Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/QwvD7ilHysLGynnkEaRLtZ8S6Us.roa
File: QwvD7ilHysLGynnkEaRLtZ8S6Us.roa (raw, json)
Hash identifier: YP5VY/+ASkz1LfhocyuQ44niccX27uswh8o+HNY2T1o=
Subject key identifier: 43:0B:C3:EE:29:47:CA:C2:C6:CA:79:E4:11:A4:4B:B5:9F:12:E9:4B
Certificate issuer: /CN=E6982953DF0777AEDB88EE3FF20A152640571785
Certificate serial: 1BF1
Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/QwvD7ilHysLGynnkEaRLtZ8S6Us.roa
Signing time: Fri 17 Jan 2025 01:23:31 +0000
ROA not before: Fri 17 Jan 2025 01:23:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 45079
IP address blocks: 101.52.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7153 (0x1bf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785
Validity
Not Before: Jan 17 01:23:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=430BC3EE2947CAC2C6CA79E411A44BB59F12E94B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:a9:62:eb:f6:04:f9:03:44:5b:57:0d:79:
0d:00:10:c5:74:72:6f:fb:d8:50:89:09:30:c7:fd:
4e:61:8d:1f:f2:e5:2d:12:cc:55:6a:96:1b:82:62:
6a:a4:bb:8c:66:ec:63:fb:10:d7:a4:63:2c:b4:f7:
2f:df:6b:9c:ab:32:d2:b5:27:11:6b:7d:40:c1:5b:
e9:c5:89:83:4e:bb:fc:96:4b:a1:23:c3:bb:8b:a2:
fe:2a:13:3d:df:6b:58:f0:21:49:b7:05:18:e3:e8:
76:6c:fd:92:59:11:1f:f6:56:57:2d:b0:ed:84:9c:
a8:86:b3:15:e5:05:60:21:70:e8:c9:ba:bc:71:df:
68:8a:a7:27:0a:5d:ee:cf:35:be:e9:b3:59:ae:14:
ec:57:5c:66:23:76:a2:f8:44:20:e5:05:72:d7:89:
fe:6f:bf:9b:c1:64:64:9f:fa:e1:2f:ce:a3:fa:4c:
db:0d:a1:e7:d5:e7:1b:ed:ed:21:2e:62:55:e0:15:
ff:91:82:ff:10:fa:78:09:d7:10:18:59:86:73:3f:
c0:5c:94:ba:4b:a2:b5:93:52:b3:69:d2:fc:bc:a3:
5d:da:c1:17:22:51:7a:bf:3e:1b:e3:ee:97:63:eb:
6c:bd:9b:1d:c5:34:f7:d1:25:02:2c:3b:3e:96:58:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:C3:EE:29:47:CA:C2:C6:CA:79:E4:11:A4:4B:B5:9F:12:E9:4B
X509v3 Authority Key Identifier:
keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/QwvD7ilHysLGynnkEaRLtZ8S6Us.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.52.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:12:4b:98:89:5c:c6:ab:ee:5f:13:4b:d9:02:99:e3:f8:e5:
94:5b:49:61:90:6b:eb:ab:56:68:82:4c:3c:07:62:b3:a3:48:
79:cd:e9:e7:9c:27:bd:14:39:81:3b:80:8d:1b:b6:fd:3b:70:
6f:f0:02:c2:5f:9e:df:15:ad:03:e7:84:50:cc:20:71:5b:77:
03:44:a5:ae:96:b3:82:e6:89:61:9e:e6:1c:78:be:c7:72:ef:
fb:0e:1a:06:f4:f6:b6:54:c8:98:24:40:63:ef:ac:66:cc:37:
0b:ec:0a:ab:f4:77:0f:3e:76:3b:35:95:2a:6b:91:27:ae:8a:
0a:9d:2e:3f:54:22:12:73:d2:58:66:ad:20:a6:15:b4:b3:79:
9c:2b:51:ae:ee:fc:3f:90:57:40:d2:48:12:03:61:7e:76:d7:
76:11:ba:e9:4a:04:06:06:19:b0:0d:5e:55:a0:ee:0e:c3:b6:
f1:59:32:4f:ff:d4:fd:a9:a2:0b:cc:d7:dd:1f:e8:5c:f3:f4:
48:14:03:16:50:31:ed:cb:57:77:ae:02:30:39:5e:4a:bc:7b:
e8:cd:97:86:30:d5:f7:b0:b8:ac:f8:c3:04:91:65:b4:bf:33:
13:88:be:f2:d2:07:56:97:c4:69:e5:8f:f5:5b:c4:b6:51:a3:
b7:af:f7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:35 2025 by rpki-client