Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/oC4avwmuZIC9LFCMixwyyWycwnE.roa
File: oC4avwmuZIC9LFCMixwyyWycwnE.roa (raw, json)
Hash identifier: lBEl/f+66+3Y8T654Saa4kb2JaQs4QSTJWg76ytUbjg=
Subject key identifier: A0:2E:1A:BF:09:AE:64:80:BD:2C:50:8C:8B:1C:32:C9:6C:9C:C2:71
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1034
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/oC4avwmuZIC9LFCMixwyyWycwnE.roa
Signing time: Wed 25 Dec 2024 03:25:05 +0000
ROA not before: Wed 25 Dec 2024 03:25:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.47.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4148 (0x1034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Dec 25 03:25:05 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A02E1ABF09AE6480BD2C508C8B1C32C96C9CC271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:42:99:45:a4:f4:68:b4:8e:82:94:20:f3:
0f:c5:db:b1:a0:94:e4:e1:25:16:22:41:22:f8:bd:
ff:62:95:01:d4:7e:a5:3f:f7:22:5f:b1:78:21:46:
a9:3b:61:e5:89:1a:a1:12:15:96:34:f1:4e:a7:cb:
67:b8:0c:48:3d:e6:3b:0a:a5:ee:45:51:00:fb:c1:
10:6c:ac:6f:0a:38:05:0c:60:ed:36:47:d6:1a:f8:
b1:ae:f8:f8:05:16:85:f0:09:7e:fa:41:44:fe:05:
a0:35:ef:ae:f7:c1:96:29:1e:8d:87:66:ed:17:36:
d9:5d:1b:ed:f8:a9:19:c3:e8:5f:0d:bd:ca:98:67:
76:39:54:87:f1:5b:21:24:d5:04:1a:ef:ca:85:a0:
97:17:37:8b:72:a3:7d:a9:9e:ea:21:98:be:ed:71:
06:20:aa:7b:7e:19:58:ac:83:ca:f2:2a:ad:1b:e0:
40:5f:4e:b3:c1:6c:5b:ec:ce:86:01:44:9d:d4:5f:
9a:01:04:43:9c:27:31:66:84:10:a1:c6:68:45:c0:
ee:e8:3f:0a:46:29:c5:6c:af:fd:72:de:09:b2:13:
85:70:d5:3b:09:dd:73:44:7a:76:ed:81:d2:a9:2c:
6c:46:11:a6:35:dc:32:b9:2c:9c:bd:2e:1c:82:86:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:1A:BF:09:AE:64:80:BD:2C:50:8C:8B:1C:32:C9:6C:9C:C2:71
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/oC4avwmuZIC9LFCMixwyyWycwnE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.0.0/19
Signature Algorithm: sha256WithRSAEncryption
68:aa:84:87:2a:ef:35:c2:2b:27:2c:c6:bb:e1:a6:50:fb:1f:
63:22:bd:a4:0a:bb:62:d3:85:5c:7a:d8:86:aa:5b:bd:74:94:
5a:7c:18:ed:60:31:03:0e:1e:97:6f:5f:52:fc:ba:24:a1:ed:
f7:8b:ad:db:38:15:50:49:79:21:40:15:d5:7a:df:77:60:c6:
f7:a7:3f:bc:1f:72:81:f1:25:bf:b7:8e:f3:cc:c8:f4:c9:10:
95:64:96:71:e2:ed:14:c1:de:3a:a1:71:b9:5b:97:5e:1d:8a:
10:36:de:1a:45:4a:9e:cc:72:e1:0c:cd:8c:10:a3:be:ec:ea:
1d:4d:4e:1c:ed:a4:80:ac:df:50:b4:ff:5e:f1:63:37:e2:37:
0c:67:ca:23:72:da:ae:de:c3:fa:1a:cc:d6:9b:a1:e3:40:92:
25:50:2f:e6:05:f7:6f:10:cb:d3:39:a7:aa:a1:f2:ce:e8:62:
13:45:80:03:9d:bd:29:5b:c5:65:57:91:31:22:d7:fd:2c:12:
7b:ea:74:08:d7:79:99:15:0c:ae:7d:11:3a:d4:b2:3c:c6:8d:
21:1a:6c:01:1c:77:1f:1c:a0:d5:fd:2e:9e:82:dc:b3:83:b4:
08:63:9e:62:e9:f7:1d:21:8d:e4:13:ff:79:92:c7:d3:13:ea:
ec:44:3c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:00 2025 by rpki-client