Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/Lpl2UPsBatQTdu9fBpda0-qHUWI.roa
File: Lpl2UPsBatQTdu9fBpda0-qHUWI.roa (raw, json)
Hash identifier: /qAyn/fP7ZI5nAWGg/Wsu4XoweBVacanXrU7iSzl1jw=
Subject key identifier: 2E:99:76:50:FB:01:6A:D4:13:76:EF:5F:06:97:5A:D3:EA:87:51:62
Certificate issuer: /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Certificate serial: 14B6
Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/Lpl2UPsBatQTdu9fBpda0-qHUWI.roa
Signing time: Fri 17 Jan 2025 01:27:24 +0000
ROA not before: Fri 17 Jan 2025 01:27:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 37963
IP address blocks: 47.112.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5302 (0x14b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Validity
Not Before: Jan 17 01:27:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2E997650FB016AD41376EF5F06975AD3EA875162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:0c:5e:6f:b8:28:c1:0b:84:2e:df:b5:a7:
49:ce:96:b3:1b:45:8f:ac:ae:04:ef:fb:6c:39:b9:
6d:57:5b:bf:62:eb:5f:1c:07:65:18:4a:8a:7c:31:
2e:79:5a:23:77:a8:49:47:ee:22:5c:dc:03:45:65:
c8:a1:f4:2d:38:50:42:8c:ee:e2:18:9b:69:4c:8a:
3a:f9:26:6e:1a:cc:5d:55:92:66:03:1f:3b:f4:04:
8c:82:be:5c:77:bf:fa:3c:1c:97:70:3f:39:ef:02:
6a:ca:eb:90:1c:11:2a:6b:31:cf:6b:9e:2f:47:40:
58:f6:6b:6f:46:30:1c:4f:ad:6a:67:a9:15:bb:6c:
7d:b4:b1:ef:d6:1e:08:47:34:3a:6b:81:05:27:35:
97:7c:36:6f:da:e7:58:12:d2:6c:20:cd:07:d6:44:
36:ce:f7:3f:e5:7c:ef:c0:f5:33:b4:f6:d8:34:c8:
b8:00:cb:81:be:6c:6a:c5:c6:17:87:9e:b6:49:95:
bf:70:d0:b4:40:42:fa:c6:4f:0c:77:be:47:bf:33:
28:6f:62:59:3c:e7:4b:8e:8e:54:8b:28:40:88:35:
3e:89:74:cd:54:29:66:93:6f:31:0a:62:88:7d:23:
11:fd:41:2f:e8:2c:5b:be:03:10:8e:ed:cb:dd:91:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:99:76:50:FB:01:6A:D4:13:76:EF:5F:06:97:5A:D3:EA:87:51:62
X509v3 Authority Key Identifier:
keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/Lpl2UPsBatQTdu9fBpda0-qHUWI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
47.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:08:5b:29:7b:32:5d:29:b5:f0:12:e2:fb:e3:d8:e0:b3:2e:
c2:14:91:8d:c3:4d:25:ed:ed:fa:f5:fd:13:9f:30:17:96:24:
31:5e:4b:e5:b0:5e:bb:5d:02:73:7b:ba:d6:96:f7:0d:c7:77:
93:f1:2e:3b:6a:29:7c:ed:a1:17:66:a7:b7:c3:7b:1f:01:0c:
f6:b4:d9:8e:2c:1c:d5:e4:50:83:f3:ff:fd:2e:00:ac:09:05:
7e:4c:08:5a:a2:e9:07:f5:92:b8:d9:5d:3c:6a:f6:13:e1:9b:
d7:e1:a7:2e:7c:de:ae:84:a0:dc:cf:87:25:12:da:e9:a5:65:
ef:6b:d9:f9:38:5a:33:21:ff:6f:37:65:75:83:98:b2:0e:30:
3d:e0:0f:a9:4a:66:57:7c:22:14:73:22:ea:ff:d8:bb:6c:7d:
23:b2:65:08:15:14:ba:31:5a:de:d2:b3:20:62:ec:d4:00:f3:
93:20:e5:47:e7:7a:76:d5:62:54:3c:71:eb:f5:a8:fd:24:b6:
97:4b:ae:a1:28:f8:e9:a0:cd:a7:74:cf:2a:be:f0:0a:c4:5c:
43:8a:3f:e1:d1:55:cb:e6:d8:3c:ba:c8:64:e2:4b:76:dc:21:
20:9d:49:b4:7c:a8:47:cd:db:f9:53:28:e9:f7:f5:ed:44:9a:
14:a1:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:31 2025 by rpki-client