Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/_toISeST9c__yt0nsOzGy2GDpA0.roa
File: _toISeST9c__yt0nsOzGy2GDpA0.roa (raw, json)
Hash identifier: +NLDSz0Rhn3MaJ6UHSolXyDgqXhhOPJGpKtVqELkTrE=
Subject key identifier: FE:DA:08:49:E4:93:F5:CF:FF:CA:DD:27:B0:EC:C6:CB:61:83:A4:0D
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 10AE
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/_toISeST9c__yt0nsOzGy2GDpA0.roa
Signing time: Fri 17 Jan 2025 01:28:53 +0000
ROA not before: Fri 17 Jan 2025 01:28:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 124.71.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4270 (0x10ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Jan 17 01:28:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FEDA0849E493F5CFFFCADD27B0ECC6CB6183A40D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:e0:b5:39:77:81:27:10:ae:d8:23:bb:e4:
b2:f6:29:4b:08:a7:c6:0b:44:57:2d:fc:54:d6:3d:
cd:8a:ab:8e:af:7a:79:14:f7:df:54:fa:f3:ef:72:
2c:32:09:38:91:86:1a:14:7e:c3:2b:86:85:00:7a:
8f:f0:90:9a:db:15:66:3c:2c:87:f0:2d:a6:fc:e0:
c3:ab:c7:16:d8:b2:e7:34:b3:42:c6:c5:a9:25:96:
7b:5b:3b:a0:e3:58:d4:04:9b:13:b0:e0:2e:8c:7e:
33:63:b2:5c:65:e6:3d:1a:44:cf:60:f1:c8:6f:53:
a8:19:20:51:89:ba:d7:a6:93:fd:07:1f:b7:45:0d:
fa:4c:ad:d5:e7:4f:fc:25:76:ee:5a:47:38:83:82:
b3:99:3d:c2:70:9a:78:30:9d:5a:1e:dd:5f:50:cf:
b9:78:9e:65:8a:8b:21:db:e6:0a:02:65:40:98:82:
dd:1e:17:bc:bf:18:ce:b6:09:d5:05:5e:c0:58:2a:
34:4a:b1:84:9d:01:f4:df:bb:81:e9:09:df:79:6d:
f6:4e:4a:c5:32:82:e2:40:ec:9b:42:de:98:9c:59:
13:13:9a:90:a0:29:ac:03:02:43:62:ee:1e:67:8c:
7b:49:06:08:95:fa:34:c5:d4:6a:0d:e3:22:f4:4a:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DA:08:49:E4:93:F5:CF:FF:CA:DD:27:B0:EC:C6:CB:61:83:A4:0D
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/_toISeST9c__yt0nsOzGy2GDpA0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.71.250.0/24
Signature Algorithm: sha256WithRSAEncryption
58:db:cb:a8:3a:04:a0:c4:6c:f4:78:92:08:5d:6c:a8:f3:b7:
77:2f:0d:86:95:36:01:09:9f:ff:a8:fe:cd:09:db:1c:61:39:
3d:32:8b:78:34:4d:16:dd:c7:93:b0:3d:39:2c:89:5f:07:5d:
a4:e7:c5:c4:2e:21:60:41:4b:51:8e:56:25:c8:4f:75:c9:25:
c0:f5:88:e8:d6:30:5d:4d:39:bd:01:1e:c2:92:db:a3:f7:d5:
2c:a3:7d:a9:9e:15:2f:a7:d0:99:81:99:f1:f2:41:09:34:a0:
24:1e:a1:e7:08:4a:ac:ae:a4:be:4b:98:88:82:dc:7d:21:08:
6c:d3:9e:64:91:0d:c5:f9:a0:61:f8:53:f3:e5:d6:f6:ee:41:
7f:34:02:4f:20:d1:9d:28:64:db:4f:fa:15:ce:5f:70:e9:d9:
f3:b5:70:60:b2:fe:4f:3a:c0:ed:ff:1c:c3:69:4d:b9:98:5e:
97:42:04:e9:82:8b:c0:52:ee:80:05:d4:7e:a6:4d:59:12:1f:
1b:66:6a:1c:ed:4b:4a:ec:8d:a5:c5:57:23:65:61:39:6f:98:
39:41:70:ab:d6:2e:8b:ad:f9:08:3d:22:5a:9a:27:70:75:9f:
5f:00:02:58:8a:20:94:96:52:e9:b3:5b:7a:c2:8e:fb:d9:db:
b5:4e:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:43 2025 by rpki-client