Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/VSwi3vfJM-Pf7MaSDKqM61BcL3o.roa
File: VSwi3vfJM-Pf7MaSDKqM61BcL3o.roa (raw, json)
Hash identifier: 4SWRljfCKit3mt87yPAXZYrBVM0AdUfKne1fiB5/lWA=
Subject key identifier: 55:2C:22:DE:F7:C9:33:E3:DF:EC:C6:92:0C:AA:8C:EB:50:5C:2F:7A
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C55
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/VSwi3vfJM-Pf7MaSDKqM61BcL3o.roa
Signing time: Wed 28 Aug 2024 08:53:58 +0000
ROA not before: Wed 28 Aug 2024 08:53:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 34549
IP address blocks: 123.98.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Aug 28 08:53:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=552C22DEF7C933E3DFECC6920CAA8CEB505C2F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:3e:d1:b9:73:99:71:3d:7d:c5:cf:16:9c:
8d:cc:0b:7c:c3:ad:0d:49:bc:75:3b:1d:3b:78:1a:
b4:10:07:5e:a9:34:f5:53:1a:c8:bc:27:b2:70:2f:
8e:1d:18:0f:a2:e9:d4:05:d0:ef:5f:fd:03:de:aa:
e6:6a:0f:49:60:4f:ac:2f:c5:c0:3c:13:39:82:ef:
fa:22:ff:fb:4e:fd:c1:ea:48:57:13:9a:66:81:0d:
ce:8c:48:d3:ee:b9:cc:47:5d:41:ef:41:2b:80:4d:
78:3a:63:62:3d:07:6f:50:72:2c:59:60:9d:3a:eb:
5d:07:eb:a6:25:a4:1c:af:3e:a6:32:6a:d2:2d:95:
b6:20:8b:54:f5:26:a1:12:fd:f1:1f:fa:45:c7:4d:
c0:86:0f:d5:7a:be:2b:8a:41:32:65:32:09:ef:bc:
f8:a7:7d:3e:a4:1a:67:19:cc:12:b4:dd:41:1f:5c:
43:57:78:59:7c:49:df:f2:86:8d:b5:81:8e:1d:97:
75:b5:96:a3:bc:24:43:b5:b9:18:9d:1d:bd:33:87:
8f:cc:fe:61:ff:fd:e6:86:55:4e:ff:4d:18:f2:35:
60:b0:d2:03:43:c9:43:00:83:9f:fc:53:7d:cc:40:
74:3d:fd:27:78:d5:af:53:b5:9c:de:4b:86:20:52:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2C:22:DE:F7:C9:33:E3:DF:EC:C6:92:0C:AA:8C:EB:50:5C:2F:7A
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/VSwi3vfJM-Pf7MaSDKqM61BcL3o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:f4:a5:ba:9e:52:55:48:34:20:aa:6b:36:da:37:b6:cb:7d:
7e:1a:a6:d9:fc:aa:24:45:37:b9:1a:7b:ee:c7:5e:8c:a4:54:
89:7c:f6:3f:f5:4a:00:30:af:23:e2:83:51:3b:74:2a:63:b0:
c5:78:0f:40:5e:3b:c3:02:f2:a4:24:de:31:e7:37:06:5b:81:
ab:86:a3:3a:79:40:f0:e9:6e:97:59:41:8e:67:94:9e:3f:b8:
59:18:51:16:87:8f:fb:a4:da:c7:4c:88:b7:dd:68:8b:92:71:
cb:e5:6a:7f:9a:67:34:9e:e2:67:09:84:78:91:3f:7c:7b:83:
6b:7c:5f:78:ad:09:4e:a8:24:be:28:34:3c:33:fd:0f:8c:b4:
ed:65:ae:36:08:e7:7d:24:3c:33:b2:20:76:fb:28:1b:54:6e:
0e:f1:b4:0d:8f:14:52:70:be:fc:e1:0a:63:88:18:60:da:91:
fc:c2:39:be:b2:85:1a:bd:04:05:48:88:67:80:c4:48:44:dc:
b1:ca:c3:45:5f:12:95:d9:fa:ed:4c:0c:4a:87:82:72:26:45:
62:34:e6:c6:8d:b2:73:34:66:a6:02:cc:cf:e9:5b:0b:19:d5:
1b:a3:53:75:01:bf:61:85:65:e9:26:1c:19:0d:7d:33:6d:e0:
fe:05:72:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:40 2025 by rpki-client