Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GffFEt798jGr2kcFeplLE9TiUpw.roa
File: GffFEt798jGr2kcFeplLE9TiUpw.roa (raw, json)
Hash identifier: x/NW5R0sx7+4pKoOo1eHG33Vc6aGyXA8OuFJtzNxon8=
Subject key identifier: 19:F7:C5:12:DE:FD:F2:31:AB:DA:47:05:7A:99:4B:13:D4:E2:52:9C
Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Certificate serial: 1C84
Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GffFEt798jGr2kcFeplLE9TiUpw.roa
Signing time: Fri 17 Jan 2025 01:23:29 +0000
ROA not before: Fri 17 Jan 2025 01:23:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 9391
IP address blocks: 124.29.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7300 (0x1c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Validity
Not Before: Jan 17 01:23:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=19F7C512DEFDF231ABDA47057A994B13D4E2529C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:52:9a:f8:e0:84:50:79:47:4a:ac:d1:8b:
c7:57:ac:2a:a0:9c:ec:b6:b8:94:7d:ef:d2:69:2f:
1e:1f:d5:b6:92:a3:33:6a:57:6a:1a:d8:2d:58:aa:
bd:0d:ed:60:af:8c:d3:e9:15:e2:3b:b1:f7:e4:63:
3b:eb:53:12:dc:08:05:dd:a7:9b:5c:80:39:8e:57:
f2:cf:34:74:be:dd:42:d2:90:25:cd:86:64:4a:fb:
73:29:a4:51:1c:d8:b5:86:49:47:76:9c:89:84:b9:
0f:fb:6f:5e:60:57:52:f1:dd:48:41:d2:59:a2:16:
f3:5e:ff:0c:69:e3:1d:87:f0:6c:bb:8e:10:77:ae:
91:51:d6:5c:b3:1a:d3:62:f8:66:e8:81:d6:a9:36:
b0:97:33:d3:45:a3:b1:64:0e:16:45:75:00:cb:f2:
3d:24:c6:c2:fe:d9:cd:35:93:ef:de:a1:1d:d2:5c:
b4:d5:9d:80:6e:dd:33:48:71:11:7b:6b:25:76:be:
3a:06:fe:6b:51:e5:97:02:bd:26:7c:87:1c:a0:d1:
25:93:75:dc:16:ee:59:b1:d5:d3:f0:4e:b7:fc:8d:
7c:92:75:5b:1b:1e:d2:3c:dc:50:07:16:b9:f4:a1:
2b:04:55:6d:0d:df:2b:be:47:a6:c1:97:b4:57:0e:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:C5:12:DE:FD:F2:31:AB:DA:47:05:7A:99:4B:13:D4:E2:52:9C
X509v3 Authority Key Identifier:
keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GffFEt798jGr2kcFeplLE9TiUpw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.29.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0f:f4:a0:ca:26:44:cd:c1:00:c2:10:dd:bd:1e:b1:2e:66:26:
d1:15:01:68:cb:ca:60:a5:3f:51:fd:a5:61:b8:bd:b6:da:92:
f1:f8:0e:d1:90:7f:e7:78:2f:39:f8:64:eb:df:84:85:33:1e:
70:d4:1f:e9:27:30:9d:34:b1:36:d0:76:4e:68:5f:a1:df:3b:
41:2c:57:da:63:4e:9e:06:7a:79:36:d6:15:48:68:2f:c3:34:
d2:93:06:63:86:e9:c4:18:39:a7:c4:7d:74:37:8e:fe:05:a2:
09:7d:77:92:d1:41:de:92:66:81:55:85:0e:57:ca:48:a1:13:
67:6e:6e:b9:63:c7:c7:18:84:3f:c0:f0:a9:77:ae:6d:d9:f8:
03:ca:0c:cf:9c:a4:2c:06:ef:5c:51:c6:f1:69:32:8a:6d:41:
c8:0e:97:6d:7b:00:41:4f:f1:bc:df:f6:55:5a:73:00:16:47:
78:4d:f2:38:ed:41:96:1d:33:80:50:2e:3a:d5:f7:22:78:90:
af:ac:7c:8f:a1:8c:ff:3a:3d:30:57:ea:cf:7e:4d:a0:c4:a8:
41:3f:20:bd:6b:2c:79:5e:f2:54:6a:6e:14:b4:eb:b9:3f:8a:
87:53:8c:a2:f8:b5:c7:2b:8e:28:05:62:94:0a:ff:4c:05:c0:
5a:99:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:43 2025 by rpki-client