Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/3OR4LlmsoKVveYyzpz8HYa3YcXo.roa
File: 3OR4LlmsoKVveYyzpz8HYa3YcXo.roa (raw, json)
Hash identifier: /6H9DGp6L07kVB2GybxWV3iEWP+zaG8S27m5UDI4fmw=
Subject key identifier: DC:E4:78:2E:59:AC:A0:A5:6F:79:8C:B3:A7:3F:07:61:AD:D8:71:7A
Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial: 14B7
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/3OR4LlmsoKVveYyzpz8HYa3YcXo.roa
Signing time: Fri 17 Jan 2025 01:27:23 +0000
ROA not before: Fri 17 Jan 2025 01:27:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 37963
IP address blocks: 112.124.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5303 (0x14b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Validity
Not Before: Jan 17 01:27:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DCE4782E59ACA0A56F798CB3A73F0761ADD8717A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:2e:e5:fc:46:f2:2d:23:12:54:33:50:9b:
96:37:80:d3:95:1b:7c:44:11:3c:f4:66:3e:10:a2:
80:c4:18:6e:cc:8c:20:e9:d2:1f:7d:da:e8:d8:7c:
63:15:52:4d:2a:55:61:2f:fb:a2:88:22:40:06:fc:
6e:96:6f:37:03:ad:af:5d:71:d6:fe:09:dc:bc:90:
59:c9:bf:09:a3:2a:30:c4:9b:f8:1c:d3:26:7f:86:
0f:77:6c:04:01:6e:97:87:d9:81:fe:ff:65:25:81:
c2:95:a6:c4:c6:ea:ab:46:21:a0:22:1e:0a:c0:56:
08:c6:60:ac:58:2d:66:b3:9c:74:88:9c:dd:c9:67:
0a:3d:1e:5e:fc:b6:9b:31:fa:81:28:c2:80:e4:c0:
dc:60:0e:c5:5b:78:75:fb:a7:e3:f4:1e:62:0e:c3:
2b:a8:a1:c0:93:f8:a9:87:d8:f6:da:e7:ea:f3:a9:
f3:e6:74:f1:23:e3:48:07:3b:ef:50:17:74:39:17:
73:8a:2e:5f:d4:8e:b5:26:e0:10:b7:8b:7e:d0:27:
9f:3d:5e:39:5e:4a:fd:4b:09:b0:91:08:87:2e:e4:
58:b2:65:3b:0c:36:56:be:12:17:fd:fb:82:e8:37:
36:a2:c2:44:7e:52:5c:72:08:3c:13:70:64:83:82:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E4:78:2E:59:AC:A0:A5:6F:79:8C:B3:A7:3F:07:61:AD:D8:71:7A
X509v3 Authority Key Identifier:
keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/3OR4LlmsoKVveYyzpz8HYa3YcXo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.124.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2f:96:b4:9a:dd:18:74:88:0b:0e:b6:86:2b:fa:26:26:86:32:
70:51:08:47:68:aa:66:89:12:36:a5:82:ce:cc:8b:da:57:c4:
42:4f:7b:91:c5:34:af:70:7a:cd:25:e4:7d:df:7d:df:c3:5b:
ae:99:10:ff:d9:fc:90:3d:a9:61:9e:67:35:57:ff:e6:4e:ea:
a5:3b:05:b2:b6:fa:cd:9a:af:16:6d:5d:3e:60:0d:af:13:f7:
6c:b1:b2:a5:15:c2:ac:86:ab:d2:2c:38:40:21:b9:6a:11:f8:
3a:00:5a:e6:c2:41:31:6c:fb:57:45:26:70:26:29:9e:ac:82:
93:24:9c:14:69:bb:93:53:77:db:c7:48:52:f4:91:d5:23:95:
39:2e:a7:bf:08:b3:6b:39:e7:8f:8b:b2:ff:0c:b9:48:93:d8:
5f:65:8d:ce:1c:cc:55:57:62:06:c1:2c:d3:4f:06:5f:46:3e:
91:97:ff:64:8e:0a:87:fa:5e:78:93:9b:4c:c0:81:dd:e0:7a:
c9:c9:9f:d1:f6:92:7a:74:0d:44:75:15:90:77:88:ae:bb:43:
0d:a5:9d:fd:63:69:b9:f4:ec:da:e7:18:77:87:64:e7:ac:d7:
58:a5:75:f4:2e:3f:87:97:af:dc:d2:c3:f9:b3:24:1d:12:c0:
67:e0:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:22 2025 by rpki-client