Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/krEkJUKiojR4w7ASvi77HR1oxkk.roa
File: krEkJUKiojR4w7ASvi77HR1oxkk.roa (raw, json)
Hash identifier: 3vTZcwCZsaZScxBDMgZrBBxgcgdvwSLvKHRICIHqYVo=
Subject key identifier: 92:B1:24:25:42:A2:A2:34:78:C3:B0:12:BE:2E:FB:1D:1D:68:C6:49
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 0F97
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/krEkJUKiojR4w7ASvi77HR1oxkk.roa
Signing time: Tue 26 Nov 2024 06:40:36 +0000
ROA not before: Tue 26 Nov 2024 06:40:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3991 (0xf97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Nov 26 06:40:36 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=92B1242542A2A23478C3B012BE2EFB1D1D68C649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:57:62:91:90:7e:56:7b:94:01:37:16:e5:
ce:57:c9:47:4e:b6:b4:7f:39:5d:2c:62:4f:73:d4:
a9:dc:fc:dd:c1:0a:23:c5:6d:a9:59:4d:f0:f1:00:
b1:76:85:5b:a8:04:a0:e1:f6:db:3f:3d:69:09:3c:
a8:1f:4a:7f:49:ec:fb:d2:01:6b:3c:a0:a0:05:29:
07:c1:ae:5a:18:7d:1d:75:5e:6e:e1:75:99:08:5a:
87:9b:7e:86:e8:dd:3a:92:b8:6a:12:ea:0a:24:e8:
53:5b:21:fe:18:c3:49:ca:0b:a9:ad:34:2d:17:25:
e7:4d:1d:1b:9b:e5:3e:93:fe:6c:b9:ab:7a:d3:27:
6c:26:28:c3:3d:86:06:96:97:7f:e5:be:4b:e3:70:
12:c4:1f:4c:b7:a2:e6:21:5c:a9:56:83:d7:d7:6d:
e2:d5:8c:e0:0e:45:a3:d5:fd:a3:10:45:8c:bf:40:
82:45:84:b3:16:ec:ca:19:51:e4:29:19:3a:87:7c:
e2:f4:a9:0f:5c:0d:09:c1:10:03:2b:f5:cf:ef:39:
25:3c:5a:36:62:68:bf:57:c7:03:fe:59:c0:d6:ba:
70:01:0a:2e:5b:42:eb:2a:9e:9d:a1:53:5e:42:89:
65:c7:55:10:86:4f:22:84:78:99:6a:9c:57:86:77:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B1:24:25:42:A2:A2:34:78:C3:B0:12:BE:2E:FB:1D:1D:68:C6:49
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/krEkJUKiojR4w7ASvi77HR1oxkk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:e4:77:86:53:48:58:55:f0:33:84:89:51:c6:92:9c:c6:4e:
40:45:d4:34:41:09:58:e2:ad:e9:fa:79:91:c8:87:8b:53:4d:
1b:01:88:e8:35:6e:20:60:10:9c:a3:89:99:d5:51:91:0a:0c:
89:3d:c9:0c:62:50:2f:74:0c:75:1b:4f:09:7b:cc:39:5c:78:
62:91:a5:5e:f7:e0:d8:b6:e5:bb:20:97:9f:4a:eb:5a:ef:1b:
cb:3a:21:55:11:93:28:b0:af:90:0e:5a:b7:cd:dd:96:0a:bf:
8e:6c:57:ea:57:77:98:c5:55:03:e6:b0:31:5e:5e:7a:8f:c1:
e0:81:36:49:06:4b:2f:8d:68:34:4d:f9:73:fb:15:46:8b:d3:
9b:ce:b4:40:7e:70:2a:c3:2b:51:1f:c3:07:6e:57:ea:55:e8:
e1:03:dc:b6:7b:aa:d4:76:62:7f:5b:57:52:12:57:eb:b3:26:
fc:dd:f8:fe:e5:f6:37:7d:03:c2:3f:6e:af:ec:1a:46:25:ed:
13:d9:22:61:46:9d:f9:6d:9d:ef:4a:c3:6f:fa:04:45:c7:65:
56:c8:7d:28:c0:59:d3:c2:7c:ff:a7:d0:ce:a7:a7:5f:d9:25:
70:3d:1e:dc:7e:28:85:d0:cd:b8:33:0a:f3:49:08:14:5f:03:
af:3a:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:27 2025 by rpki-client