Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/WrxeEWGnYNfqFTvwbeEUnUkKeag.roa
File: WrxeEWGnYNfqFTvwbeEUnUkKeag.roa (raw, json)
Hash identifier: TKFKHMlkaAh7YYJOSIXtkejfkks3duzBMtH1stHk94A=
Subject key identifier: 5A:BC:5E:11:61:A7:60:D7:EA:15:3B:F0:6D:E1:14:9D:49:0A:79:A8
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0FAD
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/WrxeEWGnYNfqFTvwbeEUnUkKeag.roa
Signing time: Fri 17 Jan 2025 01:27:51 +0000
ROA not before: Fri 17 Jan 2025 01:27:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 119.59.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4013 (0xfad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jan 17 01:27:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5ABC5E1161A760D7EA153BF06DE1149D490A79A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:d7:23:2a:65:9d:b6:f7:26:7c:b6:da:f5:
7d:69:1a:0e:4f:fb:67:d9:64:3b:65:fc:f8:aa:b6:
07:a9:f5:f3:1f:28:86:17:8f:04:57:68:0f:c4:5c:
9b:4c:c9:78:f1:ed:3b:2e:fc:74:ff:1e:fb:f2:01:
7a:5f:7d:1e:0b:40:ca:a1:f0:90:e4:8c:7a:57:09:
00:84:9c:08:74:5b:d4:c3:ea:80:c9:6d:a6:a5:57:
e2:0f:d8:1b:3f:97:a2:91:5a:f8:f6:68:b7:4d:a9:
31:e8:09:83:c6:20:8e:0a:cc:b0:45:90:cc:3b:a3:
2c:83:bc:05:2d:bd:38:d1:fa:3c:86:fe:fc:76:6b:
44:59:4b:68:88:ad:7d:1e:cc:f1:53:5f:1f:e4:30:
b6:74:c5:16:c5:2e:96:be:59:26:cd:28:b8:40:7a:
a7:7c:19:93:46:84:7e:fb:b2:64:5e:11:67:bb:74:
df:ca:d1:5c:e9:e0:89:75:21:7c:f4:3d:6a:68:ad:
02:8a:89:9e:12:30:ab:d9:c9:32:e9:15:1c:bd:17:
93:a4:8d:95:48:22:cc:85:ce:aa:bb:51:18:93:26:
8f:b1:41:f0:d1:63:ad:46:50:01:da:74:92:9b:c5:
d9:c4:71:78:97:5c:5f:ca:d7:c9:3e:cf:d1:e6:2d:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:5E:11:61:A7:60:D7:EA:15:3B:F0:6D:E1:14:9D:49:0A:79:A8
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/WrxeEWGnYNfqFTvwbeEUnUkKeag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.228.0/22
Signature Algorithm: sha256WithRSAEncryption
63:3c:38:b6:4a:0e:4b:1a:d2:0e:8a:f8:fe:b1:69:f3:73:f9:
af:c3:9d:a3:f0:cd:38:e6:92:b6:ba:d6:cd:9d:85:fe:ef:16:
ff:50:58:e1:8b:fe:02:48:22:ea:72:2b:a4:cd:27:aa:17:dd:
fc:df:fb:21:bd:5d:9d:6f:20:88:50:96:d0:f2:31:a6:bc:c4:
8d:62:a9:45:27:9a:d9:85:7a:54:6c:32:58:9a:20:17:36:f4:
e5:fa:c5:91:ca:47:f7:ab:99:fd:8e:83:04:d3:b5:0a:ba:6d:
b3:66:ba:6d:ee:2b:84:8c:71:fc:d8:94:6b:a7:38:f4:db:60:
6e:bc:6a:ba:9c:ef:75:bc:77:84:2b:6d:32:c9:93:6b:a3:ea:
67:b9:49:d3:32:85:5c:e3:b9:d1:ca:de:a8:ab:a7:94:2f:9a:
f0:dc:2d:51:d0:ab:6b:fa:e8:89:93:e9:de:b9:f2:78:65:36:
00:9b:57:ca:d0:2f:8e:2d:c9:67:b8:02:d1:7e:da:e9:4e:41:
1d:2f:a3:4e:0f:ac:1a:be:61:86:53:93:63:d7:9e:f9:28:be:
5a:65:24:b9:bf:10:cc:db:ba:49:59:5d:84:20:e0:bc:e3:c4:
8e:f0:ac:fb:1d:23:85:9b:53:d4:5d:1a:d9:e2:f3:2b:f7:25:
7e:0a:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:41 2025 by rpki-client