Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/xmSdNw8vTvHxebUKi4UpDpx1CJs.roa
File: xmSdNw8vTvHxebUKi4UpDpx1CJs.roa (raw, json)
Hash identifier: A1QzeTfVykyXWtMtANpc8bho4vGpwZsb4Z9PkCGSZhE=
Subject key identifier: C6:64:9D:37:0F:2F:4E:F1:F1:79:B5:0A:8B:85:29:0E:9C:75:08:9B
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CC8
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/xmSdNw8vTvHxebUKi4UpDpx1CJs.roa
Signing time: Thu 02 Jan 2025 13:58:27 +0000
ROA not before: Thu 02 Jan 2025 13:58:27 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 118.145.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7368 (0x1cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C6649D370F2F4EF1F179B50A8B85290E9C75089B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:44:50:52:2a:7a:f5:5a:70:c1:83:ad:c7:
24:a7:40:3b:d8:3f:77:ff:77:f7:b2:fe:77:93:10:
ba:5f:e5:b6:54:89:af:3b:d9:9e:11:93:ad:4a:ea:
55:bd:5e:ed:28:19:15:54:89:9a:f6:6d:4d:cd:27:
10:71:b9:74:6c:4b:40:7e:1c:52:80:a9:3e:65:5e:
cd:59:b1:f0:1a:6c:7c:00:80:d0:17:8f:c6:1c:ad:
7b:37:da:12:39:3b:ab:62:9f:7b:23:ce:8e:51:a8:
31:28:df:a0:24:60:64:3a:59:3c:0c:4b:3e:cd:0b:
8d:e8:12:f8:54:10:91:47:b4:50:a8:6b:96:a1:05:
aa:ce:ee:cf:54:a6:43:6b:6d:19:62:68:cc:30:da:
ec:e7:a5:2f:9c:36:fb:0b:45:2e:68:84:49:5e:59:
c9:7d:56:a5:b8:58:04:30:57:a8:e8:4a:1d:d5:45:
1b:21:55:bf:c7:f2:2d:d6:15:72:89:f5:a9:18:3c:
6c:72:4d:33:96:0d:c3:33:05:c4:26:46:8e:ac:9b:
ad:79:53:f3:17:93:92:69:e7:b7:19:4d:ee:3e:2a:
3f:1f:0b:0f:76:a6:c3:4b:fd:6f:21:72:8b:70:e2:
58:b5:15:08:1f:65:1e:7e:04:56:8c:82:4f:2a:27:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:64:9D:37:0F:2F:4E:F1:F1:79:B5:0A:8B:85:29:0E:9C:75:08:9B
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/xmSdNw8vTvHxebUKi4UpDpx1CJs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.145.32.0/19
Signature Algorithm: sha256WithRSAEncryption
bd:63:9b:04:60:57:65:f9:34:d6:07:53:b7:c6:4d:8d:10:ef:
39:23:86:8e:d7:b5:24:ee:96:43:5c:1b:72:16:f2:f8:c9:27:
6d:26:d1:5d:1c:ba:48:f4:bd:c2:58:fa:08:be:64:c9:fd:0b:
58:40:fe:c9:49:74:6e:b8:5b:f4:66:81:bb:69:ec:f7:c9:f0:
ba:89:00:87:5d:ff:e7:97:c7:40:37:7f:2a:66:9a:59:7a:d5:
b7:84:fb:01:4c:ee:9c:d5:6c:00:14:15:dc:66:0e:ec:83:fc:
73:95:2b:23:b8:7e:db:3f:bc:96:f1:be:1c:b0:2c:b8:7f:e8:
72:27:d3:16:56:04:08:06:76:7e:8d:2c:be:05:08:6d:ba:9a:
6a:98:02:22:07:df:99:d7:07:95:2f:08:d2:97:c6:c5:65:41:
09:fd:d5:94:d9:f5:b1:13:6f:77:af:a0:e9:ad:89:92:62:c6:
16:be:53:ac:47:b7:f4:99:61:58:bd:7e:e6:8a:66:af:9f:4d:
6d:9b:30:b4:80:7f:c1:a4:33:e1:71:47:56:78:89:db:12:72:
3b:67:0c:23:07:39:6b:52:d6:b5:fa:21:9c:02:ab:d9:f8:37:
4c:21:17:b8:1e:ec:79:76:44:eb:7f:b0:17:28:20:b6:5c:33:
c3:ea:c9:7f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx
MzU4MjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM2NjQ5RDM3MEYyRjRF
RjFGMTc5QjUwQThCODUyOTBFOUM3NTA4OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9RERQUip69VpwwYOtxySnQDvYP3f/d/ey/neTELpf5bZUia87
2Z4Rk61K6lW9Xu0oGRVUiZr2bU3NJxBxuXRsS0B+HFKAqT5lXs1ZsfAabHwAgNAX
j8YcrXs32hI5O6tin3sjzo5RqDEo36AkYGQ6WTwMSz7NC43oEvhUEJFHtFCoa5ah
BarO7s9UpkNrbRliaMww2uznpS+cNvsLRS5ohEleWcl9VqW4WAQwV6joSh3VRRsh
Vb/H8i3WFXKJ9akYPGxyTTOWDcMzBcQmRo6sm615U/MXk5Jp57cZTe4+Kj8fCw92
psNL/W8hcotw4li1FQgfZR5+BFaMgk8qJ8rrAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUxmSdNw8vTvHxebUKi4UpDpx1CJswHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQveG1TZE53OHZUdkh4
ZWJVS2k0VXBEcHgxQ0pzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAvWObBGBXZfk01gdTt8ZNjRDvOSOG
jte1JO6WQ1wbchby+MknbSbRXRy6SPS9wlj6CL5kyf0LWED+yUl0brhb9GaBu2ns
98nwuokAh13/55fHQDd/KmaaWXrVt4T7AUzunNVsABQV3GYO7IP8c5UrI7h+2z+8
lvG+HLAsuH/ocifTFlYECAZ2fo0svgUIbbqaapgCIgffmdcHlS8I0pfGxWVBCf3V
lNn1sRNvd6+g6a2JkmLGFr5TrEe39JlhWL1+5opmr59NbZswtIB/waQz4XFHVniJ
2xJyO2cMIwc5a1LWtfohnAKr2fg3TCEXuB7seXZE63+wFyggtlwzw+rJfw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:05 2025 by rpki-client