Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/PAZ0llh8p6EuiK2qQClbgtHTfak.roa
File: PAZ0llh8p6EuiK2qQClbgtHTfak.roa (raw, json)
Hash identifier: gqp0BgZsLEsKDpR2lDA0Qdjcah+9uqAtQR8mtb2ZaeQ=
Subject key identifier: 3C:06:74:96:58:7C:A7:A1:2E:88:AD:AA:40:29:5B:82:D1:D3:7D:A9
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CD4
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/PAZ0llh8p6EuiK2qQClbgtHTfak.roa
Signing time: Thu 02 Jan 2025 14:51:15 +0000
ROA not before: Thu 02 Jan 2025 14:51:15 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4811
IP address blocks: 118.145.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7380 (0x1cd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 14:51:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3C067496587CA7A12E88ADAA40295B82D1D37DA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:e6:38:82:b7:8f:bb:74:61:a7:5c:c9:3d:
20:6a:be:c9:13:e7:01:a7:ff:44:f3:35:70:cf:eb:
ae:7d:2f:7e:8e:43:6a:aa:1e:38:42:9e:19:1f:82:
e1:b2:70:c3:b6:64:43:42:df:aa:ef:0b:03:63:2b:
0e:49:e0:bb:69:cc:c6:e0:73:59:4c:9e:d2:61:81:
47:5f:37:b6:b4:93:31:c9:44:d3:c6:25:44:e4:7b:
54:52:e7:12:de:ba:1e:60:10:a6:80:55:e2:81:b3:
78:82:e6:fe:90:2e:4b:61:60:02:e5:2d:40:85:d8:
c2:cd:e2:19:1b:7c:83:8a:91:be:2e:b3:f4:cb:35:
f6:0d:61:18:3a:6c:7b:57:b7:16:42:00:63:a1:7b:
1c:3b:0f:30:15:95:83:56:7a:0d:85:24:33:30:a6:
7f:7d:d9:88:51:ec:f5:57:1d:14:33:8c:ca:cd:9e:
57:2d:2d:14:07:ad:c6:61:2c:59:f8:99:55:f5:6f:
d2:b0:a1:68:b9:c6:bc:45:ab:46:2e:bc:d4:f8:44:
e7:74:92:1a:c4:eb:25:84:cf:17:c6:4d:36:39:99:
3f:27:a5:62:ee:ab:63:b4:20:66:fc:d2:b9:17:56:
4c:56:a8:4f:b0:49:8a:ce:90:e4:7a:c3:48:dc:41:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:74:96:58:7C:A7:A1:2E:88:AD:AA:40:29:5B:82:D1:D3:7D:A9
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/PAZ0llh8p6EuiK2qQClbgtHTfak.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.145.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1f:ca:bb:8f:90:70:f0:e7:c3:c3:31:87:8f:5c:d3:93:3c:f7:
19:34:7d:cf:82:3c:d7:07:75:8c:ef:8c:ee:32:68:cf:18:d8:
27:81:9b:b6:9f:96:6e:ba:ed:30:fb:58:05:d6:37:25:37:36:
5f:e8:ee:4c:26:20:c7:0c:aa:b4:1e:45:8b:83:4e:4b:a1:f9:
72:b6:5b:ea:4c:9e:fe:71:85:5c:68:37:99:a2:24:a8:91:f4:
5d:bb:aa:cd:49:4a:5b:56:a8:9f:65:7a:6e:ec:19:49:16:cb:
81:23:70:45:fe:dd:26:ba:2f:b3:9d:46:b4:8b:fe:0b:b6:33:
f6:70:44:f6:ad:ed:7f:ae:42:8b:dd:27:0c:d7:06:f9:6f:10:
bd:79:5d:1c:d8:85:0f:3d:df:a7:51:11:5f:b3:33:d2:f6:b8:
3b:1f:df:96:38:68:66:4a:d5:3c:ca:5d:36:89:89:0f:a8:78:
06:89:85:12:4b:cd:eb:b8:c7:fc:53:d8:d6:7a:be:9f:3d:d7:
22:12:4f:25:65:3e:fd:1f:1a:4f:bd:5e:4a:ce:aa:50:20:8a:
76:c1:93:e0:d9:d8:20:c2:49:84:2a:db:d2:8f:47:26:b2:78:
77:fd:e7:7c:55:58:da:cc:7b:b4:52:c7:3c:b3:3b:9a:af:73:
6f:17:6d:02
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx
NDUxMTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNDMDY3NDk2NTg3Q0E3
QTEyRTg4QURBQTQwMjk1QjgyRDFEMzdEQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ6+Y4grePu3Rhp1zJPSBqvskT5wGn/0TzNXDP6659L36OQ2qq
HjhCnhkfguGycMO2ZENC36rvCwNjKw5J4LtpzMbgc1lMntJhgUdfN7a0kzHJRNPG
JUTke1RS5xLeuh5gEKaAVeKBs3iC5v6QLkthYALlLUCF2MLN4hkbfIOKkb4us/TL
NfYNYRg6bHtXtxZCAGOhexw7DzAVlYNWeg2FJDMwpn992YhR7PVXHRQzjMrNnlct
LRQHrcZhLFn4mVX1b9KwoWi5xrxFq0YuvNT4ROd0khrE6yWEzxfGTTY5mT8npWLu
q2O0IGb80rkXVkxWqE+wSYrOkOR6w0jcQWHjAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUPAZ0llh8p6EuiK2qQClbgtHTfakwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvUEFaMGxsaDhwNkV1
aUsycVFDbGJndEhUZmFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB3aRgDANBgkqhkiG9w0BAQsFAAOCAQEAH8q7j5Bw8OfDwzGHj1zTkzz3GTR9
z4I81wd1jO+M7jJozxjYJ4Gbtp+WbrrtMPtYBdY3JTc2X+juTCYgxwyqtB5Fi4NO
S6H5crZb6kye/nGFXGg3maIkqJH0XbuqzUlKW1aon2V6buwZSRbLgSNwRf7dJrov
s51GtIv+C7Yz9nBE9q3tf65Ci90nDNcG+W8QvXldHNiFDz3fp1ERX7Mz0va4Ox/f
ljhoZkrVPMpdNomJD6h4BomFEkvN67jH/FPY1nq+nz3XIhJPJWU+/R8aT71eSs6q
UCCKdsGT4NnYIMJJhCrb0o9HJrJ4d/3nfFVY2sx7tFLHPLM7mq9zbxdtAg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:32 2025 by rpki-client