Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3246/eIX9B5oTT8Afk53vQvu3daVchQ4.roa
File: eIX9B5oTT8Afk53vQvu3daVchQ4.roa (raw, json)
Hash identifier: CQJJJrzHb+FxMotc0vFAgvb52xx3drbyHUT6aG+tOUU=
Subject key identifier: 78:85:FD:07:9A:13:4F:C0:1F:93:9D:EF:42:FB:B7:75:A5:5C:85:0E
Certificate issuer: /CN=2CB67186E296C89E1F34779ED66A077F7E050CCB
Certificate serial: 07F3
Authority key identifier: 2C:B6:71:86:E2:96:C8:9E:1F:34:77:9E:D6:6A:07:7F:7E:05:0C:CB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLZxhuKWyJ4fNHee1moHf34FDMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/eIX9B5oTT8Afk53vQvu3daVchQ4.roa
Signing time: Fri 17 Jan 2025 01:24:16 +0000
ROA not before: Fri 17 Jan 2025 01:24:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 211392
IP address blocks: 210.87.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035 (0x7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB67186E296C89E1F34779ED66A077F7E050CCB
Validity
Not Before: Jan 17 01:24:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7885FD079A134FC01F939DEF42FBB775A55C850E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:47:95:00:85:9f:0c:90:bb:ea:6e:ff:25:
59:1c:95:7f:59:2a:f1:7b:5c:21:3c:c2:9b:58:ea:
3b:f6:43:c1:58:ac:7d:ec:42:b7:60:53:75:e2:e7:
39:be:4e:83:ae:91:22:31:28:5c:ae:bd:e3:9e:f7:
c5:d3:c6:8e:11:1d:8b:45:55:5d:24:29:a2:01:cd:
bb:ca:72:fe:cd:24:23:bb:56:86:80:82:02:27:d2:
0c:be:60:57:cf:2d:e9:28:ee:8d:71:b2:ac:23:02:
5b:63:1c:26:c4:f7:d6:a7:70:c2:2c:35:77:b9:f8:
36:72:7b:f7:2f:27:9c:da:db:b6:aa:95:89:5f:e6:
7c:6c:5b:a6:bf:7c:cf:c6:ac:08:a9:7f:ab:31:ff:
03:0b:f3:58:f0:e6:02:cd:08:dd:a9:64:bb:79:5f:
53:67:73:9d:40:21:5e:82:b2:f4:15:46:03:94:8a:
c3:e4:73:ef:b1:1f:e4:7b:af:e4:ae:21:22:89:72:
b0:6b:dc:98:b0:14:7b:19:7f:78:f6:9e:59:b8:18:
d4:34:e1:05:b4:4c:f1:2a:46:97:db:1a:eb:5d:2c:
e2:0f:fb:39:d7:d9:3e:4a:36:92:b0:83:39:5a:ca:
b1:ec:05:a9:a5:3d:f6:dd:65:cf:41:43:41:59:93:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:FD:07:9A:13:4F:C0:1F:93:9D:EF:42:FB:B7:75:A5:5C:85:0E
X509v3 Authority Key Identifier:
keyid:2C:B6:71:86:E2:96:C8:9E:1F:34:77:9E:D6:6A:07:7F:7E:05:0C:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLZxhuKWyJ4fNHee1moHf34FDMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/eIX9B5oTT8Afk53vQvu3daVchQ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.72.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:b2:a0:45:c0:48:3f:be:70:d8:19:2e:09:bd:5f:d1:74:9d:
19:01:60:ea:e8:91:e1:35:5e:0d:c8:0f:62:c5:6e:3b:e1:eb:
69:ab:a4:db:28:b6:db:63:21:12:a9:7b:8b:53:7c:01:e8:8b:
a9:70:4e:98:66:73:24:36:31:7c:02:3a:8c:bc:e3:1f:cd:39:
5f:17:68:dc:ec:36:46:d5:f1:f6:52:bd:38:23:c9:e5:dd:9b:
eb:f6:21:0c:56:89:ca:c3:f2:47:90:f6:5b:a9:56:ce:ec:c2:
b7:4c:cf:87:2a:d6:5b:66:1f:56:5c:26:3f:ea:f7:90:0f:fe:
fb:77:20:ab:f6:31:ff:55:a6:bc:9b:de:67:aa:c3:1a:73:5b:
97:c6:d7:40:e4:a0:69:6f:f2:12:a5:78:25:41:d9:ba:74:73:
dd:8f:3e:d4:bb:73:de:29:dc:43:89:89:92:83:48:e6:1b:fb:
a8:a1:f4:59:67:10:b7:e5:b6:38:74:f8:82:78:2f:e2:73:d8:
da:0f:11:6e:4f:a9:23:70:e8:67:83:44:f5:a2:85:3c:e4:bf:
3e:bc:66:5f:20:42:7f:06:08:1b:1a:19:30:85:29:b1:70:a1:
b9:37:ac:92:e9:06:52:0c:7a:2b:7a:b6:8b:2f:5b:8d:9d:5b:
a3:64:7f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:29 2025 by rpki-client