:82:d3:d0:cf:ec:37:48:6e:d8:a5:75:
54:43:f5:e9:cf:f7:1f:b4:1d:eb:82:3f:50:e0:2a:6c:e0:5a:
c9:2c:68:b6:a8:27:9d:04:12:fa:f9:dd:12:56:d0:a6:0a:ba:
a5:cc:38:a2:2d:85:d7:11:1d:a7:58:bf:4b:c6:15:6e:e4:a3:
98:82:42:6a:86:9f:91:5f:b8:98:53:1f:10:a9:47:b0:83:ab:
a5:4e:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:49 2025 by rpki-client