Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Tgo2UalC6bYN3cuohaOJh4-z75g.roa
File: Tgo2UalC6bYN3cuohaOJh4-z75g.roa (raw, json)
Hash identifier: cSW2xNecbkNlatrGyY1RoXGp18g76R8Vll7U8KvNzfg=
Subject key identifier: 4E:0A:36:51:A9:42:E9:B6:0D:DD:CB:A8:85:A3:89:87:8F:B3:EF:98
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 065F
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Tgo2UalC6bYN3cuohaOJh4-z75g.roa
Signing time: Tue 04 Mar 2025 07:52:16 +0000
ROA not before: Tue 04 Mar 2025 07:52:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7641
IP address blocks: 211.146.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Mar 4 07:52:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4E0A3651A942E9B60DDDCBA885A389878FB3EF98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:af:4f:21:1e:0d:29:86:03:a4:2a:e7:39:91:
14:87:95:7c:4b:d3:73:81:94:c4:ce:60:9e:57:72:
ef:3a:dd:54:00:2f:92:54:0a:a1:e7:24:8b:5a:ad:
5c:ac:fb:37:32:e5:67:72:f2:53:50:22:e7:7b:db:
d9:19:68:4a:dc:bf:b5:bd:70:8f:ee:1c:63:93:5b:
b7:7e:ec:5c:ce:73:5d:9a:0e:ae:b5:31:f4:12:88:
c0:fe:ef:e8:d9:c1:c6:21:82:9c:2d:64:0d:2a:95:
45:73:8a:0a:a4:b9:99:df:86:79:a9:ec:7e:dc:81:
31:6e:41:eb:cb:49:47:d4:6d:c7:60:ad:9c:6b:20:
47:fb:66:6c:8d:7d:c9:18:7c:bf:8b:6a:1f:6f:f5:
af:9f:d6:e4:29:67:2c:4b:f6:9c:45:de:8c:a0:c4:
aa:e6:c7:d5:90:15:57:55:d0:7d:23:46:bd:e1:55:
af:c3:53:32:8b:0d:bb:2c:26:97:49:0f:ed:2d:1d:
30:20:b6:fe:53:6d:7d:56:be:f6:d0:d6:1a:b5:18:
b9:b5:bb:bd:bf:6e:f0:1a:fb:c6:3d:6d:f2:b1:c4:
19:99:c4:a1:46:eb:b8:55:6f:21:2c:0c:e7:01:5c:
15:c1:6e:3d:24:bf:71:c0:8d:e2:6e:67:f1:ab:80:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:36:51:A9:42:E9:B6:0D:DD:CB:A8:85:A3:89:87:8F:B3:EF:98
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Tgo2UalC6bYN3cuohaOJh4-z75g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.146.32.0/19
Signature Algorithm: sha256WithRSAEncryption
04:59:08:b5:88:ae:ea:4d:dd:d0:6d:ee:f4:7a:5a:2c:fd:9b:
2b:f1:4b:81:27:ec:6f:8d:3e:c2:b8:21:ec:40:5a:52:f9:fa:
50:9c:7d:b7:54:ee:79:31:95:06:ea:d9:07:20:ad:33:1a:53:
69:28:7f:75:9e:5d:42:61:b1:ff:51:28:94:79:a4:96:02:6e:
4b:fb:86:68:0d:91:84:86:b0:ef:c0:3e:a7:34:38:fd:e4:bf:
ac:9b:84:a4:18:6c:ac:87:35:d7:b6:6f:7e:bf:f5:34:c1:78:
50:be:61:2a:ef:ce:eb:e6:5d:03:b7:97:f1:ec:c7:92:31:f1:
cb:5d:e9:c4:1c:15:cd:25:6b:73:e4:23:d7:df:4a:dd:62:b6:
52:42:8c:2e:ea:79:84:ad:1f:a3:ee:af:dc:64:00:03:bf:83:
a1:f3:23:96:af:d5:65:1a:33:25:5e:4b:08:c8:c7:be:c2:be:
c5:c8:da:2d:b9:f4:71:df:9a:59:e2:4d:f8:37:30:d9:45:e6:
1c:b8:db:6d:bc:5b:8e:f6:3b:a5:63:1e:7f:5f:c5:c8:e7:62:
b3:ee:31:99:b8:fb:ef:87:04:c3:18:bf:bc:c9:ce:2b:a2:92:
04:42:a1:2c:31:e7:fc:f8:e7:04:c7:b4:d6:ea:6b:0d:99:d0:
9b:db:63:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:16 2025 by rpki-client