Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa
File: kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa (raw, json)
Hash identifier: olJLbza9joPjLOUZlWHdKthChKYdp6YVQx/j27noLUU=
Subject key identifier: 90:C7:1D:CB:51:38:0C:53:BE:26:0E:77:43:85:A1:75:8E:45:D5:D5
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0652
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa
Signing time: Tue 04 Mar 2025 06:58:42 +0000
ROA not before: Tue 04 Mar 2025 06:58:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7641
IP address blocks: 211.156.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Mar 4 06:58:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=90C71DCB51380C53BE260E774385A1758E45D5D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:76:d2:c2:8c:92:81:24:59:38:17:2a:01:
51:eb:c5:57:71:5e:26:9d:fd:05:b3:dc:8a:72:ad:
4c:bb:0c:7b:a3:fc:3b:fc:4f:ae:84:84:72:5e:69:
bd:bb:b5:bd:d6:35:dd:3c:d1:74:a3:71:ae:cc:6a:
69:ca:73:da:ef:17:9c:cb:60:01:3e:f4:6c:0c:d8:
11:74:dd:2b:fe:2c:74:b9:29:d2:e0:76:c6:5e:64:
45:f6:ba:7a:b3:c2:47:ff:14:6f:3c:ad:db:33:ca:
22:43:68:74:cd:4a:3c:81:58:18:81:1f:8a:86:67:
15:ab:b4:02:16:ae:b4:99:8a:4a:d5:9d:9e:08:a3:
54:fa:17:65:bb:dc:d7:be:ce:8c:b7:62:76:da:d3:
b3:99:c8:e3:c5:f2:6d:af:f8:90:7b:65:87:6c:3e:
e1:fa:55:f4:d8:1d:10:3d:eb:62:11:9f:de:fc:35:
89:f4:fa:cf:62:de:2e:6d:7d:e7:3d:1d:8c:70:1e:
95:b5:88:8d:5a:af:23:0e:53:47:75:76:d5:9c:f4:
00:42:da:63:53:84:ea:74:b7:23:3d:d8:10:08:41:
46:99:51:a3:ef:d0:3a:cc:02:58:45:01:ee:23:7f:
66:cf:de:0b:a6:0c:13:ef:ab:9a:c6:d3:16:93:af:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C7:1D:CB:51:38:0C:53:BE:26:0E:77:43:85:A1:75:8E:45:D5:D5
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.156.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:67:e8:79:97:2f:0e:ea:08:b0:0e:65:82:1e:13:a8:0d:24:
27:d6:63:6f:aa:bd:be:b3:cc:59:1f:c2:9f:26:9e:9a:0c:cc:
bb:2c:71:37:b2:48:fe:28:42:65:e0:1d:96:d1:db:a6:94:a9:
72:b0:c0:4c:ef:a1:bb:16:ed:fe:1f:c9:73:14:4f:6f:1b:8b:
bc:5c:1a:b0:00:cf:eb:01:99:62:02:fe:73:72:db:eb:3b:50:
ce:43:75:aa:ba:f9:d8:5f:6f:dc:5d:de:a3:3f:99:30:f4:83:
75:3e:48:d1:63:fd:3e:7f:4b:19:85:79:e7:d7:72:f6:fe:29:
97:40:34:9b:b0:a8:c2:72:b2:27:6d:de:4f:c9:60:5d:fd:39:
c5:0c:77:0f:61:a3:7b:9e:a8:74:1b:d5:ea:69:20:5a:32:ba:
21:f6:09:b6:42:fa:16:a6:05:f0:3d:bf:86:50:fb:86:e3:f7:
a8:ba:39:ae:58:41:74:3f:1f:6c:a8:cd:38:be:dc:79:ad:d6:
33:92:f5:fa:bf:41:e6:5d:df:cd:13:7a:ba:27:71:17:8e:69:
2f:81:a7:bb:00:00:fe:4f:07:66:e5:14:88:ce:4e:01:40:d7:
67:3e:ee:52:24:6f:ef:bd:07:a6:16:e9:5a:80:1c:99:ea:90:
bb:90:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:20 2025 by rpki-client