Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/399/yRv45j_V8yZD0mg3mBMwAgyc6v0.roa
File: yRv45j_V8yZD0mg3mBMwAgyc6v0.roa (raw, json)
Hash identifier: SVkZWk3vsGrblaeA8F1LP7i2HY+IMh1t/KzJ1pcsoUQ=
Subject key identifier: C9:1B:F8:E6:3F:D5:F3:26:43:D2:68:37:98:13:30:02:0C:9C:EA:FD
Certificate issuer: /CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5
Certificate serial: 483D
Authority key identifier: 51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/yRv45j_V8yZD0mg3mBMwAgyc6v0.roa
Signing time: Fri 17 Jan 2025 01:30:12 +0000
ROA not before: Fri 17 Jan 2025 01:30:12 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 132203
IP address blocks: 203.205.136.0/24 maxlen: 24
203.205.137.0/24 maxlen: 24
203.205.155.0/24 maxlen: 24
203.205.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18493 (0x483d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5
Validity
Not Before: Jan 17 01:30:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C91BF8E63FD5F32643D26837981330020C9CEAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:5a:03:61:b2:d2:ce:b7:b8:63:10:a4:b1:
19:02:45:b0:48:cd:45:3b:8c:1c:59:6a:bc:7f:2d:
e7:e9:fe:6c:99:f8:1b:81:d3:d9:87:cc:7c:86:c9:
f7:ab:5f:b9:2a:bc:52:c9:02:03:ef:19:f3:b2:43:
9f:1c:48:0f:85:cd:75:e2:46:a1:ce:c6:e6:d3:f4:
59:ae:b8:3e:d5:a3:4a:11:a1:de:e8:75:61:a5:e1:
ae:52:1b:2d:f6:43:60:80:9e:81:e5:33:33:04:14:
0c:cf:4f:6c:d3:83:e8:d0:1c:88:98:c4:cf:0d:7d:
8d:ae:54:16:62:0d:0c:29:3f:d5:a4:99:a3:78:ad:
cd:53:4f:02:7a:6c:55:2e:7b:0e:59:b5:31:70:9b:
9e:d7:1f:5f:93:1e:72:a3:96:2e:23:f7:0a:39:ee:
de:fa:5b:2c:72:11:b7:fe:12:5e:80:cd:92:89:7b:
22:6d:d8:e9:64:db:24:b0:88:85:7c:9d:17:6e:c9:
47:31:4c:7a:50:7d:f7:2d:97:af:a4:d8:19:f9:bc:
54:d0:ff:3f:93:7c:82:f2:ec:6e:a7:58:8e:08:18:
0a:03:05:e2:be:60:bc:d8:bb:3a:35:be:a3:fe:ad:
df:25:c5:0f:78:49:37:84:a8:51:1a:a0:e9:6e:5e:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1B:F8:E6:3F:D5:F3:26:43:D2:68:37:98:13:30:02:0C:9C:EA:FD
X509v3 Authority Key Identifier:
keyid:51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/yRv45j_V8yZD0mg3mBMwAgyc6v0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.205.136.0/23
203.205.155.0/24
203.205.159.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a5:8d:3a:f2:70:ef:d6:a7:b8:30:37:5e:94:5f:ce:c4:a4:
77:74:b8:8f:f4:69:2d:19:97:6a:f4:8e:21:d1:1c:89:ec:99:
3b:b7:61:a7:05:cb:52:92:61:64:45:62:f4:82:86:b5:58:2b:
26:d4:d6:b1:dd:9d:b5:41:11:9d:0e:cd:e4:51:8e:ba:2d:ce:
d7:af:3e:f9:a0:38:9f:f4:2a:37:d9:01:dc:dc:bf:d5:a0:a1:
5b:06:a2:88:24:de:45:a4:24:db:38:82:68:1f:8b:16:29:17:
75:e8:6c:38:4b:c1:70:1d:d5:38:e9:34:48:29:37:95:dd:8b:
ec:c9:27:c2:c9:fe:1a:0a:e9:43:88:cd:dc:15:d0:35:0e:d8:
ec:ea:6f:20:3d:a0:2c:7a:46:1d:34:50:e1:b5:0d:04:38:73:
53:2f:b7:9d:7e:3b:d8:ee:e8:0d:5c:2b:1d:df:40:c5:60:75:
fa:58:ac:ab:59:ab:68:90:d3:dd:3b:ac:37:58:c1:1d:b1:e1:
5a:06:87:8a:2c:a0:e8:75:55:84:37:ab:71:90:45:76:7e:86:
d0:3b:d3:fc:77:cf:32:0d:1e:e8:35:6e:73:29:e9:8f:66:b5:
ec:ef:11:89:a7:37:66:c4:4c:0b:b0:48:bc:be:13:5b:f1:01:
22:99:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:35 2025 by rpki-client