Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/hC1yd7Z1V1yR6zcGwks9HqiNcEw.roa
File: hC1yd7Z1V1yR6zcGwks9HqiNcEw.roa (raw, json)
Hash identifier: dsIbbt1WpMRyY2vfj41ypWdhMqPHTfHT9+aLc67/SxI=
Subject key identifier: 84:2D:72:77:B6:75:57:5C:91:EB:37:06:C2:4B:3D:1E:A8:8D:70:4C
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11CE
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/hC1yd7Z1V1yR6zcGwks9HqiNcEw.roa
Signing time: Fri 14 Mar 2025 09:32:38 +0000
ROA not before: Fri 14 Mar 2025 09:32:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.47.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4558 (0x11ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:32:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=842D7277B675575C91EB3706C24B3D1EA88D704C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:57:e8:45:0f:ce:1f:3d:b0:cd:7c:70:16:
8c:82:2e:4f:95:7c:96:55:91:54:5a:93:36:c6:f4:
33:3c:48:6b:d3:f3:d2:28:96:f5:20:69:69:6e:53:
34:40:f9:46:c7:4c:9c:42:d5:76:01:e8:4e:52:94:
78:2e:03:9b:3d:ed:e1:21:72:0f:05:56:ad:09:a6:
ed:37:cb:43:23:fa:5a:4d:f8:7e:8a:bf:03:08:c2:
3b:5c:67:e0:4f:e4:82:b3:52:88:cb:24:6f:39:f9:
0d:e8:40:06:ed:d2:88:a0:55:e3:57:b9:05:c7:20:
bc:70:a8:5b:e0:74:df:41:7d:3c:fa:0c:bb:77:97:
b9:be:6b:86:e3:d9:5a:6b:36:b3:56:de:90:c3:94:
da:d0:87:52:03:80:ee:2e:c1:12:fe:51:84:85:12:
bd:29:85:c9:ca:eb:cb:d9:e2:4e:ae:b5:e0:49:da:
3d:1e:66:6a:9b:07:bd:a6:b8:03:ff:d6:e8:5c:5e:
a4:f5:ab:54:10:a0:41:1c:0b:21:50:15:2f:da:95:
1d:ce:22:03:e8:53:42:bd:85:92:d6:7a:6c:42:5a:
d8:5a:b5:bb:2c:00:b8:72:9b:58:45:87:d6:f3:34:
43:15:5a:ed:75:5c:5e:d7:5c:01:3e:a8:2a:9f:96:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:72:77:B6:75:57:5C:91:EB:37:06:C2:4B:3D:1E:A8:8D:70:4C
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/hC1yd7Z1V1yR6zcGwks9HqiNcEw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.228.0/23
Signature Algorithm: sha256WithRSAEncryption
57:ae:25:3d:9b:f7:9b:40:76:ec:39:a0:cf:77:a6:8e:e6:59:
9c:a8:20:0d:42:25:f4:39:f7:b4:64:21:93:90:1c:58:c1:cc:
a8:1a:8a:ed:5a:1a:52:82:30:44:61:ab:38:55:b7:83:9d:42:
e9:c1:ee:a4:fc:59:34:24:0a:f2:98:f1:62:2e:65:12:aa:fa:
e6:b1:43:14:69:25:af:74:ec:1b:5b:db:58:1f:5e:d1:5b:cc:
48:ce:fa:97:12:4b:04:67:cb:1e:e4:05:9b:8c:c7:e5:76:b6:
f2:0d:9f:cc:9e:4c:57:39:9a:07:04:65:0d:c6:5f:83:00:7c:
b1:b6:dd:eb:1f:69:52:b4:50:98:92:ad:59:44:bc:35:49:8e:
9a:9a:fa:93:db:19:1c:09:8d:e6:c4:ea:52:af:9d:8a:64:04:
d4:9b:8b:bf:59:68:dc:22:79:4d:65:8e:f0:80:da:9f:a4:87:
b6:21:10:28:13:59:a4:c0:5e:8b:9f:dd:93:e0:08:77:94:fa:
8c:cd:cd:65:b5:35:3b:0d:55:36:cd:59:cb:e7:9d:3b:44:bc:
95:c0:39:b8:79:e4:5a:6c:3a:47:cc:79:bf:33:3b:35:38:a1:
7b:0d:93:57:93:9a:09:7a:33:6f:78:ae:8b:99:51:4f:b8:e5:
76:ad:48:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:06 2025 by rpki-client