Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/gPGokSSMifWAQpD2OXpwvPdSazU.roa
File: gPGokSSMifWAQpD2OXpwvPdSazU.roa (raw, json)
Hash identifier: cStf2NeEkP1ktlE43Kj51m1HV3JDBunBgJhPg6ExUB4=
Subject key identifier: 80:F1:A8:91:24:8C:89:F5:80:42:90:F6:39:7A:70:BC:F7:52:6B:35
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BC0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/gPGokSSMifWAQpD2OXpwvPdSazU.roa
Signing time: Mon 03 Feb 2025 21:26:55 +0000
ROA not before: Mon 03 Feb 2025 21:26:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3008 (0xbc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 21:26:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=80F1A891248C89F5804290F6397A70BCF7526B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:f5:da:7a:33:29:d8:ba:8e:25:60:f8:c3:
7c:ef:37:9d:63:56:6f:70:0c:f0:1f:16:41:c1:08:
c6:eb:1a:5c:88:18:81:91:05:c1:67:fd:d0:fb:8d:
13:48:c2:27:11:89:91:2b:d7:32:e0:5e:5f:dc:7f:
45:5e:91:ec:1f:6c:12:65:1e:6a:be:e5:90:fa:ad:
19:b7:a5:bf:ab:14:65:df:ef:a8:e1:53:9c:b4:9b:
01:be:70:db:e1:65:a7:10:f7:d2:43:5b:1d:c8:eb:
98:ca:2c:d2:87:45:f2:54:bc:09:47:e2:a8:43:a4:
a3:d2:da:20:b6:0d:ea:7a:83:d2:89:d3:d7:77:a7:
c5:12:e8:50:31:38:7e:d8:60:6d:08:2a:89:12:0a:
64:89:dd:02:f6:65:0f:95:e7:0f:17:7b:71:99:f5:
d8:f0:98:7f:f6:4a:64:72:c1:18:4d:de:a2:ff:32:
4a:23:f3:d5:61:c8:a9:c7:11:ea:f0:22:4a:cb:9b:
b8:29:11:a0:ef:51:7f:18:24:94:6d:c4:78:0b:18:
de:c8:ce:0b:5c:6b:82:14:c7:fd:67:c6:74:d5:35:
76:66:9d:16:68:fc:84:1a:81:48:3f:9e:5d:c4:68:
4e:f3:c4:27:43:9b:70:71:6f:e7:8f:8d:ed:d7:b1:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F1:A8:91:24:8C:89:F5:80:42:90:F6:39:7A:70:BC:F7:52:6B:35
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/gPGokSSMifWAQpD2OXpwvPdSazU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
13:b6:ec:13:37:12:03:33:8d:7e:19:08:8c:74:25:68:e2:4e:
9a:33:3c:3b:fb:bf:4b:01:f2:9c:4c:ba:73:c3:7b:98:9c:e9:
db:5b:f9:ea:a8:56:c0:38:77:6b:61:fc:73:c9:57:ed:28:10:
4f:84:d6:f8:df:21:8c:e0:60:9c:c1:0f:9c:0b:87:52:cc:e3:
ab:df:16:5e:83:ba:9c:0b:40:53:a0:43:ec:ad:a2:5f:b8:fe:
45:55:2f:aa:a1:67:13:6c:57:36:1f:36:5a:50:a1:f8:40:c5:
79:26:cc:51:5c:37:07:b2:f9:35:ed:54:11:f6:b0:e8:64:e9:
12:b0:28:6d:fe:d0:56:f0:54:19:6c:4a:b4:77:fe:41:57:2c:
28:ad:9c:f6:36:9f:47:5e:ea:b9:55:a7:52:62:a2:13:1e:85:
93:db:5f:54:97:4d:77:8e:c1:a7:ec:4b:56:83:95:05:7c:c9:
4d:fa:e0:15:fc:48:54:7e:1e:26:c1:79:fa:60:59:cd:d3:9b:
ef:76:3b:b0:43:d4:b0:c7:43:07:ff:12:03:9f:ec:92:13:0c:
37:26:8f:86:fc:b4:ae:1a:ed:46:ea:6a:41:7a:a8:c2:25:3c:
c5:f1:e2:8e:f1:4a:4c:ee:6f:dc:75:bf:ca:96:20:f4:23:bb:
e6:6b:a0:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:14 2025 by rpki-client