Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/wR6tlSBxFP9cRO_VHSitfSXHC6k.roa
File: wR6tlSBxFP9cRO_VHSitfSXHC6k.roa (raw, json)
Hash identifier: e0dkXSzZdyc77GUIwP/4egKaoYHAZ1HD4fo9smYe8g0=
Subject key identifier: C1:1E:AD:95:20:71:14:FF:5C:44:EF:D5:1D:28:AD:7D:25:C7:0B:A9
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0FB6
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/wR6tlSBxFP9cRO_VHSitfSXHC6k.roa
Signing time: Fri 17 Jan 2025 01:27:54 +0000
ROA not before: Fri 17 Jan 2025 01:27:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 119.59.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4022 (0xfb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jan 17 01:27:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C11EAD95207114FF5C44EFD51D28AD7D25C70BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:e1:4f:8b:65:15:e8:cc:5f:43:b1:ef:24:
20:ac:77:7f:87:0d:5a:72:cb:6f:5f:2c:4d:5d:53:
94:cd:07:b8:9e:a3:99:3c:e7:36:5a:cd:94:e7:63:
a2:00:f2:93:27:a5:85:40:ca:61:fc:11:bd:e7:9b:
df:2e:7e:1c:df:76:d3:71:50:3e:c6:b0:ed:7e:f8:
d9:e9:18:71:80:3e:3c:b4:7f:49:a4:3a:f8:28:a1:
da:7c:d4:21:f1:05:8f:45:1e:13:ad:87:d9:85:b8:
f5:57:69:4d:1c:64:f4:eb:b1:27:35:a2:45:77:8b:
1a:3f:38:70:7b:31:83:f6:03:ea:28:9c:a2:53:20:
f1:dd:b4:3d:1d:86:f6:e0:77:82:a1:77:7e:90:84:
c0:d3:af:a9:2f:ed:f3:38:78:85:93:05:73:63:7d:
91:4b:64:ce:ac:13:d6:d8:c5:8a:97:d8:64:8b:21:
b6:d9:80:94:3e:8a:02:ed:e9:43:1a:6f:cc:0a:b1:
72:98:5c:e8:73:9c:87:5c:e9:65:38:57:a7:12:f6:
13:06:b8:94:6e:6d:13:03:e8:bf:f9:ed:44:b5:1c:
73:74:76:45:59:b7:3c:ba:be:32:8c:0b:ae:74:a6:
b4:a5:89:33:af:43:d9:ad:7c:08:66:a3:7e:da:a7:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1E:AD:95:20:71:14:FF:5C:44:EF:D5:1D:28:AD:7D:25:C7:0B:A9
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/wR6tlSBxFP9cRO_VHSitfSXHC6k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:b7:6c:17:d8:e9:13:5e:da:93:89:b4:2d:95:cc:dd:42:b4:
ae:36:ab:f1:1c:49:29:24:d7:ed:9d:73:ca:28:84:a2:41:17:
88:ad:b6:93:48:88:7d:fc:06:0a:29:01:7f:d2:c2:a9:a8:87:
00:18:6e:eb:5f:00:0d:fd:70:47:c5:f8:5b:dc:af:c3:5f:da:
60:bc:08:11:bd:3b:96:3c:f7:b1:1d:7b:cc:e6:f3:22:e3:df:
9f:3c:33:98:dc:16:4a:3c:18:b0:06:f8:f8:ae:77:c6:6d:43:
15:50:f2:7e:9a:b4:09:ec:6f:c3:48:0d:a2:2f:7c:21:d6:5f:
73:4e:3f:a4:ec:94:22:70:2a:40:40:77:bb:4f:3c:3c:35:8c:
d3:ff:24:3b:6d:25:58:68:8e:76:41:5f:cf:2e:50:25:ca:3a:
f1:ba:72:0c:24:48:fb:26:4d:b1:58:21:a8:05:c9:cd:f4:31:
8b:0b:9b:ce:e7:7b:86:ad:3d:ce:fe:15:c9:46:11:6b:51:7c:
72:39:55:d1:ba:0e:9d:b7:c8:9d:65:a3:77:f1:1f:ef:54:37:
ae:bd:95:1b:51:33:40:25:f7:71:13:5c:46:e3:b0:1c:7d:62:
a9:ac:e5:2a:0f:26:08:eb:05:f2:74:89:86:cd:4d:3c:45:d2:
31:8a:3a:85
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICD7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAxMTcw
MTI3NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMxMUVBRDk1MjA3MTE0
RkY1QzQ0RUZENTFEMjhBRDdEMjVDNzBCQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO1eFPi2UV6MxfQ7HvJCCsd3+HDVpyy29fLE1dU5TNB7ieo5k8
5zZazZTnY6IA8pMnpYVAymH8Eb3nm98ufhzfdtNxUD7GsO1++NnpGHGAPjy0f0mk
Ovgoodp81CHxBY9FHhOth9mFuPVXaU0cZPTrsSc1okV3ixo/OHB7MYP2A+oonKJT
IPHdtD0dhvbgd4Khd36QhMDTr6kv7fM4eIWTBXNjfZFLZM6sE9bYxYqX2GSLIbbZ
gJQ+igLt6UMab8wKsXKYXOhznIdc6WU4V6cS9hMGuJRubRMD6L/57US1HHN0dkVZ
tzy6vjKMC650prSliTOvQ9mtfAhmo37ap+r/AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUwR6tlSBxFP9cRO/VHSitfSXHC6kwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3dSNnRsU0J4RlA5Y1JP
X1ZIU2l0ZlNYSEM2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJ3O/AwDQYJKoZIhvcNAQELBQADggEBACu3bBfY6RNe2pOJtC2VzN1CtK42q/Ec
SSkk1+2dc8oohKJBF4ittpNIiH38BgopAX/SwqmohwAYbutfAA39cEfF+Fvcr8Nf
2mC8CBG9O5Y897Ede8zm8yLj3588M5jcFko8GLAG+Piud8ZtQxVQ8n6atAnsb8NI
DaIvfCHWX3NOP6TslCJwKkBAd7tPPDw1jNP/JDttJVhojnZBX88uUCXKOvG6cgwk
SPsmTbFYIagFyc30MYsLm87ne4atPc7+FclGEWtRfHI5VdG6Dp23yJ1lo3fxH+9U
N669lRtRM0Al93ETXEbjsBx9Yqms5SoPJgjrBfJ0iYbNTTxF0jGKOoU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:25 2025 by rpki-client