Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/Cy7TAf1zVzX2iK99fg7P1Itftok.roa
File: Cy7TAf1zVzX2iK99fg7P1Itftok.roa (raw, json)
Hash identifier: eRxv48zowRgxarkLY8dTldTlt53McAMBxEXJUGLRBK8=
Subject key identifier: 0B:2E:D3:01:FD:73:57:35:F6:88:AF:7D:7E:0E:CF:D4:8B:5F:B6:89
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 09EE
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Cy7TAf1zVzX2iK99fg7P1Itftok.roa
Signing time: Mon 17 Feb 2025 13:58:32 +0000
ROA not before: Mon 17 Feb 2025 13:58:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7018
IP address blocks: 59.107.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2542 (0x9ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Feb 17 13:58:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0B2ED301FD735735F688AF7D7E0ECFD48B5FB689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:b5:39:cd:97:95:d0:de:56:0b:7e:a9:73:
d2:db:64:1e:45:f3:8b:2f:01:6a:d4:d5:48:dc:6c:
71:47:38:4c:02:57:30:1c:45:69:c7:28:46:ae:48:
3e:62:0c:ec:c1:25:5e:45:61:92:0a:9f:98:42:fa:
8c:96:c0:6c:9d:00:a8:97:43:e8:93:58:cd:28:71:
d9:9c:9b:28:0d:54:b0:d8:06:40:3b:22:2d:d7:7d:
76:40:d7:43:bd:0c:03:08:58:78:db:e1:46:58:57:
c4:17:e2:1a:47:f9:95:d0:57:1e:b1:35:84:e5:3c:
97:0b:62:ee:42:42:36:d8:d3:f4:9c:27:d1:79:46:
b0:87:03:71:a6:6d:04:66:17:4a:81:f2:d7:51:31:
a7:c8:53:11:cc:86:0d:53:74:a7:de:96:6f:c1:6c:
d7:81:67:1f:65:b9:28:36:58:9f:1e:1d:0d:1f:12:
b1:b3:8c:67:ec:e3:7f:47:5b:25:9b:a0:ed:cb:b0:
4d:a5:13:26:36:70:d4:b3:ee:ca:34:d4:e8:8d:13:
16:47:5e:29:96:20:1a:ed:c5:b1:c7:13:9c:9d:d1:
4a:36:3c:cb:18:3b:01:f3:ae:a0:6e:1a:6f:d1:c5:
02:58:ff:c6:38:05:8e:bd:73:40:a5:a5:63:66:20:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:D3:01:FD:73:57:35:F6:88:AF:7D:7E:0E:CF:D4:8B:5F:B6:89
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Cy7TAf1zVzX2iK99fg7P1Itftok.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.107.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b8:2f:e3:6f:0b:bd:3e:57:ed:8a:3a:1c:98:20:d2:d6:21:aa:
fd:25:15:9c:e2:f0:c1:d1:16:0a:41:80:b2:b7:b6:ed:79:ef:
b9:56:1d:fa:d0:93:93:b5:5a:5e:89:3d:16:d6:3f:61:76:c1:
dd:32:19:9a:f5:f7:74:60:9e:41:a0:31:6c:45:89:59:f0:11:
9b:25:98:a1:a9:48:a2:a8:48:f3:36:79:24:79:bd:7a:a6:a4:
d6:4b:43:5c:77:86:07:cb:cd:8e:86:b7:e8:bc:e3:23:92:29:
e7:29:86:20:4f:cc:ce:43:27:0d:4e:a4:1d:8a:12:7e:72:ff:
74:4d:a8:48:4d:68:6f:36:03:83:5d:80:33:84:ea:0c:a6:16:
7c:31:fe:0c:66:38:83:6c:3a:a2:e9:02:4e:9d:11:ce:2d:ca:
64:6f:66:3d:73:70:aa:e4:f8:28:83:48:b7:8d:1c:e4:a3:32:
3d:f9:68:74:1b:4b:bd:33:22:a6:81:a6:ea:50:db:f6:f3:48:
9d:51:15:0f:42:0c:75:40:50:7c:15:a7:6c:9f:bd:14:41:09:
44:b8:3b:aa:96:63:d5:28:92:56:26:a4:7f:52:ec:59:a6:5f:
ca:df:7e:db:0e:f1:6f:9f:73:d0:b9:38:30:df:f1:26:d0:f6:
99:2d:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:34 2025 by rpki-client