Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/FA4OPm-4AdYK8dCJSi0KBP0Qt88.roa
File: FA4OPm-4AdYK8dCJSi0KBP0Qt88.roa (raw, json)
Hash identifier: G28GGBTwAxXqYeXJe4wR4sdvZ9Mux7RfdAVSXqpd+xk=
Subject key identifier: 14:0E:0E:3E:6F:B8:01:D6:0A:F1:D0:89:4A:2D:0A:04:FD:10:B7:CF
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 1B85
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/FA4OPm-4AdYK8dCJSi0KBP0Qt88.roa
Signing time: Thu 21 Nov 2024 09:32:17 +0000
ROA not before: Thu 21 Nov 2024 09:32:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 115.31.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7045 (0x1b85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Nov 21 09:32:17 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=140E0E3E6FB801D60AF1D0894A2D0A04FD10B7CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:f2:f5:85:dd:b7:a6:21:ad:6c:2e:40:d8:
9f:e8:0e:50:18:19:26:48:42:13:42:2d:d5:e2:69:
88:8f:fe:b8:f4:07:2e:f1:34:80:91:82:6a:bc:7a:
ba:d6:ab:0a:e7:60:6b:1a:e2:be:72:d2:52:63:2b:
ed:4f:26:a1:01:9d:88:4f:4b:e1:67:21:e2:33:41:
36:7f:e3:56:1f:68:1b:1e:63:d7:94:65:2d:01:39:
66:b8:ca:82:ab:0a:57:c6:7c:b4:d9:7e:da:f0:c8:
9b:40:fa:02:9c:6a:98:34:9a:36:f4:45:96:0f:ec:
ea:fe:53:2d:de:2f:84:98:4a:b3:9d:8d:52:72:9f:
32:97:f0:3b:c9:8f:ce:e7:08:d9:b6:b7:11:d4:9a:
47:97:d3:98:26:92:b7:83:f6:53:70:5b:23:3e:99:
fd:60:06:37:01:36:7c:3c:1f:04:37:d7:d1:dd:f1:
b2:b3:e4:bd:05:49:75:f6:8e:39:ad:91:eb:b3:09:
f8:8a:71:01:48:db:15:35:0d:dd:5a:43:4f:8f:2b:
e1:e6:ef:dc:2f:8c:18:77:1b:72:8c:cb:c0:2a:03:
69:09:4a:dd:89:f7:ac:3b:d8:4e:19:5a:4c:43:b8:
0d:41:5d:4c:96:16:5b:e4:47:f0:b5:25:d6:59:c4:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:0E:3E:6F:B8:01:D6:0A:F1:D0:89:4A:2D:0A:04:FD:10:B7:CF
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/FA4OPm-4AdYK8dCJSi0KBP0Qt88.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.31.68.0/22
Signature Algorithm: sha256WithRSAEncryption
e6:55:82:60:c1:c1:7c:ae:7b:51:c6:50:5c:ef:cd:66:cf:20:
ea:b1:87:99:28:c6:dd:e4:9a:37:72:84:9d:b7:df:6f:9b:93:
a5:01:ee:1b:05:2b:33:e4:f2:cf:bf:ac:97:52:41:df:52:7c:
57:48:72:16:a6:e9:47:1f:41:a4:c6:51:d9:26:7e:26:c5:ef:
17:1c:b3:32:11:23:11:38:a7:6e:91:df:17:f6:9b:52:6f:c3:
3a:47:a8:07:ed:cf:4b:bd:ff:29:b4:d6:39:7b:09:b4:cf:92:
89:2a:32:83:f1:d2:9c:84:be:ef:3a:8a:00:f2:28:50:9c:0f:
03:e4:c3:9a:44:b3:6a:d0:f9:6e:65:1a:e2:5f:1c:8d:1e:2b:
36:ad:6c:2f:86:bd:45:1b:6d:33:34:33:80:c6:ca:1a:b0:f0:
c7:3b:c8:23:2e:0a:24:18:d0:b4:3d:b4:5c:92:87:47:00:42:
4c:80:4d:d7:26:ae:c8:1a:09:f1:6d:25:04:7c:7c:48:1b:ce:
69:ac:b6:97:c4:8d:9a:99:d6:bd:58:7a:61:d1:21:22:4e:b5:
d4:3c:45:fc:79:5f:8a:26:fb:a6:bf:63:79:6a:07:64:a7:29:
8c:e8:65:f3:da:7d:33:f3:4a:eb:fc:9f:22:8f:1a:46:b9:a1:
c3:69:22:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:45 2025 by rpki-client