Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/G6Xd8MC-idjbwwBddxYJxSObjtc.roa
File: G6Xd8MC-idjbwwBddxYJxSObjtc.roa (raw, json)
Hash identifier: DzOjC79l1HvGmJywrUVBN8cvFPgxYrBwfetg3weCvA8=
Subject key identifier: 1B:A5:DD:F0:C0:BE:89:D8:DB:C3:00:5D:77:16:09:C5:23:9B:8E:D7
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0650
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/G6Xd8MC-idjbwwBddxYJxSObjtc.roa
Signing time: Tue 04 Mar 2025 06:58:42 +0000
ROA not before: Tue 04 Mar 2025 06:58:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 146838
IP address blocks: 117.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1616 (0x650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Mar 4 06:58:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1BA5DDF0C0BE89D8DBC3005D771609C5239B8ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:b8:c9:08:32:d0:9d:6a:12:ed:40:52:d6:
2d:c6:4c:a4:2c:3f:7f:a9:c3:5c:fd:79:63:fe:1c:
0e:db:68:9f:67:bf:92:52:6c:1d:ac:f9:5f:01:b0:
43:2f:b2:0d:bf:76:ef:bd:b5:dc:00:ab:a4:09:8a:
e8:5a:6e:6c:2c:f6:b0:c9:ad:55:49:b6:a4:f1:70:
db:13:6c:8e:0b:92:c5:79:6b:03:b4:38:92:06:e3:
48:02:20:45:02:8a:84:c7:40:57:7f:ea:20:27:74:
cd:0a:b6:25:9b:91:52:60:fc:0f:80:f5:b0:14:da:
0e:4b:d2:45:97:bd:3f:5d:fb:d1:0b:4a:90:ff:11:
c6:f3:0a:8e:54:f5:35:3f:bd:da:33:f5:e8:8e:66:
1a:20:ec:59:37:be:c5:b7:0d:af:b2:d8:8d:2a:30:
c3:e9:26:7a:b3:e9:43:59:3b:dc:6e:0d:6f:0b:2b:
b5:a0:e9:92:9c:91:2b:74:42:4b:3a:ba:cc:b7:ae:
02:c6:78:52:3f:16:a2:d7:09:5f:b4:33:10:1b:5e:
95:7f:2e:0a:00:62:02:4c:da:e0:34:3a:c2:93:84:
ff:b0:96:da:0c:9e:b2:0c:fa:18:19:36:8b:22:14:
d9:cd:b5:e2:8a:f1:92:97:2d:57:4a:20:ea:b4:5d:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:DD:F0:C0:BE:89:D8:DB:C3:00:5D:77:16:09:C5:23:9B:8E:D7
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/G6Xd8MC-idjbwwBddxYJxSObjtc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
117.126.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:5d:59:54:c5:ac:9d:5e:32:e9:8b:9a:cc:59:d6:0d:69:f0:
bd:6b:d9:97:5e:be:c2:61:1a:da:8d:80:35:fe:e3:c3:91:f5:
f7:e0:af:e3:88:0d:fb:6a:22:16:26:15:70:8d:5c:0e:44:61:
57:97:ab:aa:75:c9:f8:cf:87:0b:3a:af:b8:46:a5:53:0a:0c:
5e:3e:33:3c:ce:72:2d:fb:d3:84:29:bd:c5:01:d8:e5:32:74:
32:8a:9f:69:82:ab:86:ea:87:91:87:0d:21:3d:a5:1f:3d:26:
f0:30:ee:db:6b:bd:20:e1:c1:ed:6a:a3:2c:d9:d5:a0:fe:71:
72:b1:0a:33:16:3f:eb:9c:6f:34:b3:65:25:9b:4b:64:83:e4:
5d:02:a3:96:74:8a:9a:ad:d3:17:f4:fa:4e:8d:b6:76:e0:24:
71:43:20:29:38:90:20:12:5a:e1:4a:66:4f:57:74:ac:e3:2e:
a8:5b:6a:63:62:9d:74:83:02:d5:4f:1b:67:28:5e:c4:da:07:
3c:d0:56:e5:84:ab:a5:8d:4b:32:bf:25:93:f3:3b:5f:8c:8c:
97:49:2b:cc:15:e1:e6:93:fc:07:8d:3b:7d:8f:83:34:0d:d1:
f9:0c:7a:cc:e5:40:cd:46:5b:8b:61:ca:50:71:dc:01:fe:e1:
68:4f:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:05 2025 by rpki-client