Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/YHnUdnTrOmO0s5VhesM4TIEMR84.roa
File: YHnUdnTrOmO0s5VhesM4TIEMR84.roa (raw, json)
Hash identifier: CG8vpQFxQT3XBEFkQ9xRlkNoQw7KKgbIoAdWgVM1R9Y=
Subject key identifier: 60:79:D4:76:74:EB:3A:63:B4:B3:95:61:7A:C3:38:4C:81:0C:47:CE
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 10B0
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/YHnUdnTrOmO0s5VhesM4TIEMR84.roa
Signing time: Fri 17 Jan 2025 01:28:54 +0000
ROA not before: Fri 17 Jan 2025 01:28:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 110.41.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4272 (0x10b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Jan 17 01:28:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6079D47674EB3A63B4B395617AC3384C810C47CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:58:9e:9f:ce:a9:07:31:31:fd:eb:9f:e8:
2b:0d:02:c5:5b:53:d9:c8:1c:da:b9:f8:35:e2:c8:
29:73:89:00:1e:b1:c5:90:e6:2f:88:4a:de:6d:ee:
0e:91:19:b4:63:e4:e0:cb:62:28:87:1f:03:fb:fd:
a0:d3:ec:8b:2f:8f:c7:6b:f4:73:e3:53:a0:de:d4:
14:08:b8:ab:8a:6a:01:f5:a0:fd:d9:ad:51:94:79:
63:63:d7:06:67:59:4a:82:71:df:f1:cd:77:02:a7:
f5:99:a0:15:e5:b0:09:7b:fa:f2:21:31:e2:48:bb:
99:be:c1:02:bb:78:bd:8d:b0:f4:59:74:7a:e8:51:
b2:96:ef:fc:9a:2c:72:92:a2:55:d0:87:ed:73:fc:
df:04:b1:a1:79:7f:e7:1b:ee:a1:a9:0b:24:59:fa:
fb:f2:ee:52:ae:2a:a9:07:e9:7a:64:dc:93:58:b1:
e8:04:c2:81:5c:0e:be:32:35:ee:4a:91:de:37:8e:
25:89:d9:fb:92:08:28:23:a6:bd:74:7c:d6:78:2d:
92:06:29:68:51:e7:3a:85:6e:89:de:d8:c2:a0:37:
d5:1b:74:4e:40:c0:ca:13:f4:c7:8b:be:5c:1c:62:
67:11:61:58:5e:38:ef:90:9c:b6:f4:76:2e:b4:0f:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:79:D4:76:74:EB:3A:63:B4:B3:95:61:7A:C3:38:4C:81:0C:47:CE
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/YHnUdnTrOmO0s5VhesM4TIEMR84.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.41.209.0/24
Signature Algorithm: sha256WithRSAEncryption
81:85:72:1e:39:3e:cf:b7:11:75:e8:19:8e:7c:2b:8d:56:18:
14:b2:e0:fd:3d:27:e9:ca:f0:07:47:73:a8:40:37:4c:89:c0:
02:ce:3a:6c:7d:ea:8b:35:a2:0f:c2:c4:df:b8:f7:32:60:dd:
7c:ae:7b:8d:18:56:f5:a6:f1:68:b7:e0:12:c7:7b:5d:dd:68:
71:ee:32:2d:30:e2:70:be:7a:86:96:9f:1d:fb:9f:5b:15:24:
94:76:ea:f3:6b:b0:9a:fb:8a:63:d6:05:39:a9:ec:19:cf:98:
08:96:b1:47:a4:6d:cb:72:20:6f:78:e6:64:09:e2:0a:f7:90:
2b:03:a3:70:e4:c8:4f:38:4e:0d:0f:f6:57:9a:58:2b:51:3a:
c5:ba:e4:a7:40:74:19:31:cf:0b:48:42:fd:30:4c:6b:ed:cc:
8e:4d:d9:44:c3:f0:26:0b:72:b3:c4:76:85:66:21:e6:5b:5a:
2e:6c:2e:3f:17:ff:14:69:95:57:02:de:16:c1:c7:b4:35:06:
86:c6:f0:9c:a0:c6:ca:b2:e1:38:34:90:70:f6:d3:fb:07:b5:
7b:ce:02:1b:1e:69:05:66:43:57:1c:27:1f:88:6a:52:a0:47:
2f:ea:c0:5d:99:1d:59:ea:83:aa:a4:99:fc:82:5b:1e:c8:91:
6b:3d:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:33 2025 by rpki-client