Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/I4Xai5H_N0UCzz1a58a1UDslN0I.roa
File: I4Xai5H_N0UCzz1a58a1UDslN0I.roa (raw, json)
Hash identifier: UceTQs89uNsWhAm/P6o78ELGmpi19TRrrT9L5OnEbTw=
Subject key identifier: 23:85:DA:8B:91:FF:37:45:02:CF:3D:5A:E7:C6:B5:50:3B:25:37:42
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 1944
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/I4Xai5H_N0UCzz1a58a1UDslN0I.roa
Signing time: Tue 03 Sep 2024 08:16:51 +0000
ROA not before: Tue 03 Sep 2024 08:16:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 38372
IP address blocks: 112.73.32.0/19 maxlen: 24
120.31.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6468 (0x1944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: Sep 3 08:16:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2385DA8B91FF374502CF3D5AE7C6B5503B253742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:ba:12:ac:f9:4f:3f:60:09:77:16:a7:a2:
ab:e1:e8:cc:4f:23:54:6f:f1:b3:18:2b:76:d9:a7:
2e:b0:10:90:c3:a7:48:51:54:68:4f:2f:c1:c3:43:
87:b7:91:ea:17:d0:21:d3:f4:9a:15:bc:bd:78:97:
41:87:59:1f:c4:7c:78:bf:65:de:e5:42:2e:bd:f9:
57:d0:21:3a:71:3e:dd:37:b3:e1:ee:0b:fe:a4:a2:
f9:c3:82:1d:05:92:31:85:c2:a4:42:70:4b:a0:2e:
33:8c:db:ac:dc:1c:1d:15:e7:e7:c3:ec:e1:21:02:
1f:e2:c4:3d:03:b0:9b:8d:df:f1:67:7c:19:61:53:
1e:9b:70:4a:00:00:fd:70:c4:d7:74:c8:90:f3:ab:
78:fd:ec:66:e7:b7:ed:20:37:ea:cc:1b:dc:5d:ca:
9b:cd:3e:09:75:51:03:c6:14:a1:2c:27:12:de:ee:
5e:08:60:4a:47:4d:92:cd:b5:f1:17:03:af:23:df:
6a:72:1b:ac:4a:4d:d3:6a:d7:e4:aa:92:fa:79:ec:
e9:92:af:3e:6c:6e:df:87:e2:0f:51:d4:0d:84:7e:
26:7d:ea:04:a6:4f:ef:8e:05:3e:4c:31:6f:5a:9f:
1b:67:df:c5:11:ba:47:1c:e2:07:b6:5c:df:5a:59:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:85:DA:8B:91:FF:37:45:02:CF:3D:5A:E7:C6:B5:50:3B:25:37:42
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/I4Xai5H_N0UCzz1a58a1UDslN0I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.73.32.0/19
120.31.164.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d4:81:b1:57:f0:df:47:b2:27:b0:e4:cd:11:21:60:19:e4:
70:e7:68:32:cd:c6:79:cf:43:f7:5e:b9:09:8a:fc:34:ab:83:
a4:22:f5:5d:4b:7e:82:6d:67:57:a7:08:c1:09:84:03:0d:20:
fa:c5:3e:16:d4:4e:f5:36:44:59:8c:51:aa:8c:0c:55:ca:11:
ac:b7:32:a4:67:8e:71:b8:77:7c:2e:27:cc:b7:e7:e0:f0:e5:
52:29:0b:1a:5a:12:b9:ca:8f:4f:8e:32:eb:43:8c:7c:a1:de:
a1:41:60:a8:77:1b:78:c7:88:2c:0f:bf:cb:3e:a9:58:28:ca:
31:29:f5:3f:4f:c1:0f:4e:50:87:d5:cb:e0:a1:41:f7:52:23:
75:a3:37:6e:ce:90:b1:2c:e5:15:7e:87:97:09:8c:ee:08:36:
36:ed:7e:c2:14:db:f5:70:31:2b:f0:f2:e1:e7:fc:fc:d7:d5:
50:da:48:a9:f8:b3:8e:9d:66:ae:da:e5:42:69:f8:43:79:57:
0c:3f:44:1b:50:75:3a:9e:b5:e7:7b:ad:d5:59:e4:f5:c8:71:
bb:a2:5f:fa:1e:af:75:87:a6:a8:e3:6e:d0:b3:c3:a3:5b:65:
19:e3:01:56:2f:ec:39:94:96:02:19:c0:8a:2c:c6:2f:fe:dc:
8d:fa:ac:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:43 2025 by rpki-client