Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/v66eWKmcsL08qHt8VFFmXhezF_o.roa
File: v66eWKmcsL08qHt8VFFmXhezF_o.roa (raw, json)
Hash identifier: hFdtONRx1QXaVv8Tsj/YtyQXsPu9pqoTJeeGy3EXCYU=
Subject key identifier: BF:AE:9E:58:A9:9C:B0:BD:3C:A8:7B:7C:54:51:66:5E:17:B3:17:FA
Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial: 14B9
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/v66eWKmcsL08qHt8VFFmXhezF_o.roa
Signing time: Fri 17 Jan 2025 01:27:24 +0000
ROA not before: Fri 17 Jan 2025 01:27:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 37963
IP address blocks: 112.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5305 (0x14b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Validity
Not Before: Jan 17 01:27:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BFAE9E58A99CB0BD3CA87B7C5451665E17B317FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:38:e4:d3:b9:4d:7e:35:c6:d4:85:2f:ab:
76:17:7f:ba:46:32:84:44:8d:3d:6e:43:3c:83:c5:
7b:0b:9d:8f:ca:be:f0:f2:89:a8:33:63:ef:ae:d6:
76:69:52:13:42:4a:7a:04:34:ee:a8:15:c8:06:bc:
71:cb:81:a7:3c:88:39:f8:24:e7:47:66:ec:1c:66:
6b:25:38:03:09:dc:d6:0d:63:d5:29:87:8d:dd:85:
7d:1c:04:3d:d6:89:00:7e:e7:63:da:be:67:9a:50:
a7:4d:be:c2:a7:ad:86:d5:77:5e:f0:99:fa:0e:00:
54:12:8b:be:08:84:24:68:db:4d:f3:65:99:c2:dc:
1e:a1:ac:2c:48:7f:36:b6:05:43:c1:58:59:43:45:
c2:75:3e:06:d5:f5:84:da:42:4d:05:ac:ea:fe:db:
3e:20:ca:44:de:fa:3f:d9:17:6a:55:5c:46:4b:7f:
23:09:0a:cc:6b:9a:54:b5:0a:fa:77:7c:8b:b7:6d:
89:e9:1a:b5:37:88:95:35:64:2a:43:21:5f:93:7f:
a6:8e:f1:f8:1a:b7:f2:e7:3e:9d:84:d9:09:a9:ad:
c4:2c:0e:ce:76:de:50:8e:d3:f7:26:76:88:a3:6e:
70:8c:6c:8a:eb:1c:38:11:a9:da:1a:a7:a9:a3:4f:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AE:9E:58:A9:9C:B0:BD:3C:A8:7B:7C:54:51:66:5E:17:B3:17:FA
X509v3 Authority Key Identifier:
keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/v66eWKmcsL08qHt8VFFmXhezF_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.126.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:70:ba:2c:c3:e9:c8:5a:8e:4e:3b:77:c1:0d:cc:d4:cf:da:
16:b2:7c:e8:9c:33:2e:12:fd:0d:a7:df:a1:14:61:be:53:68:
37:ac:92:68:2d:56:5d:eb:45:0d:bf:e4:b4:4b:f5:4f:9e:8a:
56:c8:ff:98:7d:62:cf:0b:50:02:e2:02:79:47:33:f9:2c:a7:
9a:cf:7b:50:e2:73:c0:1d:20:f6:82:fb:9c:3a:d5:fc:28:90:
f5:1a:e2:bf:20:57:9a:c0:16:cd:ec:5f:b3:c5:63:a2:70:3c:
c2:35:d6:c2:08:09:aa:6f:8c:f0:72:e5:4c:eb:a9:01:8c:cd:
be:e5:9b:4f:eb:4c:e5:c5:9f:63:64:cf:5f:4e:7b:84:53:23:
1d:3c:a2:38:da:c8:ab:84:42:67:39:4d:8a:87:0c:bf:1d:2e:
8d:04:58:40:44:99:46:d7:5c:7f:47:9d:0f:a4:2c:a1:9b:c4:
23:aa:40:8d:f6:a3:a7:2e:ff:59:27:87:17:b7:54:7d:75:b7:
fd:fb:8d:1a:8f:20:59:53:48:52:64:14:10:6e:e9:fc:39:58:
c1:48:45:b5:e7:d2:83:ff:20:b2:86:e6:08:8d:2c:49:3b:39:
c6:46:9b:ec:bd:bd:7f:8d:64:77:4c:a5:94:99:67:5d:b6:37:
36:6d:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:08 2025 by rpki-client