Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3282/bGeGgRXJn_fKcQJGoNpT45uuMbM.roa
File: bGeGgRXJn_fKcQJGoNpT45uuMbM.roa (raw, json)
Hash identifier: 4rs03AqtGSIGgkcXeqLIzwXtuAsdWOh+07JYHmmqQtk=
Subject key identifier: 6C:67:86:81:15:C9:9F:F7:CA:71:02:46:A0:DA:53:E3:9B:AE:31:B3
Certificate issuer: /CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
Certificate serial: 0768
Authority key identifier: 4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/bGeGgRXJn_fKcQJGoNpT45uuMbM.roa
Signing time: Wed 28 May 2025 15:55:58 +0000
ROA not before: Wed 28 May 2025 15:55:58 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 151261
IP address blocks: 160.19.82.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896 (0x768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
Validity
Not Before: May 28 15:55:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6C67868115C99FF7CA710246A0DA53E39BAE31B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:15:8f:24:91:a3:17:71:78:71:46:9f:22:
6a:f3:90:0e:f8:da:f3:3a:95:95:87:b6:33:d9:a2:
89:af:82:7d:47:ee:ae:34:80:00:a6:cf:4f:c8:13:
2d:e6:de:f5:9c:cd:0d:3f:51:d8:43:4e:04:6d:18:
05:48:0e:95:8b:07:e6:0f:3f:14:7d:d1:27:36:63:
aa:20:43:1b:57:72:34:2b:dc:5b:dc:6d:d4:de:2a:
d8:2e:2f:e0:3a:11:1d:5e:bf:91:0d:22:92:86:6e:
f8:0c:c8:03:f8:40:bd:75:e5:2c:3c:3c:61:77:41:
fe:2e:14:51:f8:bd:47:30:ef:3a:f7:4f:29:06:32:
47:85:89:89:9e:37:9f:00:6c:9d:e9:51:08:90:30:
3b:32:e8:ca:fa:bc:cb:2e:16:d0:af:92:ec:a9:bf:
c7:e4:43:08:9d:e2:98:14:17:be:4e:0a:b4:aa:04:
69:38:8b:81:7b:b7:e8:47:13:23:ff:26:51:9d:ad:
50:7d:0a:28:89:c2:fe:d1:43:e3:a7:ce:3f:48:c5:
a0:1d:dc:c7:f3:90:91:0a:2b:23:bf:dd:f6:09:f1:
21:ab:33:90:1f:03:b0:83:e8:dc:37:ea:6a:7f:9c:
be:f9:22:6e:20:bd:a8:ce:08:b3:62:44:a0:2d:3d:
9e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:67:86:81:15:C9:9F:F7:CA:71:02:46:A0:DA:53:E3:9B:AE:31:B3
X509v3 Authority Key Identifier:
keyid:4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/bGeGgRXJn_fKcQJGoNpT45uuMbM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.19.82.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ad:18:95:fe:89:83:c9:0d:c9:19:d9:2f:d2:34:65:3b:76:
5c:01:cb:69:9f:80:6a:d6:39:9a:47:4c:d8:ac:7d:eb:10:76:
6b:70:21:8f:02:0f:2c:48:59:4c:cc:37:28:83:f0:1a:ed:e5:
22:6f:81:0d:b3:db:7f:42:6c:ba:c6:58:fc:03:fc:be:bf:da:
0a:39:71:b6:a6:69:e4:73:80:af:d1:49:f5:e3:5f:46:52:dd:
8b:08:1a:65:f6:fe:50:51:29:66:b8:39:b1:6e:9c:06:16:68:
c9:36:1e:76:87:c8:2a:3e:e4:6e:1f:85:12:89:85:7f:84:7c:
2d:27:69:88:c0:16:d8:5e:fc:35:75:08:72:4f:2b:1c:da:c9:
f4:cb:3d:fa:e3:e0:e2:41:f0:99:06:78:69:15:0f:81:7f:f5:
f0:02:af:4f:61:63:22:e3:64:ea:7d:c7:74:da:f8:70:b0:b4:
49:c5:66:4b:c5:9f:3e:b2:84:37:a1:07:19:a2:5c:7c:f6:87:
b6:e6:7e:30:d9:60:5e:e7:8b:df:5f:b6:7d:d3:2e:eb:59:19:
05:57:fd:53:4f:6c:92:f0:ae:69:f1:58:ac:eb:3f:6e:38:0f:
dc:9c:f3:38:9a:9c:a6:50:79:40:21:bd:d3:af:d1:66:bb:0e:
06:31:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:09 2025 by rpki-client