Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/479/hZG7r3HAygm1NRT4c_UJqRF-vEY.roa
File: hZG7r3HAygm1NRT4c_UJqRF-vEY.roa (raw, json)
Hash identifier: HYAIxHGP/kNIGfrJxL1xZOFKvwxR5N+i6rPy/m2KqAo=
Subject key identifier: 85:91:BB:AF:71:C0:CA:09:B5:35:14:F8:73:F5:09:A9:11:7E:BC:46
Certificate issuer: /CN=025E2D794E6FFAE295BACE491100E3D18B9C7141
Certificate serial: 1B9D
Authority key identifier: 02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/hZG7r3HAygm1NRT4c_UJqRF-vEY.roa
Signing time: Tue 18 Mar 2025 19:58:02 +0000
ROA not before: Tue 18 Mar 2025 19:58:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 38283
IP address blocks: 60.247.128.0/17 maxlen: 24
211.149.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7069 (0x1b9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025E2D794E6FFAE295BACE491100E3D18B9C7141
Validity
Not Before: Mar 18 19:58:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8591BBAF71C0CA09B53514F873F509A9117EBC46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:d5:93:58:a8:47:05:a2:09:fa:96:40:4b:
7f:b2:b5:54:ad:a3:23:48:4b:e0:7c:f6:77:de:09:
b3:43:e6:88:cd:46:57:e7:dc:56:b6:1f:42:d4:56:
87:f7:b3:6b:2a:53:46:40:82:b4:69:0e:74:01:47:
9c:b9:1a:aa:c1:a8:d7:e4:4e:0b:9b:d5:af:cc:84:
52:96:bb:61:ca:50:88:b4:c8:38:7f:cc:d2:4d:65:
d5:db:b7:c8:4b:fc:9e:97:bd:7a:3c:b2:95:49:92:
e0:a1:69:99:2e:bf:91:4f:b6:2f:e5:4a:05:65:48:
ac:2c:59:52:96:1f:67:1a:45:d0:35:2b:b3:f3:26:
bb:d8:58:8a:f6:47:4c:67:a5:0a:8a:2d:90:f6:bc:
d2:e4:77:76:8a:bd:ad:29:b3:45:1e:dd:8d:0e:8a:
3b:5d:3f:38:3e:3f:5e:05:42:c4:58:74:48:35:1a:
18:f3:53:8e:a9:5b:2c:18:14:e5:2f:63:4c:a8:a4:
92:a6:b3:0e:82:dd:66:84:58:63:a0:dd:61:72:e4:
c4:58:f0:da:ab:e4:68:2f:17:84:aa:60:da:a0:c8:
8e:77:cd:b5:78:db:51:84:04:a8:3c:5e:96:40:68:
df:0b:3c:80:c1:10:7f:e9:e1:fb:04:dc:f5:44:48:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:BB:AF:71:C0:CA:09:B5:35:14:F8:73:F5:09:A9:11:7E:BC:46
X509v3 Authority Key Identifier:
keyid:02:5E:2D:79:4E:6F:FA:E2:95:BA:CE:49:11:00:E3:D1:8B:9C:71:41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/Al4teU5v-uKVus5JEQDj0YuccUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Al4teU5v-uKVus5JEQDj0YuccUE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/hZG7r3HAygm1NRT4c_UJqRF-vEY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.247.128.0/17
211.149.128.0/17
Signature Algorithm: sha256WithRSAEncryption
95:0a:63:68:ba:9a:0e:14:77:51:dd:5f:12:63:6b:4a:b4:1d:
05:b5:cf:4e:45:69:39:f2:ee:97:98:77:16:ab:00:1e:de:2e:
cd:0a:4d:c8:c8:1a:91:ef:f8:bc:0e:2b:8c:75:5f:82:d0:df:
4e:19:6c:ff:c9:cb:6c:79:4d:52:af:d7:0f:35:62:b0:f7:8c:
3d:0a:5f:ed:3a:19:5c:65:98:94:38:7f:f9:a4:be:07:cc:7d:
b5:6f:be:63:d2:64:d4:a5:d1:90:0f:f8:e6:c6:2d:e0:fa:a4:
17:fc:f4:e8:a8:57:91:14:57:ad:c1:01:e9:6b:c9:4e:5b:38:
a3:1e:66:40:c6:c3:4c:0d:1c:81:35:72:24:8c:c1:50:9c:54:
0d:41:05:64:0c:a2:86:64:36:69:46:c4:be:0a:14:85:ab:a4:
88:f7:46:1f:10:64:92:d6:88:3f:4d:e7:35:a3:81:cb:9c:81:
2c:fd:94:97:08:e6:55:55:4e:fd:ff:1d:f7:94:09:e6:2c:37:
e8:55:a5:3c:97:d2:fe:64:81:0d:29:b5:64:e3:45:85:a1:b6:
6e:1e:cd:36:3f:90:28:6a:0e:56:41:27:ee:9f:0c:81:02:91:
c4:fa:48:b9:a2:c0:bf:09:46:ed:3c:d9:c7:c8:ad:9a:77:95:
2e:00:f6:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:22:28 2025 by rpki-client