Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/sXsDqU7POBpBBEucmgnYKQ23VTI.roa
File: sXsDqU7POBpBBEucmgnYKQ23VTI.roa (raw, json)
Hash identifier: kIIWuPGQ/B3f7FviVbGe8VZHeOXhBbs+hiZI5MWZzTA=
Subject key identifier: B1:7B:03:A9:4E:CF:38:1A:41:04:4B:9C:9A:09:D8:29:0D:B7:55:32
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 09EC
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/sXsDqU7POBpBBEucmgnYKQ23VTI.roa
Signing time: Mon 17 Feb 2025 13:58:32 +0000
ROA not before: Mon 17 Feb 2025 13:58:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 59.107.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2540 (0x9ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Feb 17 13:58:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B17B03A94ECF381A41044B9C9A09D8290DB75532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:f6:0e:ad:96:b4:75:02:c6:26:3d:99:00:
5f:2b:92:8e:7c:d1:c0:d5:d6:2c:3f:53:0f:5d:7a:
62:50:7f:66:aa:7b:d7:56:25:1b:a8:03:60:25:82:
ed:8a:92:28:3c:fc:bb:8d:c9:6e:e5:6a:4c:93:c1:
81:05:92:22:6c:a8:47:00:be:9a:9e:d0:f2:22:57:
3c:f4:f2:ed:fa:71:a1:54:e0:49:ec:92:37:36:cc:
34:56:d8:8a:ab:cb:f4:a8:87:52:89:69:49:fb:5b:
37:84:8f:b3:69:b1:6e:43:02:8d:a4:66:e2:28:3d:
81:77:e9:5e:01:34:f8:52:a0:2a:62:92:f1:18:81:
39:a5:5c:90:d4:8b:36:14:dc:9b:4f:78:53:b2:0f:
74:05:69:e7:da:54:b4:e0:07:38:ff:09:5a:25:fb:
5f:7a:5a:99:cf:d5:d3:9b:7c:09:31:87:31:f1:a0:
a7:b9:6b:47:7c:84:25:5e:40:a9:1a:26:37:0d:7f:
ec:71:d6:28:1f:fd:b9:4c:c0:78:bc:bc:bb:0f:39:
94:1b:96:e3:a6:0b:9d:9c:76:1f:ac:6f:3d:1d:53:
7b:17:56:8f:80:3d:c9:04:c6:ac:df:ff:ad:b0:2e:
f0:e3:62:5c:7f:39:34:2e:2b:3c:93:20:06:82:4f:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:03:A9:4E:CF:38:1A:41:04:4B:9C:9A:09:D8:29:0D:B7:55:32
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/sXsDqU7POBpBBEucmgnYKQ23VTI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.107.192.0/18
Signature Algorithm: sha256WithRSAEncryption
16:ff:70:9a:53:b1:5f:af:1b:13:16:2f:b6:7d:40:9d:da:85:
c1:05:6d:dc:5a:74:0a:d8:24:b5:1f:12:39:a9:50:2c:2d:70:
08:90:fc:07:41:ca:0b:2c:cf:4d:9a:72:49:db:3a:42:10:22:
f0:4e:68:05:f1:37:a8:54:78:e5:ed:a9:0e:fd:12:16:cc:58:
bd:da:0a:b5:2e:a7:b6:b2:63:da:f1:60:19:ac:ef:7b:9b:b1:
ac:c4:af:86:76:9b:2a:bd:27:8e:88:a3:3a:96:d4:b0:a5:17:
5d:dc:b9:05:d6:bb:5b:01:ba:4a:ea:73:41:bb:76:6c:e5:e9:
b8:1b:60:1f:d6:ec:68:bd:c7:93:32:49:d9:b0:19:46:6d:71:
4e:93:6a:30:8e:2e:b1:a1:51:02:30:bb:1d:94:f5:04:33:83:
27:8b:11:da:50:ab:e9:d8:1f:a4:24:66:10:3d:bb:07:b7:85:
1d:a1:4a:1d:7a:36:59:33:9d:10:01:75:18:99:9f:f0:a9:db:
2a:79:92:45:9a:ad:bd:32:3a:02:b4:bf:25:47:b1:07:60:2c:
c3:c8:89:1e:cd:d8:cc:4e:68:d9:ba:57:ef:c8:2a:42:2d:16:
0f:00:dc:9d:57:44:b4:3e:f8:d6:72:08:a5:d5:64:db:6f:74:
89:9c:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:45 2025 by rpki-client