Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/LylqXhwzuKsaknP5d7sNvnGLHGo.roa
File: LylqXhwzuKsaknP5d7sNvnGLHGo.roa (raw, json)
Hash identifier: ih6PXOSKM2bFVDBxp6aryMqYAp04slHKb8512BmkZTU=
Subject key identifier: 2F:29:6A:5E:1C:33:B8:AB:1A:92:73:F9:77:BB:0D:BE:71:8B:1C:6A
Certificate issuer: /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Certificate serial: 14B5
Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/LylqXhwzuKsaknP5d7sNvnGLHGo.roa
Signing time: Fri 17 Jan 2025 01:27:23 +0000
ROA not before: Fri 17 Jan 2025 01:27:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 37963
IP address blocks: 47.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5301 (0x14b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Validity
Not Before: Jan 17 01:27:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2F296A5E1C33B8AB1A9273F977BB0DBE718B1C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:97:4e:a8:85:93:81:0c:e2:02:89:6d:03:
95:e6:df:bd:1e:5a:30:b0:01:80:a0:03:b2:a8:e3:
42:1f:d6:eb:eb:ea:af:15:e0:43:b0:54:c9:e5:06:
4f:03:41:60:39:bc:3b:82:a7:67:46:fc:0b:b7:06:
80:1a:65:53:72:19:ad:7b:0d:cd:72:96:b0:cb:be:
69:ad:77:f8:7d:ca:1d:2f:09:71:ee:fa:20:2f:c4:
23:59:b1:e1:89:0a:f7:12:a8:97:56:24:66:da:8c:
b0:ec:83:2a:1a:03:90:9d:01:50:64:21:19:99:ed:
51:e4:ad:9a:a2:95:66:6e:84:77:37:4b:3c:21:c0:
12:40:dc:ce:e7:8b:30:a5:b5:c2:1b:ec:cf:f0:af:
be:ed:15:86:d2:34:c0:9b:e5:53:56:e0:bb:3e:a1:
e4:99:a4:a2:c4:4a:7d:91:3f:45:2c:9d:6b:66:b5:
aa:a3:21:ea:6d:67:a3:af:99:8a:07:5d:e5:ce:47:
cb:21:e3:c7:84:c9:24:ac:ce:79:1c:b3:9e:29:bf:
13:41:c6:30:87:87:87:26:a5:c0:f8:a7:d6:a3:74:
e3:d0:d9:40:86:30:80:c7:f6:b7:ca:aa:70:14:89:
bf:f2:32:4b:ec:26:49:eb:39:43:5b:f7:83:97:97:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:29:6A:5E:1C:33:B8:AB:1A:92:73:F9:77:BB:0D:BE:71:8B:1C:6A
X509v3 Authority Key Identifier:
keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/LylqXhwzuKsaknP5d7sNvnGLHGo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
47.113.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:18:10:93:ac:2d:d8:5b:d7:e8:8f:0e:66:2f:10:ab:68:29:
55:fa:33:ff:f7:73:0f:0b:07:ec:91:15:d6:35:0d:30:3b:06:
0c:3a:de:7a:70:90:7b:3d:4f:5b:a0:0c:77:2e:62:06:a3:00:
a3:17:1e:6b:fd:61:51:87:af:73:70:e2:a1:26:83:8d:4d:83:
bb:e4:08:b0:8c:0a:9a:4e:8f:de:86:af:39:42:aa:c0:25:d6:
d9:2b:63:b5:a4:cc:04:09:2d:85:1a:b6:5a:9c:cc:b1:02:ed:
e8:fd:4d:23:dc:31:b2:b6:82:b2:40:c9:f2:19:6e:cd:6f:dc:
ab:b3:e2:d2:58:6c:8b:2a:1f:3c:07:0c:54:28:ee:08:59:64:
4c:28:e4:b7:80:59:e7:0f:54:b9:cb:6a:fb:84:a6:17:48:41:
ae:8e:78:31:26:f7:da:14:9d:6c:08:b1:37:3a:33:bc:d7:de:
11:57:6b:a2:49:d1:3b:4a:42:09:4c:bc:c2:0f:aa:3a:09:30:
b2:d7:9f:4c:16:36:39:03:a5:f5:dd:76:a0:42:74:7b:4a:07:
ac:94:2f:d8:1e:56:ba:62:75:7a:de:5a:94:55:89:f3:ad:0c:
eb:49:1f:1b:a1:3c:f3:a4:fb:79:a9:a3:36:dd:72:1e:72:01:
d6:5c:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:45 2025 by rpki-client