Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/JjuPfSenFrZVTiEEu74GswyJ-sk.roa
File: JjuPfSenFrZVTiEEu74GswyJ-sk.roa (raw, json)
Hash identifier: eDkeBiEH+VaW3mi5v0Cy2GbZH/oA9mCrQzj+ONPGzLA=
Subject key identifier: 26:3B:8F:7D:27:A7:16:B6:55:4E:21:04:BB:BE:06:B3:0C:89:FA:C9
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 065C
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/JjuPfSenFrZVTiEEu74GswyJ-sk.roa
Signing time: Tue 04 Mar 2025 07:34:41 +0000
ROA not before: Tue 04 Mar 2025 07:34:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7641
IP address blocks: 211.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Mar 4 07:34:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=263B8F7D27A716B6554E2104BBBE06B30C89FAC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:e0:ea:fc:df:41:87:25:90:53:f2:21:cd:
c4:dc:25:37:c0:fc:32:c4:5f:74:da:eb:b8:ce:8b:
9c:1d:a3:09:dd:ed:d8:5f:13:28:f1:42:54:69:03:
72:3f:7b:a7:86:5b:ca:0c:6f:ad:1a:de:56:5b:7f:
83:c1:cd:52:22:e2:b2:37:33:fe:33:fe:47:c5:29:
31:ff:51:f6:4a:4f:6f:ab:38:12:30:f2:cd:96:4b:
de:1a:7e:a4:7c:03:51:56:5b:35:c4:b0:d6:91:f6:
98:08:6d:6f:cf:0a:b2:95:3b:c6:e1:1c:16:9b:a3:
75:a1:58:02:f0:e3:5a:13:74:06:01:fd:be:a3:85:
64:c2:22:23:f6:3c:ff:ad:86:50:ac:c7:1e:90:92:
62:20:a9:69:fd:da:a6:85:ab:22:6e:9b:f4:bc:58:
6d:fd:1e:68:5b:d6:e1:c9:52:7f:5a:a8:1d:c6:2c:
fa:a9:a3:bf:df:e7:72:69:05:eb:5f:f7:91:b6:e2:
27:12:17:73:87:f1:29:14:63:48:ab:53:ef:56:fd:
78:15:3f:52:15:6b:7e:e1:46:37:e0:59:61:a7:a0:
c8:3b:b8:4d:65:84:6b:65:e7:b7:9f:10:89:f5:79:
85:56:c0:38:8a:31:9a:ee:d6:91:cc:2b:11:d2:05:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:8F:7D:27:A7:16:B6:55:4E:21:04:BB:BE:06:B3:0C:89:FA:C9
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/JjuPfSenFrZVTiEEu74GswyJ-sk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.146.0.0/20
Signature Algorithm: sha256WithRSAEncryption
42:90:87:77:ac:b7:ac:ba:b5:59:9f:43:d2:6d:26:9a:91:5c:
57:01:2b:3b:64:e4:52:57:04:95:a0:99:47:27:96:3e:38:76:
77:5e:d2:85:35:c4:f5:94:74:bf:e4:09:80:e6:0c:a5:21:01:
a7:71:83:57:f6:68:c9:25:64:dd:aa:30:b1:ad:6b:8c:9f:2f:
e9:3e:bb:7e:7e:b4:cc:39:32:2e:8f:03:3c:b5:b7:b1:ae:a5:
e5:06:ce:23:25:3e:3b:51:33:35:c4:ca:cc:75:d5:cb:5c:f2:
b3:18:b4:80:4c:95:85:ad:09:bb:99:52:38:c4:30:ea:86:42:
d4:91:cc:b1:84:e5:ae:24:6a:94:fa:76:70:ee:6f:93:d0:58:
34:c4:19:ad:af:d7:8a:3b:c3:75:c7:9f:4a:3f:0a:18:b0:98:
31:9f:3d:fe:af:04:6b:ce:f3:37:54:ed:98:b3:4b:38:c7:78:
f1:de:de:09:79:68:96:14:da:43:76:d2:0c:43:0e:6a:fa:ad:
d4:98:cb:18:13:fc:8a:f8:4f:3b:59:2e:ce:82:ac:73:ed:7c:
d2:00:d1:a4:4a:dc:9c:26:64:d0:fb:20:33:1a:79:44:cf:03:
d9:bd:c9:43:3c:e0:9e:69:32:b3:c3:24:fe:5c:04:74:05:0f:
01:7a:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:07 2025 by rpki-client