Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa
File: wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa (raw, json)
Hash identifier: 3UUSZj4EE6g7iwWFskgE2wH0pWTu3Li4PZOPkm9Vn2o=
Subject key identifier: C0:E3:B5:21:4B:74:6F:84:29:1B:0B:07:14:5D:43:08:31:57:2F:67
Certificate issuer: /CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2
Certificate serial: 105D
Authority key identifier: C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa
Signing time: Fri 17 Jan 2025 01:28:51 +0000
ROA not before: Fri 17 Jan 2025 01:28:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 136907
IP address blocks: 139.9.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4189 (0x105d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2
Validity
Not Before: Jan 17 01:28:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C0E3B5214B746F84291B0B07145D430831572F67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:5f:ab:c7:81:31:c2:78:91:36:c7:c3:6e:
78:3e:7b:1d:4f:0e:61:e0:52:37:58:46:0f:68:2d:
e3:a5:f0:fb:02:ce:dd:f2:53:5c:8d:0d:28:52:36:
01:16:76:26:2e:1e:8a:9e:43:a1:44:64:a8:1b:ba:
fc:db:da:f5:80:a0:f1:d1:1c:49:bc:b0:b8:ed:67:
93:42:35:da:09:60:89:6c:4e:27:c7:09:f9:d4:c0:
4a:a0:0d:58:88:69:da:0b:19:ca:ba:8a:5b:94:1b:
a5:e0:26:41:ae:ca:a0:a2:c5:9d:a6:f6:8a:08:f9:
ad:cf:ea:a5:ba:b9:95:c5:46:cb:9b:7a:b9:29:a1:
f6:9f:4d:3a:e3:37:f7:71:5c:91:03:59:8e:e4:2c:
6a:8b:4a:29:2e:51:69:6b:45:97:68:c3:48:a1:fc:
32:0d:12:6e:64:38:33:08:73:54:73:b2:d7:27:b4:
db:7d:a7:b3:9d:f6:2e:9f:a9:66:81:f0:65:78:a9:
a0:4b:20:36:70:5e:9f:67:09:e7:f2:6f:91:d4:17:
56:c1:9f:6a:3e:90:e8:16:c0:58:a4:0c:dd:71:3d:
56:51:77:24:ae:df:a8:fe:32:08:98:fa:09:c9:70:
ae:a0:c3:b8:7f:ca:4f:da:4f:af:ce:92:58:89:4a:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:B5:21:4B:74:6F:84:29:1B:0B:07:14:5D:43:08:31:57:2F:67
X509v3 Authority Key Identifier:
keyid:C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.9.98.0/24
Signature Algorithm: sha256WithRSAEncryption
11:26:a5:ec:66:f7:24:8e:a7:e4:27:68:68:d7:55:1b:77:a3:
fd:bb:54:e6:31:08:db:4d:13:ab:55:20:7e:2d:24:3f:86:70:
fd:ab:9f:8c:bd:a7:7a:2c:2b:9a:51:9b:f0:9d:03:46:15:6f:
09:71:3b:2e:26:a8:b5:7b:fd:22:4a:83:9a:04:bf:83:e1:af:
73:0e:40:73:db:e2:c8:4a:70:60:6a:0c:32:46:78:f7:18:11:
c1:1f:3e:41:81:2e:1c:0c:0e:dd:03:e4:2f:16:6f:09:3f:56:
e9:86:3e:ab:27:b2:da:53:f9:cd:d5:04:6a:48:46:38:3b:90:
6a:f4:1e:ed:f3:27:a8:dc:2a:be:fb:72:c1:28:64:a6:2d:29:
73:78:c4:35:a8:7c:62:6c:43:98:13:71:54:7f:38:02:9c:a8:
59:e6:e7:70:bd:97:15:4c:a3:59:b0:84:34:59:9d:ed:95:d2:
5b:79:e0:dc:d7:78:4d:95:a2:1a:a2:c9:9d:26:fc:72:4d:7a:
85:db:02:24:62:fb:37:33:2c:27:64:83:fc:20:35:71:18:e7:
c4:40:01:a0:5d:8f:df:0e:44:6d:db:4c:1d:e5:35:21:3a:6b:
fb:b5:39:07:8c:bb:3b:be:a0:7c:8f:d0:19:b2:b9:9f:3b:cc:
6b:fb:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:22 2025 by rpki-client