Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/595/KLQ_w_1aUTnuxIvwp_nbGzySL6s.roa
File: KLQ_w_1aUTnuxIvwp_nbGzySL6s.roa (raw, json)
Hash identifier: ZcNwlnSzdFVoe63fgDPo90VtQU4EOW5SrUg9cX3y2Dc=
Subject key identifier: 28:B4:3F:C3:FD:5A:51:39:EE:C4:8B:F0:A7:F9:DB:1B:3C:92:2F:AB
Certificate issuer: /CN=2CA390E2780550E44EC03598082E1995474DF2FB
Certificate serial: 1425
Authority key identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/KLQ_w_1aUTnuxIvwp_nbGzySL6s.roa
Signing time: Wed 13 Mar 2024 01:23:55 +0000
ROA not before: Wed 13 Mar 2024 01:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 58862
IP address blocks: 167.220.244.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5157 (0x1425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA390E2780550E44EC03598082E1995474DF2FB
Validity
Not Before: Mar 13 01:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=28B43FC3FD5A5139EEC48BF0A7F9DB1B3C922FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:3f:1c:9c:9f:47:1f:d8:93:f1:fb:b2:4a:
52:97:5a:dc:3a:4e:97:00:55:da:7c:44:fa:8c:b4:
92:85:78:42:93:2d:86:c4:1c:25:50:5a:4b:cb:a7:
de:dd:5b:06:29:bb:7d:82:1f:36:29:ff:30:31:c4:
1d:64:89:71:fc:77:86:92:78:b6:7e:26:83:fd:91:
54:95:02:69:6c:d2:2d:ff:fc:8b:b7:60:e2:b1:04:
c9:6e:3c:70:5d:d5:fb:15:f9:a5:1a:8c:9b:e0:36:
fb:2e:5c:3b:31:81:80:45:5d:33:b1:02:b4:ba:f0:
77:6e:0d:47:af:f1:a7:c4:94:b2:b5:2c:ab:66:7a:
5e:10:77:e9:31:96:d8:26:cc:26:16:43:ef:a5:da:
d6:f2:ac:ab:4d:87:46:2e:51:a0:f6:52:13:b3:e6:
53:ce:15:b3:62:ef:2e:a3:27:04:ae:8a:97:c4:d7:
8a:ba:53:34:58:d1:c0:b3:e3:f4:c3:53:ca:68:05:
7c:de:fc:15:75:46:19:6c:af:5d:a2:c7:a2:de:12:
f1:8d:55:00:c2:73:9d:73:1e:b2:df:f7:89:15:39:
f7:42:3c:ea:a2:2f:39:a1:07:75:a0:b0:4e:1d:5a:
90:e3:90:aa:b3:8a:5c:df:d1:97:60:ed:20:2f:31:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B4:3F:C3:FD:5A:51:39:EE:C4:8B:F0:A7:F9:DB:1B:3C:92:2F:AB
X509v3 Authority Key Identifier:
keyid:2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/KLQ_w_1aUTnuxIvwp_nbGzySL6s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
167.220.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:7e:42:7a:7d:6f:47:d8:0f:70:88:ab:d3:4e:68:28:f7:d6:
a4:0f:37:54:1a:c1:e6:e4:df:bb:33:e3:fc:c8:a1:f4:f9:15:
f7:24:87:4a:7d:b8:5b:e3:79:c6:53:97:29:ba:35:c6:5b:31:
e3:95:06:70:1a:c0:81:08:c1:dd:61:b2:11:69:31:8a:a6:45:
3b:1e:75:ab:06:90:5f:e9:df:17:d0:ad:44:91:18:2e:0c:76:
ff:4b:1c:a6:27:01:1c:ac:ef:4d:19:32:57:52:99:9e:af:ca:
d7:5f:6e:da:63:c7:c8:52:fb:63:38:ee:3b:60:0a:4a:c9:19:
a9:a2:75:9d:6d:b1:42:2e:11:9d:b8:fb:4d:73:9b:f9:c3:7a:
98:f2:6e:16:51:81:b4:fa:43:a9:e9:8e:67:04:ad:4b:12:be:
e1:68:cf:b4:83:88:51:eb:23:ec:52:eb:73:5e:95:44:92:23:
e4:0e:b1:07:e7:48:af:ba:b0:cc:6f:76:e8:65:8d:0f:7b:61:
c6:95:cd:f8:70:02:c9:01:32:c2:fe:15:e4:98:b5:1d:22:ac:
d7:5d:4a:df:67:8f:75:ff:ec:73:4d:d9:b2:65:00:53:8b:fe:
16:9d:99:12:90:54:81:92:57:bb:9f:5b:9a:f3:ea:c6:d2:ba:
0a:81:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:44 2025 by rpki-client