Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/tXzrkTh7JSUTkkYgs8hGb0uHNF0.roa
File: tXzrkTh7JSUTkkYgs8hGb0uHNF0.roa (raw, json)
Hash identifier: fP/wKd3t08iTpMXvMgA0ex051qyZXxh1ScmI6IUB0Eo=
Subject key identifier: B5:7C:EB:91:38:7B:25:25:13:92:46:20:B3:C8:46:6F:4B:87:34:5D
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1857
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tXzrkTh7JSUTkkYgs8hGb0uHNF0.roa
Signing time: Fri 17 Jan 2025 01:24:56 +0000
ROA not before: Fri 17 Jan 2025 01:24:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59083
IP address blocks: 150.242.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6231 (0x1857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B57CEB91387B252513924620B3C8466F4B87345D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:b0:68:3a:e2:e0:16:ca:7b:8b:61:bb:1c:
96:da:00:b0:c5:72:3b:07:86:20:27:c7:88:51:1b:
3d:5e:56:81:77:c1:63:d2:86:53:cd:c7:be:7b:19:
02:8a:b2:c3:65:ce:21:2b:57:e3:c0:12:92:f9:0b:
0a:81:11:ff:0e:5f:79:7e:4b:81:26:2f:6d:e4:25:
04:87:ab:e4:84:22:02:11:ed:4e:79:34:15:27:f6:
d4:f2:5c:aa:e1:02:b3:ef:73:81:ca:90:5a:23:f6:
e5:fa:b3:e5:9e:f9:58:d9:02:01:67:33:65:04:95:
c1:a9:88:d9:1a:90:0d:8c:ae:3e:3f:b3:d8:d8:cb:
ac:88:02:f8:44:d2:de:75:5e:e8:a6:27:95:89:d2:
de:88:08:85:36:9f:fd:e9:12:c4:55:00:43:10:ec:
4e:7e:20:0f:fe:9a:7d:ea:44:2a:f0:a6:eb:39:c6:
b6:44:a1:f8:6a:49:20:79:7d:8d:5a:7d:75:4a:52:
f1:b0:ea:b7:ac:65:26:67:bf:73:f3:2d:12:d5:a1:
92:cc:7f:bd:e1:48:5e:7a:28:73:0e:d0:99:aa:bf:
be:1c:29:50:77:fc:5e:3f:b5:94:d8:24:c0:81:e0:
0c:75:13:19:1b:b4:b0:5a:18:5c:f3:a3:30:f2:5d:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:EB:91:38:7B:25:25:13:92:46:20:B3:C8:46:6F:4B:87:34:5D
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tXzrkTh7JSUTkkYgs8hGb0uHNF0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.242.238.0/23
Signature Algorithm: sha256WithRSAEncryption
06:0b:75:e5:35:27:3e:92:12:0c:22:26:3d:6c:40:ed:47:21:
60:b7:2c:1d:97:6f:4c:3f:e3:9a:5f:19:d2:2a:78:eb:b5:14:
71:42:f3:e6:ac:20:64:36:7f:48:dc:87:3f:e6:79:e6:0d:34:
a0:b6:3a:9c:b7:56:1d:fe:15:02:2a:bc:50:c7:53:83:5b:f1:
e1:a0:0f:15:11:af:c6:de:45:8b:cc:2d:da:6a:73:0e:82:5e:
2e:e6:1a:b4:05:25:86:fb:76:f3:41:d3:61:02:6c:fb:e6:a6:
39:6b:52:62:bd:f9:4a:3b:95:fc:e6:45:e6:55:a2:d6:dc:f6:
47:6e:9d:a6:c8:70:55:3b:93:95:0a:5d:c3:fb:75:2c:9e:12:
76:34:42:61:f4:2b:05:91:a2:a3:0b:99:b2:cd:9e:21:2b:78:
cd:c1:ee:c2:7c:cf:48:6c:be:fd:a7:24:b5:fc:7e:3a:9c:1a:
9c:5b:22:2d:97:21:eb:80:cc:1f:b1:9b:86:50:3a:20:7f:f5:
13:ef:4b:59:fb:f8:e4:4e:50:37:33:c1:d8:3c:58:72:4f:61:
df:ad:00:46:09:a5:c8:f3:0b:26:29:0c:36:aa:e0:15:07:c5:
e0:f1:1d:84:07:17:70:93:fc:ca:e4:f4:b0:96:99:2c:f2:72:
3b:8a:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:14 2025 by rpki-client