Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/eeFl-6fErvCI48pt3UqIXwW-v3o.roa
File: eeFl-6fErvCI48pt3UqIXwW-v3o.roa (raw, json)
Hash identifier: T7yXyLiPll1C6ommCMy1RmKFIetPU8wjb8I/w9EXlWQ=
Subject key identifier: 79:E1:65:FB:A7:C4:AE:F0:88:E3:CA:6D:DD:4A:88:5F:05:BE:BF:7A
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0FB8
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/eeFl-6fErvCI48pt3UqIXwW-v3o.roa
Signing time: Fri 17 Jan 2025 01:27:54 +0000
ROA not before: Fri 17 Jan 2025 01:27:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 34549
IP address blocks: 123.98.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4024 (0xfb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jan 17 01:27:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=79E165FBA7C4AEF088E3CA6DDD4A885F05BEBF7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:f4:1a:52:10:7a:ed:5b:29:7c:3e:f7:cc:
0b:84:2b:83:f7:0f:6f:c4:f2:50:e3:c2:6d:64:ea:
90:52:2a:00:03:17:34:20:73:3d:47:ee:a7:17:77:
c6:3b:63:dd:f2:88:7d:1d:04:49:5c:63:fc:35:48:
97:ae:79:22:d6:ae:e1:db:a9:ea:d6:02:4e:2a:c2:
77:f4:75:73:46:d0:23:53:88:27:2f:6c:48:4d:1e:
b5:e3:f2:b2:e7:34:f7:93:7d:d8:8f:87:de:42:0e:
43:52:f9:57:96:56:22:9e:73:9c:d7:01:35:10:9d:
2c:23:69:67:ab:40:89:26:92:b8:86:0c:e6:35:11:
a8:fe:a1:93:0c:ea:1d:b9:0e:43:9a:c9:f8:7a:1b:
45:cf:47:79:33:5e:84:e1:9c:21:96:f3:77:81:0f:
33:d6:df:63:9b:31:32:26:ad:a9:1c:73:d7:3a:fd:
a3:0e:e1:c2:89:83:86:16:4f:ac:10:b9:92:a9:3b:
3a:fc:3f:6a:21:48:d8:1c:22:b9:0f:ac:bc:0f:66:
e3:a6:16:eb:79:88:7b:0d:b6:5e:d5:18:e1:99:cf:
f8:86:7c:38:14:1f:16:1a:5c:54:3b:e7:d8:69:31:
a7:ee:5b:f6:05:0a:4d:b4:30:f0:ce:a4:f6:f7:6e:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:65:FB:A7:C4:AE:F0:88:E3:CA:6D:DD:4A:88:5F:05:BE:BF:7A
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/eeFl-6fErvCI48pt3UqIXwW-v3o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.100.0/23
Signature Algorithm: sha256WithRSAEncryption
79:69:71:3a:75:b5:ab:80:9d:be:0c:10:8d:83:93:ab:1f:17:
0f:32:b6:35:46:44:2a:56:b3:f2:7a:1b:7e:89:e2:ca:47:a8:
39:ff:5e:e5:23:ec:b1:11:75:f3:e8:65:99:c6:1b:5c:50:e2:
f9:9d:ff:80:ca:7d:0d:69:d4:7f:91:63:81:40:06:82:9d:e7:
02:53:97:3f:16:ae:4c:d9:28:57:b6:c9:81:98:3a:be:97:65:
cf:a2:da:c5:5a:02:26:55:fc:a3:12:af:a9:be:dc:8e:b2:31:
1b:a1:3f:ea:d2:14:83:80:ae:e7:39:bf:14:e1:49:64:a4:f4:
ba:34:90:42:23:7f:84:71:0f:7e:be:24:04:22:77:0e:d5:ed:
e1:4e:a3:ab:19:2a:56:57:37:ad:5b:00:c0:f3:8f:8e:b1:be:
5b:f2:c7:80:23:52:a9:26:c9:f4:fd:af:d7:90:3c:95:02:b5:
82:11:48:8b:8f:74:ef:54:f4:fa:a0:50:f7:09:01:38:4d:ea:
a2:63:94:bb:11:54:11:09:b6:1d:d3:6e:d4:d9:7e:3a:21:08:
b0:62:ad:33:bf:49:ab:35:92:35:64:72:49:c8:85:b6:54:db:
36:d3:f8:c1:ad:a1:fb:58:5e:a0:43:9e:91:c5:81:f0:0a:c6:
25:85:a0:d4
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICD7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAxMTcw
MTI3NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc5RTE2NUZCQTdDNEFF
RjA4OEUzQ0E2RERENEE4ODVGMDVCRUJGN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI+fQaUhB67VspfD73zAuEK4P3D2/E8lDjwm1k6pBSKgADFzQg
cz1H7qcXd8Y7Y93yiH0dBElcY/w1SJeueSLWruHbqerWAk4qwnf0dXNG0CNTiCcv
bEhNHrXj8rLnNPeTfdiPh95CDkNS+VeWViKec5zXATUQnSwjaWerQIkmkriGDOY1
Eaj+oZMM6h25DkOayfh6G0XPR3kzXoThnCGW83eBDzPW32ObMTImrakcc9c6/aMO
4cKJg4YWT6wQuZKpOzr8P2ohSNgcIrkPrLwPZuOmFut5iHsNtl7VGOGZz/iGfDgU
HxYaXFQ759hpMafuW/YFCk20MPDOpPb3btkzAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUeeFl+6fErvCI48pt3UqIXwW+v3owHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2VlRmwtNmZFcnZDSTQ4
cHQzVXFJWHdXLXYzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAF7YmQwDQYJKoZIhvcNAQELBQADggEBAHlpcTp1tauAnb4MEI2Dk6sfFw8ytjVG
RCpWs/J6G36J4spHqDn/XuUj7LERdfPoZZnGG1xQ4vmd/4DKfQ1p1H+RY4FABoKd
5wJTlz8WrkzZKFe2yYGYOr6XZc+i2sVaAiZV/KMSr6m+3I6yMRuhP+rSFIOAruc5
vxThSWSk9Lo0kEIjf4RxD36+JAQidw7V7eFOo6sZKlZXN61bAMDzj46xvlvyx4Aj
UqkmyfT9r9eQPJUCtYIRSIuPdO9U9PqgUPcJAThN6qJjlLsRVBEJth3TbtTZfjoh
CLBirTO/Sas1kjVkcknIhbZU2zbT+MGtoftYXqBDnpHFgfAKxiWFoNQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:22:47 2025 by rpki-client