Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/4hnlvNimMC0u2UvZzaWPlpefK7o.roa
File: 4hnlvNimMC0u2UvZzaWPlpefK7o.roa (raw, json)
Hash identifier: wRxqGnpNxRuhu9cnJcTokP52MTEQGk5Hv03x5UtiZTM=
Subject key identifier: E2:19:E5:BC:D8:A6:30:2D:2E:D9:4B:D9:CD:A5:8F:96:97:9F:2B:BA
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CC6
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/4hnlvNimMC0u2UvZzaWPlpefK7o.roa
Signing time: Thu 02 Jan 2025 13:58:27 +0000
ROA not before: Thu 02 Jan 2025 13:58:27 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4811
IP address blocks: 118.145.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7366 (0x1cc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E219E5BCD8A6302D2ED94BD9CDA58F96979F2BBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:03:ab:ed:cf:2b:28:2f:7a:78:1a:93:7d:
30:81:8b:0d:8b:9b:5a:70:86:6c:43:f5:3c:a7:ba:
ef:02:0a:5f:86:7c:e6:f4:5e:86:0b:c8:ab:37:91:
3d:ba:b8:28:c7:3f:7c:79:51:ee:c2:6e:2a:16:94:
46:2f:96:c5:84:2b:2d:93:2e:07:7d:18:fb:36:20:
30:b4:c3:29:8c:e2:b6:82:20:76:41:a9:94:37:70:
e5:2f:40:3c:bf:bb:b4:b7:79:43:ae:2b:16:69:37:
f6:01:c4:b6:f2:27:f1:5e:fb:80:de:33:49:e8:61:
24:da:cf:5b:c8:a2:14:99:1c:42:81:67:dd:59:ae:
df:fb:5e:26:ec:d6:fe:3f:6c:8f:87:56:6c:db:38:
03:00:c3:0c:90:df:bc:60:69:4b:44:e9:9e:d1:4d:
37:4b:bf:b1:b3:5d:bb:da:87:e5:77:34:2b:43:70:
e9:e9:8d:5c:99:11:41:ae:18:93:53:0f:7a:23:af:
74:d5:cc:14:ed:ba:d9:bf:8d:3c:af:fe:2d:27:92:
31:d5:6c:d3:e2:db:3f:b1:07:49:de:e0:63:dd:68:
f5:8d:26:9b:b4:7d:0e:6b:cb:86:b8:eb:fa:f4:cd:
a6:4f:67:66:ec:29:6a:ce:ea:51:58:b7:d1:ff:3b:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:19:E5:BC:D8:A6:30:2D:2E:D9:4B:D9:CD:A5:8F:96:97:9F:2B:BA
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/4hnlvNimMC0u2UvZzaWPlpefK7o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.145.32.0/19
Signature Algorithm: sha256WithRSAEncryption
06:b5:c4:4f:2a:df:61:af:aa:3d:05:63:5b:db:0d:a4:da:4c:
4c:ff:0a:8d:82:e2:f8:22:07:ae:95:9c:d3:cb:e9:1f:c5:b9:
b3:dd:e0:86:54:bd:bb:59:0c:f2:dd:e2:7d:86:12:c4:c7:61:
2d:8a:18:68:ae:30:65:fc:ed:4f:77:9e:5c:68:cb:46:b8:e1:
b8:0b:2f:b1:23:35:73:fe:e4:20:e0:e3:73:ae:58:13:cd:c2:
39:78:63:e7:72:fc:fb:1e:f4:04:44:58:7a:4c:e1:87:c2:78:
03:57:fe:1b:5b:be:b0:33:22:ef:c3:b0:7a:9b:17:76:31:09:
18:87:99:bf:3d:36:7b:05:51:0d:13:be:04:80:61:ef:2f:b2:
4b:cf:77:bd:4a:7c:41:eb:41:c2:8e:d2:2f:25:e0:94:fa:68:
bd:52:cf:d4:1b:7f:ec:0d:a8:9f:11:cc:76:65:03:46:2c:5a:
f4:3b:66:b1:84:f0:ee:5d:07:7d:7e:50:0f:6a:8b:c8:49:68:
67:9e:8f:c8:4e:50:24:30:9b:21:ad:59:ed:95:7b:6e:18:d9:
fd:41:66:e6:27:34:d6:80:b7:06:f8:37:6a:93:09:e2:55:0a:
02:4e:f2:81:8a:27:2c:ef:a0:06:c5:2f:bf:35:21:6e:0f:2e:
ef:8c:c7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:31 2025 by rpki-client