Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/TYs4cMQAaxVFxE32jTytL8ODeOo.roa
File: TYs4cMQAaxVFxE32jTytL8ODeOo.roa (raw, json)
Hash identifier: ucRbKd3xi/68rDidzxU2p/m61LIeqPBYP4zTQhIknaY=
Subject key identifier: 4D:8B:38:70:C4:00:6B:15:45:C4:4D:F6:8D:3C:AD:2F:C3:83:78:EA
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 1956
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/TYs4cMQAaxVFxE32jTytL8ODeOo.roa
Signing time: Fri 06 Sep 2024 01:55:45 +0000
ROA not before: Fri 06 Sep 2024 01:55:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 135373
IP address blocks: 112.73.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6486 (0x1956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: Sep 6 01:55:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4D8B3870C4006B1545C44DF68D3CAD2FC38378EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:69:b4:4e:60:97:df:b1:39:34:d6:b6:a1:
24:ca:2d:dd:d0:b9:84:d2:1d:54:82:e2:df:18:79:
09:2b:20:12:8f:92:2c:d9:9d:12:d8:67:2f:b9:61:
14:e7:7e:21:4c:b0:d8:38:0a:59:6d:3b:04:16:af:
7e:9a:ea:38:97:47:88:fa:75:ff:c6:70:b8:a0:55:
1f:3c:37:de:06:50:dc:41:8a:04:81:0d:ad:fe:c2:
97:9a:12:82:84:5e:e1:ea:18:4b:25:66:39:22:6c:
75:bf:a2:4b:b6:65:19:1d:e1:74:99:f0:d9:03:f3:
40:e2:e4:08:2c:6d:0a:3a:54:56:d8:07:d0:d6:91:
bc:fa:11:f2:c0:f7:02:8f:53:2d:bc:26:66:37:f7:
8a:9b:7b:61:fe:c6:6d:48:62:35:ec:a1:dc:ad:b3:
6e:74:60:89:65:e1:a4:f9:b2:dd:3a:3d:ef:c9:69:
e2:0c:f4:12:ca:6d:94:b5:d7:0a:4d:a2:81:21:b0:
c9:4d:6e:8e:60:f6:a5:3d:c2:f2:41:ad:d2:04:57:
ab:98:4e:3e:dc:2f:05:08:01:da:83:64:2d:ee:32:
53:20:71:34:d8:c3:ad:1b:b9:37:1f:c5:0c:4a:84:
93:39:12:91:98:3b:06:04:7f:f8:ac:a2:a9:72:b7:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8B:38:70:C4:00:6B:15:45:C4:4D:F6:8D:3C:AD:2F:C3:83:78:EA
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/TYs4cMQAaxVFxE32jTytL8ODeOo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.73.32.0/19
Signature Algorithm: sha256WithRSAEncryption
09:95:fe:f4:d9:9a:12:e6:22:8e:a6:5b:70:3a:e4:83:a2:7a:
b9:fe:ef:cb:94:5a:e2:45:47:e1:ae:4d:84:83:a4:c7:ca:1c:
ef:76:04:11:e5:3a:a4:d5:e8:b8:b1:46:32:b7:37:8d:e2:0c:
bf:a5:1c:f0:f0:b1:7a:82:82:c1:b8:67:5b:2f:e0:52:9e:1f:
e1:23:7a:d2:5e:75:c0:dc:d5:d8:7e:f2:af:db:bd:6d:4f:d5:
ad:35:a0:52:30:28:03:be:d9:68:d7:b4:69:9e:1b:42:cf:66:
f5:f1:c6:b5:16:ef:5a:b6:8f:84:3e:cb:78:52:06:2d:9c:51:
ad:19:6e:35:ce:64:d0:b7:80:05:06:f2:68:be:82:d5:bb:82:
c1:16:93:26:05:bf:58:71:71:c4:78:9d:2f:ac:da:50:23:3a:
26:6f:83:2f:2a:8b:5a:12:f4:43:46:4c:5c:b9:32:27:be:af:
80:5e:3d:14:42:84:1d:d5:59:0d:16:4b:89:01:2d:b4:51:0c:
fe:ff:56:89:65:19:db:ce:60:64:00:22:1e:31:b1:65:9b:95:
8d:e6:8d:e2:86:05:da:b5:5c:ec:49:8b:d1:1f:eb:14:7d:80:
b8:24:ff:b8:e5:f7:55:c9:1f:d3:9b:fa:b6:31:78:24:06:01:
14:91:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:27 2025 by rpki-client