Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/-L7vEu8Qby9eJFQ5qsgXWchtcKo.roa
File: -L7vEu8Qby9eJFQ5qsgXWchtcKo.roa (raw, json)
Hash identifier: cGK7qZIVhkyhjMZdbrc6PCnQHsFs6FIUMydy8WBzKKQ=
Subject key identifier: F8:BE:EF:12:EF:10:6F:2F:5E:24:54:39:AA:C8:17:59:C8:6D:70:AA
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CD3
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/-L7vEu8Qby9eJFQ5qsgXWchtcKo.roa
Signing time: Thu 02 Jan 2025 14:51:15 +0000
ROA not before: Thu 02 Jan 2025 14:51:15 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 101.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7379 (0x1cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 14:51:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F8BEEF12EF106F2F5E245439AAC81759C86D70AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:50:79:e5:99:7e:f3:5f:b5:e4:75:8f:3a:
3e:78:c9:e4:3d:e0:2f:7d:8f:75:18:56:5b:98:6f:
02:c6:a7:4b:99:c9:9b:d7:bb:db:0b:20:dc:3d:32:
88:99:30:f6:07:28:37:5d:e8:e9:5c:a5:3a:cf:1a:
25:98:60:f6:eb:96:fa:82:a1:f8:14:87:98:8b:88:
ef:bc:bf:fb:b0:41:7c:b8:71:1c:09:a2:d9:5d:4c:
51:43:1a:d3:21:04:56:bf:a0:05:34:db:54:e5:57:
80:4a:14:59:4f:da:47:60:59:45:fb:29:e1:a8:2c:
13:fe:5e:1c:e1:35:bb:83:c1:99:42:ed:c1:bd:94:
55:dc:fa:1f:31:7c:93:96:74:28:12:cd:ba:90:5a:
48:52:1d:77:27:21:e2:90:aa:1c:8d:06:68:7f:7c:
21:2b:6d:dc:dc:12:e6:6b:db:ea:e6:0c:8c:e1:fb:
e4:c4:56:9b:29:4d:93:a2:0b:de:38:60:a2:b1:fe:
c2:ce:0a:0e:9e:a8:e6:38:85:dc:02:6d:db:4b:f6:
41:a8:dc:9e:16:e4:89:0b:d5:18:dd:75:7e:91:ff:
2b:32:94:bc:2d:11:13:e6:9b:4b:15:1d:12:4d:e8:
cb:2c:33:eb:26:3f:b3:5a:08:c4:8c:e4:3a:64:0b:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BE:EF:12:EF:10:6F:2F:5E:24:54:39:AA:C8:17:59:C8:6D:70:AA
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/-L7vEu8Qby9eJFQ5qsgXWchtcKo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.126.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:d7:e7:94:01:41:f6:3a:a1:e7:d0:a5:58:49:e7:48:50:9d:
cd:86:bd:40:e1:82:c9:35:64:00:15:6d:3a:48:d6:41:59:8e:
9b:99:a7:45:95:4c:0e:df:64:b4:fd:1f:9e:e7:d8:63:da:99:
ff:60:d7:b3:02:a0:78:38:96:52:b0:23:85:6e:9e:3a:fc:dc:
ef:3e:d3:64:91:70:c7:71:e9:3e:6b:78:a4:19:7c:6b:97:23:
a1:df:29:01:c5:d2:67:8e:30:78:74:cc:ca:7b:2e:80:e9:74:
ac:33:3e:c9:06:5f:70:60:13:6d:9c:da:2e:ab:44:11:4a:8f:
17:9a:97:58:ec:76:86:0d:59:21:4c:1e:5a:e6:9c:af:e2:5a:
a0:13:80:5e:f5:9c:66:b2:ef:77:f1:4a:f1:d9:0c:6a:dc:65:
80:fe:cb:c8:fb:73:39:1b:fa:6f:e4:ae:1d:7f:7f:14:2d:9c:
98:e9:77:94:07:17:e6:a0:85:91:be:d3:e8:d7:e8:66:00:86:
4a:ad:ea:03:72:bd:80:71:45:08:35:8a:ae:14:ff:91:c7:7d:
11:0e:ff:7d:ea:f5:ff:df:55:86:f2:c7:4b:19:50:d4:e9:e8:
38:1e:12:57:fe:cc:be:79:cd:fe:56:f8:44:1d:e0:3f:4e:2a:
80:cd:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:27 2025 by rpki-client