Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/mQ1CbbSWDVPlD6RqESJcyYDmCcI.roa
File: mQ1CbbSWDVPlD6RqESJcyYDmCcI.roa (raw, json)
Hash identifier: B9uODwmmdgWYr4juUZR1yLYPshgkd5I65GAcGsp4+AQ=
Subject key identifier: 99:0D:42:6D:B4:96:0D:53:E5:0F:A4:6A:11:22:5C:C9:80:E6:09:C2
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14B8
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mQ1CbbSWDVPlD6RqESJcyYDmCcI.roa
Signing time: Wed 11 Sep 2024 02:23:43 +0000
ROA not before: Wed 11 Sep 2024 02:23:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 59083
IP address blocks: 202.136.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5304 (0x14b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=990D426DB4960D53E50FA46A11225CC980E609C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:1f:cc:85:24:c3:f6:03:9d:ba:40:06:08:
b0:7f:5b:df:6e:4a:da:8d:fb:c4:7c:3d:4e:ef:04:
c2:7d:14:d3:44:a3:c6:99:6a:5f:3d:dc:f5:72:a1:
76:a6:71:1f:d7:fa:78:63:de:57:dd:63:75:09:84:
9d:c6:6c:09:02:aa:84:85:37:f5:bc:1e:05:b6:07:
10:6f:88:8f:a2:16:b6:25:aa:e0:99:2a:d1:d0:8d:
34:62:1a:fe:13:67:bf:77:c3:29:22:17:82:d4:4a:
17:8e:06:5c:48:c7:ed:7e:57:91:8c:fe:d4:2f:c6:
18:8c:52:55:40:06:0b:2e:cb:83:33:c2:29:d0:a8:
03:3d:92:15:6c:e5:da:c3:9d:46:f9:88:a7:30:56:
41:1b:f9:a6:53:70:fe:af:ee:3f:d9:5e:ab:91:fb:
aa:3d:b7:89:b3:be:55:c8:aa:e3:a6:72:cb:e1:da:
ae:c7:0c:ad:33:b5:92:3a:82:1b:c6:57:6b:04:7f:
50:9e:45:07:bd:43:6c:79:25:9a:4b:0b:1d:80:62:
4a:cb:b1:ec:61:01:96:ea:33:ed:21:cd:75:ce:91:
3b:53:3e:df:0a:71:e6:d4:60:8f:ba:b9:6c:e5:c2:
49:04:e5:2e:7f:97:c9:5d:96:9b:8d:69:8c:f0:ef:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:42:6D:B4:96:0D:53:E5:0F:A4:6A:11:22:5C:C9:80:E6:09:C2
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mQ1CbbSWDVPlD6RqESJcyYDmCcI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.136.249.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:1f:3d:2d:a6:85:ca:66:36:71:7d:04:08:fe:da:a8:fa:39:
cc:5b:ef:b0:f0:93:82:e2:fd:b3:90:f0:e8:b2:a1:3b:e0:47:
8f:95:74:3e:cd:5a:b6:3c:22:ab:95:d9:a7:15:cc:41:f0:a9:
71:61:eb:90:f6:2f:6d:f7:6d:5b:c3:8e:92:1b:a4:70:7c:03:
59:e2:56:33:50:b8:8e:db:11:a8:80:7c:c3:2a:6f:63:64:ea:
66:8a:c9:84:07:1e:e1:f5:bc:8d:82:b4:c4:99:07:35:a0:ce:
08:4e:5c:c7:fe:ee:bc:68:b3:38:0e:9b:e9:6a:07:a3:af:9c:
76:d1:05:68:81:21:0e:e3:3e:1f:50:e8:af:69:f5:db:43:09:
86:44:20:6f:a7:40:7a:0f:3c:c4:0d:8c:1d:36:7b:78:f2:5b:
60:e8:3f:d1:c5:03:e4:60:9e:86:15:e8:87:2b:3a:11:72:aa:
61:f1:19:36:c4:48:14:62:26:f3:63:c2:1f:2a:f9:e9:53:ae:
d5:1b:00:9b:6b:9d:0c:11:9d:6b:c4:d0:9d:ad:81:14:fb:00:
db:68:10:44:3a:6b:75:cd:40:03:f8:d4:cf:c0:90:a1:14:cc:
01:45:7a:20:21:07:45:e4:f8:95:7c:61:60:90:c1:15:25:05:
63:d4:39:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:11 2025 by rpki-client