Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/lwjNSorLO6sogwSEhUFTrpgYnjI.roa
File: lwjNSorLO6sogwSEhUFTrpgYnjI.roa (raw, json)
Hash identifier: WElPxibr9Anaku2dyTjxj4U8xBg/YOV/t51u3Our9G4=
Subject key identifier: 97:08:CD:4A:8A:CB:3B:AB:28:83:04:84:85:41:53:AE:98:18:9E:32
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 09EF
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lwjNSorLO6sogwSEhUFTrpgYnjI.roa
Signing time: Mon 17 Feb 2025 13:58:33 +0000
ROA not before: Mon 17 Feb 2025 13:58:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 59.107.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543 (0x9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Feb 17 13:58:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9708CD4A8ACB3BAB28830484854153AE98189E32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:6b:14:e1:d7:7d:8c:db:49:82:4b:42:ed:
7e:50:92:b5:d4:56:5a:44:02:70:a2:bb:01:0a:df:
91:c3:73:1b:69:ff:b0:9b:ee:55:05:4f:c1:93:33:
b1:de:2e:82:2b:97:91:a7:87:3a:70:d9:20:26:98:
f0:35:4e:f9:a7:2a:ed:b3:bf:4b:d3:9a:b6:fc:13:
5d:b2:17:2f:10:64:4a:55:dc:05:04:1b:80:17:c8:
c7:ea:f6:4f:f4:95:a7:42:cc:c5:bd:da:89:7f:8d:
25:5b:8b:0e:a6:8d:24:ba:91:9d:6f:f5:d9:b7:2a:
a6:8b:da:1e:9a:7b:2f:9e:62:f9:c7:42:d1:4c:a6:
e4:cd:24:b9:ed:c4:79:58:8b:0d:49:68:f5:ff:4c:
90:fa:7f:a4:61:0a:34:62:ee:86:5b:c1:e5:26:6f:
51:a0:e4:5f:74:04:21:f1:a3:a4:52:00:57:df:57:
5c:be:05:4b:ef:f4:e7:aa:09:4d:bb:e3:92:cb:fe:
1b:88:32:4e:ab:35:dc:f6:62:dd:83:af:82:ce:5c:
33:08:95:08:07:39:e5:35:38:8d:bf:9a:f5:5c:7e:
f2:3a:34:ea:6b:ad:a9:ce:1c:ec:9a:c6:cb:5f:63:
29:5d:29:18:27:77:3e:8b:d0:d9:5b:51:48:63:e0:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:08:CD:4A:8A:CB:3B:AB:28:83:04:84:85:41:53:AE:98:18:9E:32
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lwjNSorLO6sogwSEhUFTrpgYnjI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.107.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:98:9d:44:46:a6:13:ee:7b:3e:d9:98:39:cc:71:82:80:8a:
18:ea:81:30:f2:c5:28:e7:01:9a:f8:3d:58:62:d2:cb:8d:ce:
23:da:96:3d:a6:50:bd:dd:90:5a:fe:36:56:af:c8:19:d8:82:
8d:58:28:c0:27:24:f9:e9:a8:25:d2:42:6d:58:1e:b1:30:40:
c1:34:7d:4a:3f:29:b9:18:40:86:8d:a2:2f:6f:bd:f0:bb:b7:
10:a6:ea:2e:b9:f0:dc:ec:f2:ec:8b:80:c7:fa:8d:3c:b0:56:
e5:ff:8f:71:a7:c4:94:e3:cf:37:33:2d:6a:0b:d2:e7:60:1c:
eb:a9:66:7a:37:f1:6f:a9:d3:37:01:38:79:62:25:63:a4:a0:
f2:4a:51:0f:5c:fb:09:00:84:2f:dc:01:ee:47:40:2a:81:d0:
7c:ca:dd:f8:a8:f1:5d:9b:89:35:c1:0d:36:25:3c:c3:01:41:
54:1f:a1:d1:17:f6:62:1f:0e:1a:bd:2b:96:a8:65:ef:a4:bc:
39:38:ff:3c:50:7f:35:8e:b3:b4:06:16:63:47:4c:52:09:ca:
ac:70:d1:d4:c8:92:e2:b6:93:9b:5e:95:c0:c6:9d:4b:45:c2:
68:0e:e4:7c:7c:96:9f:59:0a:1d:8d:94:28:fc:9f:85:27:9a:
5f:fa:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:42 2025 by rpki-client