Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/bCACi8IYyPR19jU-7QrGH4JnDNk.roa
File: bCACi8IYyPR19jU-7QrGH4JnDNk.roa (raw, json)
Hash identifier: FUCJRFUzYz1fX9WYuE9LFGdGrjfMp5t6U9c8etdt6dc=
Subject key identifier: 6C:20:02:8B:C2:18:C8:F4:75:F6:35:3E:ED:0A:C6:1F:82:67:0C:D9
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CB8
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/bCACi8IYyPR19jU-7QrGH4JnDNk.roa
Signing time: Thu 02 Jan 2025 13:58:22 +0000
ROA not before: Thu 02 Jan 2025 13:58:22 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4811
IP address blocks: 118.196.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7352 (0x1cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6C20028BC218C8F475F6353EED0AC61F82670CD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:44:4b:53:00:9a:c6:49:41:3d:71:8f:64:
5d:73:39:3b:41:e5:93:26:de:1c:4b:27:ec:2c:31:
d5:1a:a2:e3:b5:68:6f:a3:79:ed:79:dd:75:65:77:
50:f7:b8:32:44:4a:e5:bf:df:52:9d:4e:e5:df:bc:
7c:29:b8:f4:cd:2b:d1:de:97:77:ad:0e:64:d6:cc:
52:32:2d:97:68:e6:8c:b5:91:e3:06:c6:05:ff:0b:
72:2e:40:0b:39:19:cf:4c:8a:12:7e:d2:b7:42:7e:
a8:42:d2:96:44:9c:bd:4d:40:50:59:11:63:22:45:
03:07:1e:eb:ad:a4:cb:6f:4a:0b:cd:00:87:e0:40:
3f:64:ac:1a:13:5b:44:e7:50:bb:f2:ad:68:0d:3a:
66:de:3c:f6:b0:5e:96:2a:39:d5:ff:f4:b7:f0:25:
78:b4:73:92:8c:b9:3f:68:77:b1:65:57:24:55:16:
8a:1a:8f:2f:f3:68:73:8c:0a:28:24:b2:28:ff:4d:
8d:bd:90:8a:c5:c4:8d:af:4a:03:d5:07:2f:df:9d:
f2:2b:92:f0:a8:2a:f0:c3:da:f3:39:b9:a5:cb:3d:
9f:00:1f:a1:01:11:d7:0d:ec:48:5f:f4:6e:55:52:
a8:48:ec:20:3a:09:cf:4d:af:d3:cb:79:28:de:c7:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:02:8B:C2:18:C8:F4:75:F6:35:3E:ED:0A:C6:1F:82:67:0C:D9
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/bCACi8IYyPR19jU-7QrGH4JnDNk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.196.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6f:78:57:25:44:84:c5:98:06:cb:9d:36:85:1a:61:19:ac:43:
49:33:95:27:90:5b:fe:9d:98:c4:eb:26:d6:d9:66:cb:e0:87:
b7:12:12:54:21:9f:33:e7:24:85:3c:df:72:53:b4:54:a8:56:
aa:92:83:fe:f3:95:71:ec:bb:1f:3a:ff:bb:6a:3d:8f:9a:5d:
74:96:9b:4c:a4:a2:3e:ec:40:d1:73:d5:c1:1d:37:e1:6e:9e:
39:eb:ad:3d:95:bb:60:8f:36:a2:25:7c:e4:62:d6:23:50:8d:
ff:a9:7d:32:dc:29:be:09:94:70:47:69:71:59:80:b5:8a:af:
a2:ca:4a:46:1e:32:42:a1:9b:3f:1e:60:44:69:80:50:51:f0:
72:38:0f:12:db:e4:52:b1:64:26:7d:d8:5a:f2:7b:49:ff:88:
e4:3d:9d:b0:38:70:d1:42:b0:27:b7:d6:ad:26:07:e9:6c:7e:
76:57:ef:d8:93:14:8c:46:22:5e:59:6b:79:4f:ef:84:01:3c:
91:1d:f4:99:2c:6e:49:9c:7c:14:f0:7b:0a:34:1d:4a:b7:6d:
ff:db:ce:11:6c:5d:f0:b3:45:65:8f:c2:fa:26:94:4c:30:cf:
45:e8:69:55:9f:e5:b9:38:63:44:7c:60:49:ac:bf:57:78:25:
e3:64:36:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:21 2025 by rpki-client