Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/F6k9KHe4njsQuPJpCS_-3P1u0dY.roa
File: F6k9KHe4njsQuPJpCS_-3P1u0dY.roa (raw, json)
Hash identifier: XxfTawOdm3gmPSdRS8L60sxdou0rDhTs+BRDBr8w0EA=
Subject key identifier: 17:A9:3D:28:77:B8:9E:3B:10:B8:F2:69:09:2F:FE:DC:FD:6E:D1:D6
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1031
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/F6k9KHe4njsQuPJpCS_-3P1u0dY.roa
Signing time: Wed 25 Dec 2024 03:25:04 +0000
ROA not before: Wed 25 Dec 2024 03:25:04 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 115.175.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4145 (0x1031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Dec 25 03:25:04 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=17A93D2877B89E3B10B8F269092FFEDCFD6ED1D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:d8:9d:9f:5c:a4:fa:7d:7d:ad:78:7a:b8:
a9:c7:78:01:c2:d6:08:0b:94:e2:65:76:6d:c1:42:
1f:1f:30:55:55:0b:38:be:4e:61:e5:46:1b:e7:a5:
91:1d:dc:ea:f0:ee:e8:04:db:59:be:23:b2:a4:e8:
00:99:c9:eb:06:b6:3e:da:07:6b:4c:27:96:6d:00:
c0:60:36:bf:37:3a:63:52:25:13:de:f8:6f:dd:34:
53:9a:18:8f:ed:10:0c:30:cb:9b:1d:9b:91:45:63:
59:7b:e6:1f:11:5d:1b:fb:20:be:0c:f6:d9:ba:76:
d2:9b:6f:ad:03:c1:bb:12:de:38:30:d1:6b:33:68:
95:5f:6d:c3:da:be:7c:ad:8f:7a:ca:c9:0c:6e:5d:
34:44:5b:7d:1e:66:8f:3f:50:32:9b:fd:2e:41:d0:
4a:a3:19:95:7d:b5:6e:92:d2:86:3a:21:5f:96:0b:
d4:3f:15:0b:e0:50:c5:97:69:2e:9d:67:b6:ca:ef:
c3:b7:94:de:f5:81:ad:9a:e4:9f:be:a5:af:1c:3d:
ae:cc:1e:9b:09:c0:b0:d6:47:10:de:fb:b3:36:14:
cb:71:b5:7b:8f:42:77:1f:23:72:4c:1f:12:7c:b4:
57:8d:0a:af:d2:8f:50:5f:1f:eb:8a:11:9f:f0:40:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A9:3D:28:77:B8:9E:3B:10:B8:F2:69:09:2F:FE:DC:FD:6E:D1:D6
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/F6k9KHe4njsQuPJpCS_-3P1u0dY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.175.64.0/19
Signature Algorithm: sha256WithRSAEncryption
06:6b:b9:56:05:77:51:3a:a8:d2:d5:fb:3e:af:79:26:25:fb:
b6:e2:e7:4d:e9:86:ad:6d:35:04:20:37:99:fc:8d:91:35:6e:
37:7e:e4:b9:e3:60:0c:2d:63:0a:f4:fc:1f:0e:d0:ab:f8:85:
f5:0f:c9:2f:ff:55:c0:ce:7a:06:72:20:6a:bd:c8:d1:b0:d4:
13:e8:b8:de:78:d2:89:08:52:ff:0b:0b:dd:32:09:81:8a:1e:
4c:40:c4:1c:c3:01:fb:66:4e:70:65:6b:ea:a5:a4:d3:95:96:
29:1d:23:2d:89:88:c1:b8:8f:1f:16:ca:6d:36:21:eb:1b:bf:
54:f9:99:79:ed:b2:32:3d:ad:c2:b4:1d:88:fb:8d:dc:ce:10:
b5:aa:ae:55:da:42:0a:36:26:8b:e0:f6:1d:5e:4c:27:93:94:
84:48:15:49:4d:70:14:15:f7:aa:b4:88:c5:a9:bb:9d:d3:b1:
78:5a:c2:e6:8c:c7:b3:90:73:fd:c1:48:b1:6d:f6:0c:60:0c:
37:97:11:6c:5f:79:c0:a7:c3:df:a0:fb:1a:e6:95:3f:17:47:
6b:31:71:11:5f:df:d7:93:e4:b1:dc:14:e5:34:d5:e5:5d:ec:
a2:a3:3c:01:7f:90:4f:a0:4a:4a:ef:50:16:db:64:ff:20:64:
19:62:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:42 2025 by rpki-client