Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/_yleEwlK-Xhahx1f8YNZAahSnAs.roa
File: _yleEwlK-Xhahx1f8YNZAahSnAs.roa (raw, json)
Hash identifier: 9XWSTCEV9O5rcMNuppee8FTJx5aKF2u26ocJhb3YJ8U=
Subject key identifier: FF:29:5E:13:09:4A:F9:78:5A:87:1D:5F:F1:83:59:01:A8:52:9C:0B
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 1025
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/_yleEwlK-Xhahx1f8YNZAahSnAs.roa
Signing time: Wed 05 Feb 2025 09:42:46 +0000
ROA not before: Wed 05 Feb 2025 09:42:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 101.232.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4133 (0x1025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Feb 5 09:42:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FF295E13094AF9785A871D5FF1835901A8529C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:a3:90:5f:dd:12:4a:ef:b9:83:46:90:29:
a4:ed:6c:6f:32:8a:50:83:1c:96:a8:e1:59:03:3d:
cf:fe:41:2c:b7:44:fb:dc:5e:cd:bf:64:94:4a:40:
d5:00:58:d3:b6:ec:e5:da:bf:1a:24:6b:8a:92:e5:
a4:a2:4f:d3:b8:cd:5d:d0:1a:d3:fa:38:18:7b:ed:
ec:20:bb:55:92:81:86:d7:74:b7:3c:62:e8:35:cd:
46:bd:c6:7c:44:bd:cb:89:25:cc:9b:fb:64:85:7d:
b9:18:41:b9:86:e3:2e:05:c5:e7:65:aa:d8:05:db:
3a:f3:0a:69:2a:92:f7:d1:d2:f1:67:b9:d4:3b:75:
c9:9c:c5:aa:26:4b:4e:b5:09:a4:d0:19:29:e9:77:
62:e7:ce:e5:83:fb:3e:91:4f:01:a2:43:9e:e0:42:
ab:f6:de:b6:a7:15:ee:ab:d5:fe:2e:4b:1a:c4:26:
04:5f:ac:a4:03:a3:29:66:5e:d0:05:06:78:69:4d:
7d:89:cd:8d:3d:66:a9:35:35:91:ef:ca:a1:5e:a7:
14:7d:7b:41:7d:72:b1:8a:58:21:c4:77:8d:91:20:
bb:2e:68:86:55:d2:cb:11:86:3c:10:93:c7:8c:25:
ff:df:4c:c8:3d:58:03:65:6a:f0:0b:e3:6a:d0:93:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:5E:13:09:4A:F9:78:5A:87:1D:5F:F1:83:59:01:A8:52:9C:0B
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/_yleEwlK-Xhahx1f8YNZAahSnAs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:3d:2e:b8:da:91:73:55:c2:5b:e7:ec:b4:bf:59:93:11:15:
b4:4d:fa:7a:5b:82:95:df:db:c5:3f:5c:f9:09:e0:5c:8b:24:
b0:16:82:83:5f:81:89:1a:87:75:bf:77:f3:40:70:9e:93:bd:
e9:25:21:b1:fe:63:80:29:46:d1:52:ce:29:d6:4f:39:a2:3f:
e4:6f:93:04:0d:ae:e8:fa:2a:98:4e:48:fe:3f:a6:03:d9:ab:
c5:05:22:a1:7e:84:1e:b9:a8:55:25:80:52:98:0a:5e:e6:75:
bc:7d:bf:26:65:72:d9:3a:23:84:19:89:93:f8:5b:3a:78:a2:
25:8a:5c:a0:13:bc:c3:76:c6:ac:ea:0d:d5:bd:8a:70:63:26:
0b:cb:dd:c7:87:bc:64:a2:24:9e:0d:2b:8a:2f:86:8c:36:91:
57:e8:27:0e:67:4a:12:6b:d1:11:81:2f:28:b8:52:fb:48:c5:
3d:92:2e:9c:30:8d:31:9d:a9:97:bb:79:4b:c0:f4:c7:93:b6:
7f:46:e4:dc:1d:10:15:28:8d:16:c4:b7:82:81:d9:18:e1:7c:
a0:3d:c2:54:e2:08:a5:d4:9d:12:c1:21:8a:92:72:2c:10:74:
25:c8:fa:76:9a:db:69:c7:38:2e:33:ed:19:95:59:f5:26:13:
75:ca:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:32 2025 by rpki-client