Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/BJ8T6xeZmMZPoJmpWakz5R26fNM.roa
File: BJ8T6xeZmMZPoJmpWakz5R26fNM.roa (raw, json)
Hash identifier: 4dzjcrkTArAsirZGrc5ZYf3u9Rn1+p/i9kWIil0/S6o=
Subject key identifier: 04:9F:13:EB:17:99:98:C6:4F:A0:99:A9:59:A9:33:E5:1D:BA:7C:D3
Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Certificate serial: 1C80
Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BJ8T6xeZmMZPoJmpWakz5R26fNM.roa
Signing time: Fri 17 Jan 2025 01:23:28 +0000
ROA not before: Fri 17 Jan 2025 01:23:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 9391
IP address blocks: 211.156.224.0/20 maxlen: 20
218.97.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7296 (0x1c80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Validity
Not Before: Jan 17 01:23:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=049F13EB179998C64FA099A959A933E51DBA7CD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:81:96:50:9c:97:bb:f4:4e:60:42:e0:ff:
68:af:cf:cf:01:fd:85:c7:1d:65:d4:f1:79:5c:75:
e0:8f:34:ea:32:b1:7f:35:c4:c9:29:83:5d:53:e6:
c3:f4:2e:62:0d:ce:cf:d6:44:8f:a8:c6:06:7b:26:
10:4d:3a:1d:e8:2e:8d:f8:55:8c:78:54:b2:6e:5b:
f5:61:01:8c:26:0d:a5:2b:57:f3:1b:c0:70:a1:ec:
e3:b6:ba:6a:d7:87:58:52:c3:c2:8a:e9:14:57:68:
42:ac:08:b9:50:31:83:75:0c:5f:b7:bb:23:5e:62:
f2:d5:bc:cd:10:62:6e:32:2e:9d:61:3b:00:27:05:
f9:4d:18:20:c6:c8:e7:bd:0a:a0:4d:01:12:71:62:
b2:41:bd:00:56:80:64:88:e9:fe:6c:ec:c4:a2:f3:
5b:72:5d:f2:4f:dd:64:7d:c4:60:5d:61:fe:10:26:
02:fe:b4:e9:f8:81:0b:85:99:ed:3c:b4:92:d4:12:
07:28:6c:20:a6:f8:e4:44:b3:03:9b:96:f1:64:4d:
1e:b7:11:87:31:3c:16:e2:fb:d0:65:ca:04:b4:43:
92:ca:dd:74:66:78:3e:4a:f9:41:3b:b5:06:4c:bf:
62:4d:ee:53:6d:f9:c1:16:d7:f6:0a:37:70:95:e7:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9F:13:EB:17:99:98:C6:4F:A0:99:A9:59:A9:33:E5:1D:BA:7C:D3
X509v3 Authority Key Identifier:
keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BJ8T6xeZmMZPoJmpWakz5R26fNM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.156.224.0/20
218.97.224.0/20
Signature Algorithm: sha256WithRSAEncryption
ca:c6:b4:04:97:b5:bc:c2:1f:dc:b9:bf:65:64:80:52:9d:23:
02:0f:88:2c:9d:58:a4:e2:ea:c1:e5:09:0c:1a:d6:e9:1b:ec:
a0:a0:fd:88:01:26:23:26:82:8f:01:d6:0b:2c:74:ce:a6:be:
08:70:76:d3:7f:b4:3d:7e:d9:5b:15:9d:80:db:b6:40:2c:e7:
ab:f4:7e:de:ec:2a:3b:74:45:8f:47:b7:ba:82:53:74:b0:72:
53:47:d3:9e:a6:38:f9:27:1c:99:5b:6d:28:9e:e0:49:ac:2d:
15:ec:91:a1:1d:70:ab:9e:51:38:44:61:71:00:6d:6a:8d:cd:
9a:23:3e:0a:8f:5b:3b:2a:95:9f:4e:11:63:10:af:de:cc:88:
d2:28:2d:63:ce:45:88:a9:70:06:e4:1a:d9:cd:51:53:62:74:
eb:94:bd:4a:c2:32:44:45:32:89:8f:d1:6e:3e:70:0f:dd:e3:
ee:09:5c:e6:b9:76:f5:7e:71:2f:94:a7:bc:87:98:a3:d0:23:
5b:47:9e:00:7e:13:2d:d2:fa:e3:43:96:b5:af:7f:69:43:af:
ab:94:dd:95:83:e4:28:0e:ff:27:19:05:66:3c:1d:25:af:92:
b0:e7:6c:21:db:5f:b3:10:02:a7:ff:f6:2b:32:b1:23:65:b2:
b2:a0:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:22:25 2025 by rpki-client