Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/VZ6boSStd6MWyriT2ieo-ZngL34.roa
File: VZ6boSStd6MWyriT2ieo-ZngL34.roa (raw, json)
Hash identifier: kX3cx63G+SNfBG/YNEz5FFUwoGk9RdYppsy3vfr00Ek=
Subject key identifier: 55:9E:9B:A1:24:AD:77:A3:16:CA:B8:93:DA:27:A8:F9:99:E0:2F:7E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0EC8
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/VZ6boSStd6MWyriT2ieo-ZngL34.roa
Signing time: Mon 02 Dec 2024 14:55:23 +0000
ROA not before: Mon 02 Dec 2024 14:55:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 101.232.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3784 (0xec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Dec 2 14:55:23 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=559E9BA124AD77A316CAB893DA27A8F999E02F7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:ef:61:06:56:33:e5:37:c3:fc:54:62:97:
d6:c6:7f:39:a2:8d:b2:6d:88:9e:a8:4b:a1:0a:ac:
6a:f1:4e:94:47:7f:4a:fb:78:92:6d:c9:b9:ce:15:
e7:db:30:95:c1:18:b4:42:d8:23:4a:de:3a:68:2b:
f4:12:50:d2:a7:f1:1f:79:74:f2:1b:ce:3f:9c:72:
23:08:fc:d1:2b:e3:bc:39:ca:91:f7:91:fc:ea:81:
f5:ec:d6:f5:76:ff:af:51:90:16:eb:a8:70:87:c7:
78:a7:6f:39:86:d6:8b:bf:66:9a:f8:4f:88:22:06:
24:50:be:4d:b5:c9:39:e0:9a:4b:77:80:2d:92:e7:
f3:6d:7a:67:ea:9f:08:af:a8:ac:de:70:58:1e:88:
65:9a:be:be:54:6d:e7:ba:07:b9:79:58:00:1c:31:
04:6a:11:01:e1:84:9e:87:58:44:f8:19:63:09:54:
7d:fd:5a:ac:7b:a8:a1:33:51:0e:b3:56:e8:ea:31:
7a:d9:74:17:7e:d1:c4:6f:58:19:57:6a:a8:38:da:
34:28:a4:8a:e9:ae:43:25:f5:c8:47:f5:7d:ef:d3:
25:e2:a6:7e:c2:27:48:7d:5b:70:23:6c:6e:a8:91:
35:d0:17:53:39:41:b2:91:b5:28:47:c0:44:9b:54:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9E:9B:A1:24:AD:77:A3:16:CA:B8:93:DA:27:A8:F9:99:E0:2F:7E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/VZ6boSStd6MWyriT2ieo-ZngL34.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:57:17:2a:d9:31:9e:e4:6e:63:91:0e:45:19:48:8d:8a:a5:
bb:7b:7b:f8:9d:54:00:0f:ae:54:74:ef:0d:ac:9c:28:b6:22:
25:47:6c:76:4f:33:e1:b4:dc:cd:89:f0:d5:23:ef:20:b6:02:
d8:58:42:d7:2b:2f:9a:72:eb:06:b1:45:d2:47:21:c4:92:3a:
4c:c1:30:a3:74:2e:b6:f1:4a:26:c0:89:da:27:46:b7:90:0b:
5c:51:0d:1e:3e:cc:ae:f8:0b:b9:41:11:45:26:cd:42:a1:0b:
81:ca:23:44:e8:73:8d:3b:b7:91:be:5b:5b:9e:32:f9:c4:e0:
c9:b2:aa:26:35:b2:b2:c6:88:fc:ae:e5:d5:0e:6c:c6:75:7b:
b5:4d:b6:ae:24:57:c6:b6:ec:5a:81:80:07:de:82:50:b6:3e:
06:ff:f4:4d:04:33:fa:50:ba:f6:1d:ca:85:e6:bf:0b:a0:23:
ec:ac:ea:a5:17:a9:68:3c:bf:17:bf:9e:af:58:1a:1e:06:3c:
bc:94:54:e2:81:aa:b9:05:6b:26:40:be:8c:d3:c1:4f:d0:33:
67:5e:f2:48:77:8f:15:3a:8f:b3:3e:75:7b:fd:b8:c5:ed:f6:
41:9f:a0:61:5b:3c:67:f7:d0:9f:1b:52:f4:7e:32:02:a1:23:
23:e2:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:42 2025 by rpki-client