Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/ICSITvbxtzpmmwvqipIQvWfa5zU.roa
File: ICSITvbxtzpmmwvqipIQvWfa5zU.roa (raw, json)
Hash identifier: wy2LQSXW3nujhBpvbpTwf259qzYz22ZFmhLwVZFrrQY=
Subject key identifier: 20:24:88:4E:F6:F1:B7:3A:66:9B:0B:EA:8A:92:10:BD:67:DA:E7:35
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 1BCB
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/ICSITvbxtzpmmwvqipIQvWfa5zU.roa
Signing time: Fri 17 Jan 2025 01:30:09 +0000
ROA not before: Fri 17 Jan 2025 01:30:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 56282
IP address blocks: 211.155.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7115 (0x1bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Jan 17 01:30:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2024884EF6F1B73A669B0BEA8A9210BD67DAE735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:21:8c:cc:f9:50:11:a0:6e:1e:21:77:29:
6a:ba:48:39:f6:72:b1:77:c0:61:6f:ea:68:65:e8:
23:80:a8:35:d4:db:35:71:af:cc:a6:0f:22:c1:9f:
0a:b8:84:4f:47:bf:36:d7:31:23:93:29:19:86:fa:
6c:01:28:a0:c9:53:29:41:f0:d8:a5:cd:fa:a4:2d:
03:1e:6e:ba:81:67:6b:70:6d:5d:3b:c2:c4:96:8a:
7f:3a:08:85:d3:fb:6d:80:f8:05:be:29:76:d6:f9:
f4:59:c4:0b:7d:97:d2:1f:3d:8c:0b:aa:ce:fe:ca:
ad:81:2a:30:df:3b:b7:63:0d:62:8f:68:00:6f:c6:
90:b1:af:73:11:3a:4f:8b:cf:94:d2:b1:e3:f8:55:
b8:35:46:e0:ee:89:42:1c:30:b3:8e:b3:8b:d7:d8:
26:e3:59:e6:13:83:af:81:33:1e:f6:76:54:79:09:
3b:e4:f8:15:9d:09:a2:93:00:e6:89:ac:9b:f0:0d:
06:d5:c9:d7:46:53:b5:f0:94:0e:79:75:c6:54:22:
20:c4:9e:c7:90:7f:b0:c8:c6:bd:35:29:44:4e:76:
3d:f9:85:c5:45:42:c2:0d:d3:72:48:c8:65:05:08:
bf:49:9d:8e:a3:01:70:e1:3f:50:7e:42:b9:89:49:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:24:88:4E:F6:F1:B7:3A:66:9B:0B:EA:8A:92:10:BD:67:DA:E7:35
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/ICSITvbxtzpmmwvqipIQvWfa5zU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:76:aa:50:4b:61:95:51:c9:97:de:94:21:0d:31:51:82:55:
f2:ae:57:5e:70:e2:78:8f:3e:08:41:49:12:19:33:69:6a:ae:
67:c8:76:a8:dd:4a:c0:6d:5d:9b:98:8a:90:68:30:9d:fb:e0:
0e:bd:d0:05:62:7f:9a:e9:92:b1:94:8b:99:a0:30:fa:30:ac:
01:5f:f9:f2:61:fa:df:51:05:ae:4b:b5:f0:b7:fb:12:63:e4:
e9:31:a7:cd:08:c9:de:18:3b:7f:3b:92:4d:7e:87:37:cb:69:
62:ae:8f:af:e7:fb:04:8b:3e:c7:96:94:9b:77:e8:dc:cd:a5:
ed:3e:aa:ab:03:31:b9:76:8d:01:46:5e:fc:14:1b:59:f6:db:
6f:89:9d:60:1a:5b:09:fd:3c:b0:0f:2d:4b:e5:02:bd:93:9d:
91:62:fe:a8:4c:cb:c3:a4:65:23:8e:7f:51:94:e5:52:e5:66:
5b:f9:b9:ec:75:68:2c:b3:54:69:46:b1:66:e5:f0:16:96:95:
c0:24:59:5b:92:ff:05:d1:d8:57:c2:79:f4:c3:b3:d4:16:41:
bc:25:66:bc:6d:b8:41:e0:07:5c:a7:53:52:c5:0f:5b:3f:7c:
7f:28:86:a7:e8:37:cd:d0:59:c0:f5:40:b2:75:4f:ab:45:86:
9e:fc:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:37:35 2025 by rpki-client