Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/GzvC7AN9lqTfx6RMIb0aW2l4GS4.roa
File: GzvC7AN9lqTfx6RMIb0aW2l4GS4.roa (raw, json)
Hash identifier: 6UuZKyLFo1oNGs1Y+5u8by5Ra0l9b73tgVepOozGiWc=
Subject key identifier: 1B:3B:C2:EC:03:7D:96:A4:DF:C7:A4:4C:21:BD:1A:5B:69:78:19:2E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 10EF
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/GzvC7AN9lqTfx6RMIb0aW2l4GS4.roa
Signing time: Wed 12 Mar 2025 04:45:58 +0000
ROA not before: Wed 12 Mar 2025 04:45:58 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 211.149.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4335 (0x10ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 12 04:45:58 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1B3BC2EC037D96A4DFC7A44C21BD1A5B6978192E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:57:ee:a9:d5:f4:1c:6f:0f:0a:05:51:4d:
0f:fb:b6:44:96:a7:f9:1f:94:2c:f8:4b:93:74:5d:
ca:03:09:92:f2:53:c1:87:03:0b:3e:91:5b:80:f1:
5e:20:fe:a2:b5:8e:a6:37:f6:73:8a:59:b5:b0:aa:
07:5b:1e:c4:a3:7b:a6:84:e2:7f:69:b1:7b:47:2f:
45:52:06:65:b4:2c:bb:af:95:53:55:fd:b6:c0:8d:
01:18:8c:37:b9:3c:a0:f2:f7:66:3d:2c:46:27:a3:
58:a1:05:fa:93:a0:8f:ff:87:0b:df:9c:9c:5f:a3:
57:00:7c:70:7f:eb:d1:06:ba:cc:e7:c5:cf:1b:78:
6b:36:29:d2:0a:a9:2b:eb:2a:9f:ab:c9:2d:82:c4:
29:3a:a9:49:d9:48:b1:52:f6:8c:f3:2d:f0:07:f1:
88:40:78:33:d6:7f:16:09:9e:af:fb:26:f4:26:39:
44:c7:1f:05:5d:29:58:ad:8f:88:1f:ad:1f:62:52:
6f:b0:c3:e1:fb:ae:be:83:88:34:77:31:cf:7e:98:
77:76:23:d1:99:7d:88:bd:76:b7:48:13:ae:14:9a:
a6:a9:ff:73:25:fc:71:b0:49:55:bf:b9:0b:86:c0:
f4:71:76:1a:56:4f:53:8d:d5:66:49:c2:75:cc:72:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:C2:EC:03:7D:96:A4:DF:C7:A4:4C:21:BD:1A:5B:69:78:19:2E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/GzvC7AN9lqTfx6RMIb0aW2l4GS4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.78.0/23
Signature Algorithm: sha256WithRSAEncryption
93:c4:8e:85:95:b5:a7:cb:f9:e6:37:93:98:a1:f3:18:d3:eb:
f5:94:6d:33:10:fc:fb:53:05:b3:44:eb:da:f5:22:ce:05:bd:
cb:77:da:5b:9b:6d:5d:f6:a3:2a:d2:bd:4f:6f:da:5e:d0:8f:
66:8f:d0:2f:c2:c7:d6:63:66:7c:02:fb:38:88:87:8f:60:b9:
66:e9:5e:67:1a:0f:da:dc:30:f2:5d:76:04:1c:1d:52:b6:18:
68:8d:26:64:37:49:a3:c2:9a:72:ff:a0:85:a9:d0:cc:ff:5b:
97:70:35:b3:75:fe:7f:ba:43:8a:a9:f8:85:e8:87:e0:b5:3e:
fd:13:3e:93:39:25:0f:c7:30:ed:e6:00:46:b3:c2:19:42:5f:
fc:15:ae:37:d7:7d:11:57:84:db:3b:6d:e9:28:72:66:19:fb:
41:03:41:28:f9:ae:32:a5:d4:85:6f:67:3f:53:05:23:27:a2:
19:68:64:38:dc:e5:5b:7a:75:1b:63:5d:e4:06:31:54:bf:f1:
ce:52:86:ad:5f:39:85:58:c2:35:37:c5:3d:bb:d8:41:0c:24:
9e:ae:3e:53:00:d4:95:35:3e:52:07:f9:ce:f1:75:50:f6:a8:
fe:5d:7e:0e:a0:4d:96:4d:f8:56:20:2b:4d:f9:7d:0c:2d:04:
81:bd:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:44 2025 by rpki-client