Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/N5yFoC9n3-cZMZKIcXUIUnbiy0k.roa
File: N5yFoC9n3-cZMZKIcXUIUnbiy0k.roa (raw, json)
Hash identifier: a9EXfYm84p3IO2bPXgKfH1VvtlOvIUcX6q6CIIoTVAA=
Subject key identifier: 37:9C:85:A0:2F:67:DF:E7:19:31:92:88:71:75:08:52:76:E2:CB:49
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0FB1
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/N5yFoC9n3-cZMZKIcXUIUnbiy0k.roa
Signing time: Fri 17 Jan 2025 01:27:52 +0000
ROA not before: Fri 17 Jan 2025 01:27:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 211.149.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4017 (0xfb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jan 17 01:27:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=379C85A02F67DFE7193192887175085276E2CB49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:5e:ba:19:ff:af:9f:68:69:9e:6b:ec:0b:
8a:a4:42:1f:42:90:16:08:d1:9e:4a:66:3b:9a:a2:
df:22:11:13:1a:24:cb:4a:ee:d2:c9:4e:e1:7b:a8:
9f:63:be:1a:65:9b:c8:d5:ae:4c:a1:9d:63:97:fd:
f6:ac:20:a8:33:33:76:5a:de:95:a8:13:96:30:3b:
f8:1e:51:64:22:4a:83:ec:51:62:83:0c:ed:f2:cc:
a0:f3:33:12:9e:c5:6f:fb:12:16:09:c6:d8:46:9e:
55:f7:c5:af:6e:6a:75:f7:87:ac:08:17:25:d1:e9:
7b:d4:54:eb:9d:09:b3:eb:31:93:4c:0a:c0:60:37:
3c:ac:97:93:0f:94:2c:7b:bb:49:eb:4e:24:53:5f:
1e:54:f3:36:e1:57:44:33:ef:a1:3b:2e:4a:3a:05:
40:a7:a5:7d:fd:bb:78:de:be:9b:5d:57:18:b0:a8:
51:25:b9:ce:41:33:01:dc:d9:1b:1b:89:06:34:96:
55:41:ad:8a:28:19:68:38:43:a3:71:4b:4f:e8:5d:
84:51:05:05:c0:ec:f3:27:e4:47:f1:28:73:83:d5:
91:73:cd:0b:59:99:69:d6:3b:bb:16:a9:e0:cf:70:
32:80:fb:51:64:3d:03:85:2e:7d:9e:f3:9e:72:4f:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9C:85:A0:2F:67:DF:E7:19:31:92:88:71:75:08:52:76:E2:CB:49
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/N5yFoC9n3-cZMZKIcXUIUnbiy0k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.76.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:33:b5:70:63:84:55:e2:25:13:c9:3b:a9:a0:49:ff:63:eb:
09:b2:80:e0:ae:fb:ed:86:78:22:93:24:ae:a5:ea:ce:81:c4:
c1:9c:65:2d:7c:6c:ff:a6:42:d5:09:b1:b8:05:84:90:02:0d:
93:ba:be:83:fe:43:f1:b7:65:e3:da:99:85:64:8a:4c:07:cf:
87:aa:5e:c5:63:81:5a:25:c0:ba:f1:6c:87:bb:a6:fd:3a:46:
a0:d2:93:b4:b9:f2:31:3a:cd:8e:45:df:14:ba:fd:90:3a:49:
72:9d:d5:88:fd:fb:3b:2a:05:85:7b:a6:05:44:52:5a:1c:91:
99:ab:67:b4:df:bf:31:3b:05:2f:c3:18:1b:a3:9b:a0:55:6e:
77:75:04:ed:e5:82:88:76:82:6c:5f:a9:82:d6:5c:65:90:b5:
0c:23:b4:5d:bd:7f:87:ce:03:6c:84:cf:4a:e0:06:f3:39:e8:
79:ac:d9:8b:89:66:64:c7:89:3f:d4:4d:a7:8d:9c:dd:89:6e:
d7:9b:c3:fe:6e:ab:33:e1:03:a8:1f:9e:8a:cc:03:5d:c3:e0:
82:01:95:31:4c:d7:3a:d4:4f:88:26:16:97:6a:0a:a6:9e:db:
94:e6:7e:8a:00:63:46:2b:1d:59:5f:96:08:5f:20:9d:4a:74:
74:5b:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:17 2025 by rpki-client