Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/KbrSp-JA2XF2Ql8hSCrC1CbLt6g.roa
File: KbrSp-JA2XF2Ql8hSCrC1CbLt6g.roa (raw, json)
Hash identifier: Np74l2zvMHdN3u9vLx3Kbuovv22rSj7qXcnMGAme8L4=
Subject key identifier: 29:BA:D2:A7:E2:40:D9:71:76:42:5F:21:48:2A:C2:D4:26:CB:B7:A8
Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Certificate serial: 12A9
Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/KbrSp-JA2XF2Ql8hSCrC1CbLt6g.roa
Signing time: Fri 17 Jan 2025 01:29:56 +0000
ROA not before: Fri 17 Jan 2025 01:29:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63199
IP address blocks: 106.3.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4777 (0x12a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Validity
Not Before: Jan 17 01:29:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=29BAD2A7E240D97176425F21482AC2D426CBB7A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:66:f8:67:67:1b:59:8e:14:ed:35:e2:d4:
25:b3:91:09:60:75:cd:44:8b:1b:e9:8c:77:3e:a5:
85:bc:d5:79:f5:04:3f:c5:f8:73:50:d4:59:4a:91:
14:9b:67:a8:7a:d3:07:35:c6:53:5b:ef:38:8f:63:
99:b4:05:95:c8:59:e0:ca:ff:0c:9c:56:43:71:12:
5c:11:19:ce:a6:1f:6e:f0:4c:b3:e5:97:83:84:17:
24:41:f0:99:7a:02:f0:af:56:d2:ab:94:9d:c3:39:
96:92:90:73:f6:75:a8:90:79:32:11:13:f1:a0:79:
ac:c7:54:16:f7:56:96:ea:37:4a:1c:4f:d3:9e:b0:
09:9a:5f:e4:5c:9a:26:d6:9b:76:f5:c9:1f:42:31:
8c:d2:68:a1:86:c0:31:cc:f2:cc:5a:d3:e1:1a:f0:
d4:1b:92:d7:40:e8:10:23:29:08:35:98:95:8b:2b:
f6:01:e7:41:de:49:89:94:f3:69:82:a3:0f:a4:e1:
04:32:21:0c:6e:8e:c3:75:df:13:f1:39:69:cc:79:
e1:e7:ee:d1:ed:83:a1:e2:85:cd:e5:bd:08:b4:56:
0a:7f:29:cd:ee:cf:a6:f0:81:0a:9b:e1:6d:e1:98:
19:fb:66:d1:00:71:64:7f:f9:db:de:3c:81:0b:b9:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:D2:A7:E2:40:D9:71:76:42:5F:21:48:2A:C2:D4:26:CB:B7:A8
X509v3 Authority Key Identifier:
keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/KbrSp-JA2XF2Ql8hSCrC1CbLt6g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.3.139.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a4:cf:f8:85:c3:6a:61:06:fb:e6:26:fd:b2:2e:04:d1:17:
ba:96:1a:c8:a2:19:3d:fb:de:df:ba:6e:be:87:50:d5:37:8d:
62:69:4a:8d:f4:90:58:e1:ce:2a:bd:bd:22:de:f0:c1:d7:11:
84:f8:5b:14:0b:3d:2a:09:6a:15:7a:04:2e:17:73:7e:f0:b6:
c9:0a:9e:ce:44:73:fd:67:45:41:88:ed:76:9c:f0:6f:56:2e:
a9:82:10:1d:d3:eb:26:03:90:5f:65:69:69:59:84:a8:44:85:
32:9b:8e:60:55:ab:1f:d9:0e:63:50:c6:9d:a0:b5:e5:30:07:
56:6f:3b:9e:c2:60:0b:7b:4a:84:9a:97:fb:d0:4c:e8:4a:3a:
27:95:20:a8:7b:b0:1f:8d:49:6b:9b:48:f1:cf:e8:e5:8f:6c:
55:35:1e:ba:b9:9f:e9:7a:99:1a:e1:84:10:b8:f5:3f:0c:8a:
fe:63:2a:3a:bc:3f:af:9d:1a:41:e5:7b:c8:20:ec:d4:8e:90:
89:9a:1d:d7:07:10:0e:9e:25:cf:7a:7a:ab:2e:f1:88:c3:00:
b5:cd:07:4c:87:56:43:26:58:06:f7:a4:0e:43:0f:64:8b:41:
0a:78:1e:3d:97:af:2f:fb:ad:61:b7:ba:fa:9f:3c:2e:3c:63:
a6:0d:79:9f
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICEqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREE5
OTNGRTVDMDRGRjlGMjJDNTI2MjYzMEJFQzM3RjVCM0E3ODI4NTAeFw0yNTAxMTcw
MTI5NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI5QkFEMkE3RTI0MEQ5
NzE3NjQyNUYyMTQ4MkFDMkQ0MjZDQkI3QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSFmb4Z2cbWY4U7TXi1CWzkQlgdc1EixvpjHc+pYW81Xn1BD/F
+HNQ1FlKkRSbZ6h60wc1xlNb7ziPY5m0BZXIWeDK/wycVkNxElwRGc6mH27wTLPl
l4OEFyRB8Jl6AvCvVtKrlJ3DOZaSkHP2daiQeTIRE/GgeazHVBb3VpbqN0ocT9Oe
sAmaX+RcmibWm3b1yR9CMYzSaKGGwDHM8sxa0+Ea8NQbktdA6BAjKQg1mJWLK/YB
50HeSYmU82mCow+k4QQyIQxujsN13xPxOWnMeeHn7tHtg6Hihc3lvQi0Vgp/Kc3u
z6bwgQqb4W3hmBn7ZtEAcWR/+dvePIELuWw5AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUKbrSp+JA2XF2Ql8hSCrC1CbLt6gwHwYDVR0jBBgwFoAU2pk/5cBP+fIsUmJj
C+w39bOngoUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0
LzJwa181Y0JQLWZJc1VtSmpDLXczOWJPbmdvVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMnBrXzVjQlAtZklzVW1KakMtdzM5Yk9uZ29VLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0L0ticlNwLUpBMlhGMlFs
OGhTQ3JDMUNiTHQ2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABqA4swDQYJKoZIhvcNAQELBQADggEBAAOkz/iFw2phBvvmJv2yLgTRF7qWGsii
GT373t+6br6HUNU3jWJpSo30kFjhziq9vSLe8MHXEYT4WxQLPSoJahV6BC4Xc37w
tskKns5Ec/1nRUGI7Xac8G9WLqmCEB3T6yYDkF9laWlZhKhEhTKbjmBVqx/ZDmNQ
xp2gteUwB1ZvO57CYAt7SoSal/vQTOhKOieVIKh7sB+NSWubSPHP6OWPbFU1Hrq5
n+l6mRrhhBC49T8Miv5jKjq8P6+dGkHle8gg7NSOkImaHdcHEA6eJc96eqsu8YjD
ALXNB0yHVkMmWAb3pA5DD2SLQQp4Hj2Xry/7rWG3uvqfPC48Y6YNeZ8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:04 2025 by rpki-client