Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/cOC6-2q5OWeeLa5zy4g26m8i9OU.roa
File: cOC6-2q5OWeeLa5zy4g26m8i9OU.roa (raw, json)
Hash identifier: qMGEj0cdPXILvemSCEicqLAB4vUI5Ui5PljxbczRKVY=
Subject key identifier: 70:E0:BA:FB:6A:B9:39:67:9E:2D:AE:73:CB:88:36:EA:6F:22:F4:E5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C30
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cOC6-2q5OWeeLa5zy4g26m8i9OU.roa
Signing time: Wed 05 Feb 2025 01:25:44 +0000
ROA not before: Wed 05 Feb 2025 01:25:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 01:25:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=70E0BAFB6AB939679E2DAE73CB8836EA6F22F4E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:e8:10:e1:36:ec:63:6f:aa:f9:62:dc:08:
a2:d4:28:a9:b3:34:08:75:01:9a:d8:9a:a8:6b:4b:
5b:ce:d3:21:1b:71:61:ef:1e:72:a1:53:d0:cb:bb:
4e:82:a1:86:ba:0a:7f:cf:f1:7b:e7:c0:8e:fc:d7:
05:89:62:c6:42:50:59:89:7e:e5:53:ff:bc:dd:c1:
7b:27:1c:1b:c8:c7:0f:af:8d:64:ca:3c:f7:35:1f:
8d:36:22:d9:6d:23:de:a1:7b:90:03:29:c9:8d:eb:
91:e9:66:3f:ea:0a:c9:85:52:1e:59:10:4e:95:59:
b3:60:3a:ec:5a:31:54:18:22:6a:ab:aa:3e:74:e9:
2b:a3:9b:52:62:3c:9b:14:97:89:56:2f:fc:69:02:
2f:ab:76:3d:6b:f6:77:8a:93:41:df:e5:c2:e2:b8:
db:14:47:94:67:12:21:d6:37:f4:05:ad:b6:d7:79:
80:37:c8:81:bb:a0:32:8c:ba:94:b8:f1:de:b1:dd:
21:ce:11:2b:b6:6a:9c:32:b9:70:a5:58:fe:56:6f:
85:4a:87:da:ae:89:d4:0b:ff:d8:37:f6:77:1c:2b:
2a:95:7a:58:6c:c4:68:e4:ea:9a:f2:bc:40:17:5b:
28:bd:76:03:e1:20:e6:ed:8e:b3:b4:44:d3:b5:b2:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:BA:FB:6A:B9:39:67:9E:2D:AE:73:CB:88:36:EA:6F:22:F4:E5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cOC6-2q5OWeeLa5zy4g26m8i9OU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:73:ff:0d:fa:31:11:21:3c:1a:6a:9a:a5:96:50:e2:34:66:
92:b5:06:b9:78:46:a6:07:83:73:1f:08:68:0d:c8:09:47:ae:
63:a8:7c:32:d7:94:ef:a9:47:9c:1c:a6:5b:72:f2:24:4b:7c:
ea:a5:bc:15:de:55:b2:07:57:33:45:94:0e:3e:16:15:0f:a7:
17:db:3b:28:6d:e7:bc:87:4c:58:55:54:57:8a:f7:03:b6:53:
3a:07:d2:a5:d8:4d:55:7f:31:af:ad:79:e9:99:51:b7:37:42:
21:9a:0f:db:85:d8:a3:1c:36:2d:65:1d:5d:11:91:8a:68:83:
a8:b0:6b:36:4e:60:b3:95:ee:41:3c:b5:b0:f5:54:47:e3:4d:
6a:53:bd:47:bd:b3:1f:3a:2b:62:d3:e9:6b:f6:5e:d5:ce:c9:
ec:63:90:97:25:c6:43:58:0b:2b:6b:cd:af:5b:d4:74:99:c5:
d6:87:a6:1b:74:2b:77:fc:a3:b3:5f:d9:0d:97:bd:c5:8b:8c:
ac:95:c2:0b:2c:67:df:5e:03:cf:2b:dd:f2:a8:15:53:99:83:
6d:21:c6:31:9f:e2:36:b1:5b:7c:a8:f4:53:e9:bb:73:c0:02:
47:b9:f6:ba:17:9b:d6:e3:75:a6:e9:fa:4a:56:b8:36:20:f0:
a1:52:1e:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:58:53 2025 by rpki-client