Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/kwaMABID7VZ3vhqUa6NN9HTB4IM.roa
File: kwaMABID7VZ3vhqUa6NN9HTB4IM.roa (raw, json)
Hash identifier: rpQP4YRanoobvWexfIEHGhwB/NQyi9B7w33c0ZabsrM=
Subject key identifier: 93:06:8C:00:12:03:ED:56:77:BE:1A:94:6B:A3:4D:F4:74:C1:E0:83
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18B8
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/kwaMABID7VZ3vhqUa6NN9HTB4IM.roa
Signing time: Fri 17 Jan 2025 01:25:28 +0000
ROA not before: Fri 17 Jan 2025 01:25:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59083
IP address blocks: 43.254.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6328 (0x18b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=93068C001203ED5677BE1A946BA34DF474C1E083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:f0:bc:63:f6:de:2f:02:a8:6d:5b:2a:ab:
8b:1d:95:24:9a:79:d5:a5:a4:51:5f:c0:af:fd:1e:
5a:09:88:30:67:41:e9:8d:92:2f:3b:f5:ff:ab:36:
40:cc:1f:6a:9d:ef:b4:cb:a7:e6:64:fe:33:16:38:
9b:8b:d9:26:40:86:4a:d0:ad:0a:eb:61:35:d3:43:
d3:d7:ce:5a:e5:7c:a8:4f:82:4a:6e:81:e9:71:e8:
76:a7:4a:0d:ee:43:dc:49:3b:1e:33:53:1e:18:db:
f5:22:55:bd:dd:3d:33:69:4e:ef:9a:e8:d7:ee:35:
15:2e:44:4d:30:5c:ca:04:e0:ed:79:d0:67:f9:f8:
a1:62:ae:ae:a0:42:65:1a:6f:c9:9a:94:a4:ea:f1:
fb:9c:b2:08:9e:a9:8b:59:2f:7e:63:fe:3a:a9:cb:
3a:3d:20:2a:14:d3:58:e1:80:9f:2a:7b:bb:30:ad:
ed:25:00:0c:71:17:92:77:83:4c:d4:4a:83:3f:70:
10:8b:26:3c:9f:b4:8a:a5:d5:30:9d:9e:4b:93:10:
5d:84:85:ef:20:b4:aa:36:ca:f9:75:c0:df:f1:e6:
57:4a:8c:e5:8c:2f:5f:5e:fa:c4:9f:f4:52:9f:de:
8c:14:b9:85:58:8b:8a:65:8b:ba:0a:d7:7a:91:8d:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:06:8C:00:12:03:ED:56:77:BE:1A:94:6B:A3:4D:F4:74:C1:E0:83
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/kwaMABID7VZ3vhqUa6NN9HTB4IM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a5:93:ff:a7:84:58:26:68:31:48:21:7a:d1:b9:70:d1:81:
d8:45:53:b7:81:0f:e0:57:a2:22:24:79:02:f1:4b:28:38:ae:
b4:55:a8:e0:39:d8:a2:d7:94:de:34:3c:c6:ba:eb:54:a2:e4:
8d:c2:9f:3f:12:e3:9b:c6:c6:23:a5:84:fe:30:9a:a5:0b:13:
ee:ee:4b:4b:18:8b:5c:24:e2:68:18:0d:b4:35:64:e6:ea:b0:
5f:d3:e2:a9:71:39:9e:74:d5:0e:e4:67:06:30:f1:79:be:9c:
09:a8:72:88:05:28:d8:89:a9:90:9a:d4:df:f6:f2:0d:93:13:
90:05:2d:a2:5d:f6:2b:a2:b6:20:44:a1:80:08:d0:b9:e8:2f:
61:ba:61:84:22:1d:b6:b5:64:18:9c:9d:37:b8:bc:ee:f7:97:
0b:5f:95:02:67:ad:19:d7:a0:85:b5:08:7f:6d:64:8d:97:dd:
01:19:ed:73:e3:3e:69:ef:e7:85:54:4c:7b:c1:01:fc:6e:97:
b8:fc:6d:bd:58:9b:ac:e0:84:58:e1:e4:fb:da:bf:a9:3f:62:
87:41:68:fd:19:db:20:84:9c:88:a5:0e:de:64:b9:35:18:d5:
e6:a3:47:73:60:cd:39:fe:98:5a:9f:05:73:9f:cd:8f:fa:8b:
d1:5e:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:53 2025 by rpki-client