Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/whguNaccYGQ0DQYqWUsHPpbnKFo.roa
File: whguNaccYGQ0DQYqWUsHPpbnKFo.roa (raw, json)
Hash identifier: /p7cvx/iZBkIOBRy0OIQy+7CcH+3vKg8J6YTwIalBMs=
Subject key identifier: C2:18:2E:35:A7:1C:60:64:34:0D:06:2A:59:4B:07:3E:96:E7:28:5A
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1030
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/whguNaccYGQ0DQYqWUsHPpbnKFo.roa
Signing time: Wed 25 Dec 2024 03:25:03 +0000
ROA not before: Wed 25 Dec 2024 03:25:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4144 (0x1030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Dec 25 03:25:03 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C2182E35A71C6064340D062A594B073E96E7285A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:4b:7f:ff:81:04:54:0e:58:d2:43:6e:16:
fb:16:cb:0e:e0:e4:86:1b:0a:f6:ee:3c:16:21:de:
37:34:11:0f:cb:ca:32:bc:ed:53:d0:d5:73:74:93:
c1:b8:d6:64:95:13:c4:f8:4c:af:a1:9f:67:8a:35:
4b:b4:dc:4b:40:d6:71:49:1d:ae:e3:1c:6c:c6:6f:
b8:21:96:7e:d0:28:5a:ea:fa:d2:97:94:b8:4e:d3:
72:2c:c0:e9:f5:b0:79:d9:17:4b:07:e9:3c:6a:5f:
ec:6b:ea:d0:ed:54:23:c0:bc:d7:f1:e4:d4:b7:6e:
3c:9c:9d:52:fa:2d:0f:42:ad:79:f5:80:65:60:30:
f5:8f:30:34:7f:4e:29:07:88:61:8b:7b:01:03:0b:
da:d7:85:59:01:3d:28:b7:a8:88:b1:85:cc:29:36:
b1:01:d0:05:1c:26:14:12:00:9f:87:b9:bb:b4:e5:
36:a2:1a:fe:f0:d6:88:90:3f:7f:68:b4:93:b1:7c:
04:49:3c:e8:e7:4c:90:72:f1:cd:5f:be:da:1a:0f:
a1:c5:e7:d6:12:ff:e7:01:bb:63:22:fc:ec:f3:d6:
68:25:e3:38:6c:7a:6e:93:c9:9b:86:d3:69:f2:c5:
b6:0c:f5:f4:ee:6c:ee:1b:d2:c9:c2:28:02:7c:43:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:2E:35:A7:1C:60:64:34:0D:06:2A:59:4B:07:3E:96:E7:28:5A
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/whguNaccYGQ0DQYqWUsHPpbnKFo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.248.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:aa:ce:0d:4b:37:e5:15:f1:ed:16:09:ae:44:5f:9c:60:e3:
60:15:52:61:90:dc:06:80:64:dc:19:d6:bd:55:84:09:ea:3c:
bf:18:a5:65:ff:a2:22:18:5c:23:23:cb:a0:87:08:a7:8a:b6:
ac:0c:c9:fd:f3:d6:6f:76:1d:10:09:96:1e:0b:9e:3c:22:2e:
f0:24:a1:36:1e:d2:3e:d2:ac:05:6b:32:63:73:ac:1b:92:da:
d2:64:42:b4:6b:c1:35:7c:7e:2d:51:06:d0:e8:88:33:13:b2:
09:85:97:9d:f0:ea:5a:39:53:31:45:a3:af:17:78:e5:b1:2a:
53:ce:14:78:09:d1:3f:3d:aa:6d:03:3f:6c:31:c6:7c:06:4c:
a8:62:c2:94:d5:0e:89:9c:bf:53:c9:67:08:59:38:9b:fe:ec:
b7:83:13:47:50:7b:e3:31:74:32:35:7d:3d:20:c3:da:60:97:
9e:57:6d:86:ce:df:87:70:e5:f5:4d:38:8a:68:0a:b0:63:46:
da:63:04:b0:5d:d6:86:26:b5:3d:10:18:ef:0f:0d:58:61:f9:
20:eb:be:c5:4b:ac:a4:68:e1:5b:3e:a2:9d:97:9e:47:d1:2a:
bb:17:73:f0:26:25:e7:0c:2b:49:93:8c:5f:4c:e7:0b:30:d6:
e8:4a:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:11 2025 by rpki-client