Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/vkP4IAtkibJ6w-wWIM-oD40h3AY.roa
File: vkP4IAtkibJ6w-wWIM-oD40h3AY.roa (raw, json)
Hash identifier: 4mc0LS8CjsUHpOBh0mQ7O6D44D2yI0qrq6e/pOG0Eng=
Subject key identifier: BE:43:F8:20:0B:64:89:B2:7A:C3:EC:16:20:CF:A8:0F:8D:21:DC:06
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18BB
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vkP4IAtkibJ6w-wWIM-oD40h3AY.roa
Signing time: Fri 17 Jan 2025 01:25:30 +0000
ROA not before: Fri 17 Jan 2025 01:25:30 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4812
IP address blocks: 202.89.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6331 (0x18bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BE43F8200B6489B27AC3EC1620CFA80F8D21DC06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:45:95:65:b2:e9:1e:0e:e2:ed:ec:7e:a5:
c0:c7:0a:5d:c7:46:31:2e:8d:49:1f:4f:6b:8a:4c:
47:21:52:dd:f2:37:1a:fa:4d:20:a3:d3:38:c9:ca:
68:d3:73:4d:8e:75:4c:6c:a2:91:b7:91:e9:ad:4d:
b1:95:20:9c:29:39:bd:76:df:bc:eb:02:32:47:a5:
06:f0:ee:a2:06:ee:0d:cf:be:5e:62:6d:de:d9:3c:
1d:de:e9:a6:69:77:59:10:c8:2c:13:1b:1a:34:cc:
1d:e6:08:36:c2:42:a4:a0:4e:28:bf:50:16:df:6d:
25:26:09:22:be:34:e9:bd:55:3c:62:22:58:f3:02:
6f:6d:a2:24:37:9f:af:01:a9:ad:a8:77:7e:71:34:
b1:54:e6:3c:83:38:2d:5c:95:46:8d:45:05:03:25:
03:a9:f4:61:52:54:5a:f1:69:72:f4:fd:6f:c2:8b:
8e:b3:bb:d3:5b:0d:cb:fc:af:a0:12:2b:32:4a:3f:
26:b1:a8:4f:70:dd:2a:42:8d:38:48:34:f4:64:c2:
2f:e5:e6:ff:79:eb:17:85:05:43:a1:1d:eb:1b:8c:
1a:fc:95:a0:3f:f0:df:5e:52:c3:d3:d9:a7:e3:a5:
36:dd:4e:9f:c1:cd:b1:6c:ec:4b:7f:fe:a6:c8:9c:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:F8:20:0B:64:89:B2:7A:C3:EC:16:20:CF:A8:0F:8D:21:DC:06
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vkP4IAtkibJ6w-wWIM-oD40h3AY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.89.96.0/24
Signature Algorithm: sha256WithRSAEncryption
47:08:f1:3d:2d:a3:df:fa:9d:e0:ac:e6:9d:36:da:5e:7d:75:
c2:36:fb:f1:45:79:a7:51:6d:d0:c6:e2:5a:02:22:17:44:00:
9f:fd:3d:09:3b:23:39:7e:5b:45:4b:92:c5:c6:9a:25:19:30:
59:ef:8d:76:2d:03:eb:6a:54:37:b1:f6:ff:0e:55:4a:20:57:
40:db:a5:ad:8f:91:84:54:77:5b:f9:d3:1f:1f:32:40:44:f7:
5f:dd:1e:15:40:5c:72:fd:2e:4d:13:75:7b:89:7f:3c:e8:ce:
d0:8d:33:11:62:55:da:47:94:26:a0:4f:7a:f8:54:27:b8:08:
9e:b1:1c:65:39:01:b1:37:a8:68:ab:ef:37:b3:dc:50:c6:b0:
e0:81:f6:73:31:aa:dc:3a:7a:58:8b:51:6d:42:4a:28:f8:64:
52:e6:dc:41:bc:a5:37:6a:a1:9a:b5:18:b9:a7:c9:30:94:04:
18:2a:fa:1c:75:6b:32:2a:1a:e0:81:a0:f1:2b:95:b4:b5:d1:
63:85:56:d1:84:49:d9:12:89:68:4d:2b:b5:28:eb:9b:00:bb:
75:28:8d:06:3a:0b:68:4b:74:73:07:79:fe:86:3b:ae:c6:48:
7a:9c:78:ea:43:44:83:27:81:48:c1:db:28:55:52:b3:73:51:
6e:7a:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:42 2025 by rpki-client