Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/N0y7O7iTG774vGCJOkCrG07dnWQ.roa
File: N0y7O7iTG774vGCJOkCrG07dnWQ.roa (raw, json)
Hash identifier: 7MMVR7ufVoDl78ie+i3EZijT5/akkNinA5jWDlnKHVk=
Subject key identifier: 37:4C:BB:3B:B8:93:1B:BE:F8:BC:60:89:3A:40:AB:1B:4E:DD:9D:64
Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Certificate serial: 1C88
Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/N0y7O7iTG774vGCJOkCrG07dnWQ.roa
Signing time: Fri 30 Aug 2024 19:49:01 +0000
ROA not before: Fri 30 Aug 2024 19:49:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 138915
IP address blocks: 27.0.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7304 (0x1c88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Validity
Not Before: Aug 30 19:49:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=374CBB3BB8931BBEF8BC60893A40AB1B4EDD9D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:42:ba:06:b0:82:6e:bb:00:18:95:56:5a:
a8:06:b2:90:75:9f:04:07:7f:e3:d2:18:72:e7:69:
af:89:54:20:7e:05:7d:de:60:e3:f4:30:53:90:72:
17:d5:7e:5e:44:0e:cf:44:2b:8e:9d:32:0a:83:40:
8e:a3:68:6e:ec:68:ed:fb:dd:3b:a7:fb:11:26:c9:
21:54:86:14:73:3a:94:a8:00:d6:c6:be:1b:8e:ef:
7b:98:01:ba:44:1a:cf:4b:54:f4:b5:68:9c:0e:2c:
ae:41:f1:e2:6b:94:68:7d:bd:f9:2a:ca:b3:08:82:
95:cd:d6:1a:2d:d5:7b:75:5f:e6:93:c2:f9:ab:42:
5e:02:ce:66:25:33:5b:41:0e:1f:3d:02:90:af:db:
12:e6:70:7f:22:00:9f:a4:f2:07:75:e6:90:43:9f:
98:18:03:ae:04:34:7b:1c:21:5f:0b:46:96:a7:f6:
87:c2:71:c9:6b:cc:4d:8f:be:4d:84:ba:b4:6a:f0:
cc:d3:2c:78:d3:85:b9:ce:5a:6e:f7:c5:db:64:c1:
ef:32:00:c1:2d:e5:53:3a:86:a3:ab:e5:c8:dd:aa:
03:52:b9:04:7f:cd:66:c2:61:ae:99:da:4e:3b:30:
11:57:34:af:69:b8:28:54:9d:12:51:04:c8:de:94:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:BB:3B:B8:93:1B:BE:F8:BC:60:89:3A:40:AB:1B:4E:DD:9D:64
X509v3 Authority Key Identifier:
keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/N0y7O7iTG774vGCJOkCrG07dnWQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.133.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9a:4f:c3:6f:0b:d7:c4:ce:af:31:8e:0b:6a:d7:bb:96:96:
d1:7f:db:86:d1:96:f4:d6:93:9c:1e:23:b0:f8:9e:d6:a2:04:
7d:04:ad:f8:dd:52:a5:72:9a:71:80:19:74:fb:68:16:b7:14:
ab:c5:97:70:5c:5a:22:e4:07:8f:c0:e0:6b:88:49:18:b0:d6:
de:9b:96:94:e6:63:b1:66:ed:22:5d:61:6e:0b:31:cb:e5:b9:
01:63:a3:b0:67:f2:9a:e2:a9:aa:79:07:38:87:1f:dc:5d:f9:
5d:2d:6a:7b:bd:5a:b3:38:ec:c7:48:69:6a:df:65:cd:a8:61:
29:dc:2d:39:31:72:a7:c3:ee:eb:bd:a8:2e:7a:f9:53:de:fb:
a8:34:77:20:d2:2e:0c:ac:81:9d:49:d4:80:9c:c5:85:45:8e:
22:f7:62:d5:89:7d:07:a4:4e:d4:bb:9a:aa:0e:67:e2:86:0a:
42:60:60:c1:4d:d7:5f:f4:32:4e:01:a4:47:42:17:02:fb:81:
81:82:a3:11:2d:41:f0:e9:cd:fc:0b:23:7f:35:80:82:52:3c:
c6:ad:7b:bf:cf:05:a2:60:c1:f5:b8:b0:42:38:92:fb:ba:dc:
7f:9d:17:2c:6f:30:ae:ac:bd:0b:5c:7f:b8:97:79:57:e6:f3:
95:85:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:59 2025 by rpki-client