Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/0p4OnuorqVemfKiNz4jb1ANy_VQ.roa
File: 0p4OnuorqVemfKiNz4jb1ANy_VQ.roa (raw, json)
Hash identifier: XoSGiFq8O6Q57IRgvp7PfupeNUc2/oaY3bSF8APHxvs=
Subject key identifier: D2:9E:0E:9E:EA:2B:A9:57:A6:7C:A8:8D:CF:88:DB:D4:03:72:FD:54
Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Certificate serial: 1F3B
Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/0p4OnuorqVemfKiNz4jb1ANy_VQ.roa
Signing time: Fri 17 Jan 2025 01:30:06 +0000
ROA not before: Fri 17 Jan 2025 01:30:06 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138915
IP address blocks: 27.0.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7995 (0x1f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Validity
Not Before: Jan 17 01:30:06 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D29E0E9EEA2BA957A67CA88DCF88DBD40372FD54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:a4:3c:81:b3:a4:5e:81:cb:39:ec:69:1c:
43:b2:28:9f:9c:7e:74:2a:86:6b:dd:ab:d3:11:c3:
c4:8f:17:a1:50:bb:f3:04:bb:10:63:1e:dc:b4:8b:
e6:09:cf:d5:48:9e:7e:c9:3d:ef:dc:3f:49:03:57:
69:2b:c3:d1:89:e8:eb:72:25:4e:0e:be:0c:d2:0a:
52:fc:65:3d:41:85:21:89:e6:e5:8e:a6:2c:14:56:
45:62:7b:a4:0f:c3:f7:99:e6:ab:52:a3:3a:f4:15:
d6:43:73:53:e0:c1:ef:99:f0:43:e2:63:c7:75:19:
67:49:9e:60:bf:1c:df:e7:23:b4:5a:50:f1:65:30:
b6:ca:3e:ee:58:03:65:07:db:f0:81:68:46:46:28:
6b:34:97:62:7c:99:1e:0a:41:b9:fa:c8:20:62:75:
32:b0:55:74:84:76:e0:0e:7a:a2:94:94:57:76:5c:
ff:83:ee:b2:b5:68:7d:21:66:1e:e4:09:86:3e:eb:
e4:20:5d:27:65:85:74:b2:43:70:c8:8c:ca:32:da:
99:a7:86:3b:74:32:5e:bc:6b:18:56:e6:f5:06:e0:
51:81:59:12:61:3a:a3:dd:c7:f4:9d:66:ea:e6:1f:
98:7e:58:20:8c:bf:d4:09:5c:12:db:41:af:36:76:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9E:0E:9E:EA:2B:A9:57:A6:7C:A8:8D:CF:88:DB:D4:03:72:FD:54
X509v3 Authority Key Identifier:
keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/0p4OnuorqVemfKiNz4jb1ANy_VQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.133.0/24
Signature Algorithm: sha256WithRSAEncryption
33:df:1b:c2:16:e0:c8:f8:31:fb:a5:d6:fb:5e:78:c0:0b:02:
c2:25:6a:9b:60:3b:2f:6b:67:e3:35:7f:07:76:4f:c4:35:d9:
ac:29:53:1b:d3:94:73:04:d9:48:3d:4a:2a:eb:35:12:a4:9d:
cb:74:93:80:89:19:bf:24:fe:61:72:aa:65:07:3d:37:2c:a4:
e8:dc:15:61:58:c7:00:63:ae:0d:72:67:b5:4b:b2:7b:9f:62:
6c:30:ef:af:38:58:9f:c1:be:d9:bb:4d:64:c9:e1:f8:99:c4:
8f:ea:ac:3d:ce:08:75:44:7c:1e:b0:74:55:28:9c:8f:b7:4c:
fe:66:09:3e:40:5d:58:29:dd:e7:65:05:8d:ca:34:c1:fa:bc:
d1:e5:9f:11:1d:bf:58:7e:e1:0f:6a:d8:85:69:7d:51:fc:db:
ca:14:12:d8:e3:64:0b:8b:0e:72:80:5d:31:4b:64:73:00:eb:
f2:be:53:06:ad:ae:67:4c:85:47:83:c3:f6:0a:03:35:35:e7:
da:db:6b:77:dd:fe:29:74:67:77:1e:f8:b0:f0:7e:b2:8a:0a:
e6:a9:87:65:d4:eb:3a:b0:ea:da:72:56:4d:5c:40:02:c6:79:
ad:5c:4d:73:28:52:2d:dd:fd:70:24:a8:81:df:de:d7:7e:c3:
61:c4:a2:e9
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICHzswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTU2
REE0QzI3NUYzQ0NDOTJEMDg2MjAyQTFFREE3NzgzRjBDM0QwRDAeFw0yNTAxMTcw
MTMwMDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQyOUUwRTlFRUEyQkE5
NTdBNjdDQTg4RENGODhEQkQ0MDM3MkZENTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCd1KQ8gbOkXoHLOexpHEOyKJ+cfnQqhmvdq9MRw8SPF6FQu/ME
uxBjHty0i+YJz9VInn7JPe/cP0kDV2krw9GJ6OtyJU4OvgzSClL8ZT1BhSGJ5uWO
piwUVkVie6QPw/eZ5qtSozr0FdZDc1Pgwe+Z8EPiY8d1GWdJnmC/HN/nI7RaUPFl
MLbKPu5YA2UH2/CBaEZGKGs0l2J8mR4KQbn6yCBidTKwVXSEduAOeqKUlFd2XP+D
7rK1aH0hZh7kCYY+6+QgXSdlhXSyQ3DIjMoy2pmnhjt0Ml68axhW5vUG4FGBWRJh
OqPdx/SdZurmH5h+WCCMv9QJXBLbQa82dvQzAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU0p4OnuorqVemfKiNz4jb1ANy/VQwHwYDVR0jBBgwFoAU5W2kwnXzzMktCGIC
oe2neD8MPQ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIx
LzVXMmt3blh6ek1rdENHSUNvZTJuZUQ4TVBRMC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNVcya3duWHp6TWt0Q0dJQ29lMm5lRDhNUFEwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIxLzBwNE9udW9ycVZlbWZL
aU56NGpiMUFOeV9WUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAbAIUwDQYJKoZIhvcNAQELBQADggEBADPfG8IW4Mj4Mful1vteeMALAsIlaptg
Oy9rZ+M1fwd2T8Q12awpUxvTlHME2Ug9SirrNRKknct0k4CJGb8k/mFyqmUHPTcs
pOjcFWFYxwBjrg1yZ7VLsnufYmww7684WJ/Bvtm7TWTJ4fiZxI/qrD3OCHVEfB6w
dFUonI+3TP5mCT5AXVgp3edlBY3KNMH6vNHlnxEdv1h+4Q9q2IVpfVH828oUEtjj
ZAuLDnKAXTFLZHMA6/K+UwatrmdMhUeDw/YKAzU159rba3fd/il0Z3ce+LDwfrKK
Cuaph2XU6zqw6tpyVk1cQALGea1cTXMoUi3d/XAkqIHf3td+w2HEouk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:05 2025 by rpki-client