Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/gxhKrCIWgo_5g7p6rUGcnhSu53U.roa
File: gxhKrCIWgo_5g7p6rUGcnhSu53U.roa (raw, json)
Hash identifier: azC5W0e6/Z1RZoKAp/BhYImJ3xk5OgRLhETQnWAfClk=
Subject key identifier: 83:18:4A:AC:22:16:82:8F:F9:83:BA:7A:AD:41:9C:9E:14:AE:E7:75
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0FB5
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/gxhKrCIWgo_5g7p6rUGcnhSu53U.roa
Signing time: Fri 17 Jan 2025 01:27:54 +0000
ROA not before: Fri 17 Jan 2025 01:27:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 119.59.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4021 (0xfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jan 17 01:27:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=83184AAC2216828FF983BA7AAD419C9E14AEE775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:d4:c1:ac:23:33:7a:ee:00:ec:92:5b:ab:
19:f0:14:fc:82:6a:3b:a1:7d:5a:d5:26:0d:97:0e:
f3:04:a4:8e:04:92:e7:27:ac:05:76:a9:0b:bd:3d:
97:58:e8:7f:07:38:1d:30:ff:16:fa:6c:0a:dd:a3:
ad:99:49:98:63:a5:85:7f:d3:8f:02:8f:6e:be:77:
8a:a7:a2:da:6c:6b:83:73:35:f7:41:08:29:95:9b:
6d:3e:92:9d:04:ce:f1:9c:9f:7b:0c:cd:65:2f:38:
c3:9e:e2:04:71:a2:7a:fa:c3:29:ba:d7:67:8c:a3:
45:a6:a0:16:4e:d2:0a:2f:16:ab:32:77:fa:d3:a5:
f2:0e:29:d5:87:0a:97:de:9c:7f:19:0f:f0:8b:86:
ab:22:9b:61:13:67:ac:1e:bb:68:6e:a5:c2:f2:2a:
22:74:50:e2:6f:b2:dd:22:cf:c4:cf:ff:01:19:d0:
be:df:c9:e9:04:7e:75:05:55:78:a2:04:b9:97:fe:
93:aa:16:b7:21:d4:46:a5:ac:59:d2:40:49:d4:63:
99:28:36:19:f2:0b:d2:d8:94:66:24:6e:21:f7:c5:
98:c6:d3:33:fa:d8:c5:41:33:58:c1:58:13:32:fb:
10:54:27:36:a1:a6:19:68:4a:2c:10:11:23:20:b3:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:4A:AC:22:16:82:8F:F9:83:BA:7A:AD:41:9C:9E:14:AE:E7:75
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/gxhKrCIWgo_5g7p6rUGcnhSu53U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.224.0/22
Signature Algorithm: sha256WithRSAEncryption
51:82:cf:56:3c:d2:03:2e:0d:d0:97:8e:1f:08:28:1f:f4:9c:
4f:af:c1:60:b6:82:e8:57:ae:eb:c3:f9:ff:85:85:05:2a:58:
63:8d:cd:38:6f:8b:e8:77:1b:8a:de:da:b0:25:75:e7:c7:cc:
5d:34:de:13:62:01:6c:3a:50:d9:52:5e:19:69:2d:f7:6e:84:
67:93:bc:c8:b6:b4:f5:88:1d:e0:71:98:40:02:4f:a1:24:db:
1c:25:c5:7e:4c:10:e2:14:d8:22:88:fa:41:ec:c0:8e:b3:57:
c5:86:18:53:0b:c4:6d:6b:fc:2f:00:b3:ae:4f:83:04:01:a5:
db:09:5b:ef:f5:95:95:ad:c6:ce:1e:f8:27:39:1b:fa:da:13:
db:26:47:01:77:fe:94:42:33:c6:54:fc:9a:df:87:91:26:0d:
19:d3:a2:25:fe:59:91:37:7d:6c:48:56:3c:0f:3a:3b:ec:a4:
1b:b4:1a:7e:55:99:d4:9c:bf:1f:81:15:a5:3e:e5:cf:09:3a:
66:c6:27:28:cf:8d:ce:38:2d:80:32:ab:84:07:0b:23:53:61:
82:10:4f:19:ca:5b:ae:a1:e6:a4:43:43:77:0f:c9:92:54:88:
f1:26:75:8e:93:bf:90:98:94:d4:11:97:08:b7:36:3f:27:ba:
1c:ba:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:44 2025 by rpki-client