Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GhF9Iv8-xpxt-BLusQ7L-l-Zlyk.roa
File: GhF9Iv8-xpxt-BLusQ7L-l-Zlyk.roa (raw, json)
Hash identifier: 8dxpRvljiGFK6kC5Y47WYo2ofFRXbFVeh34A5lPzXCs=
Subject key identifier: 1A:11:7D:22:FF:3E:C6:9C:6D:F8:12:EE:B1:0E:CB:FA:5F:99:97:29
Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Certificate serial: 1C83
Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GhF9Iv8-xpxt-BLusQ7L-l-Zlyk.roa
Signing time: Fri 17 Jan 2025 01:23:29 +0000
ROA not before: Fri 17 Jan 2025 01:23:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 9391
IP address blocks: 203.118.192.0/19 maxlen: 19
210.77.96.0/19 maxlen: 19
210.78.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7299 (0x1c83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Validity
Not Before: Jan 17 01:23:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1A117D22FF3EC69C6DF812EEB10ECBFA5F999729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:ee:77:c0:64:7e:b0:60:0a:1d:eb:0d:37:
e3:43:7d:9c:8a:27:8e:37:29:45:2f:0c:b3:d8:e2:
3a:84:c5:d1:ea:93:ff:41:42:97:e1:d2:23:84:2e:
0e:10:da:14:61:02:e6:c4:76:c0:d3:8a:b8:81:da:
9a:fc:54:82:11:92:4f:e2:c2:99:73:e6:aa:51:06:
d3:fb:86:93:ef:20:26:31:7f:8b:f5:05:15:56:26:
09:36:b5:7b:00:57:4d:aa:e7:26:ef:72:85:b9:1e:
18:71:33:c9:0d:89:ad:87:b5:29:aa:a3:9d:ff:d3:
26:52:29:68:b4:2e:59:15:21:0f:d5:31:5f:4e:d9:
ef:30:3a:83:ae:b4:a1:f5:be:d3:3c:71:e8:36:3b:
ee:85:69:18:70:a9:be:75:91:46:82:e1:f6:4c:bc:
bc:48:7e:2f:7e:54:58:2c:8c:3c:3b:d2:7c:cf:7a:
2f:c1:b7:b7:fd:d4:91:9e:41:64:33:2e:6f:40:c7:
a2:e7:f4:11:8f:21:19:2b:59:5b:79:54:b3:63:2d:
c9:50:6f:fb:e7:2b:10:de:46:08:54:48:1f:1e:68:
15:54:ed:54:a3:48:76:de:fb:ed:4a:d3:4c:fa:56:
6d:30:51:29:68:86:10:c1:8d:52:c6:0b:70:c1:64:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:11:7D:22:FF:3E:C6:9C:6D:F8:12:EE:B1:0E:CB:FA:5F:99:97:29
X509v3 Authority Key Identifier:
keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GhF9Iv8-xpxt-BLusQ7L-l-Zlyk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.118.192.0/19
210.77.96.0/19
210.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
43:40:71:fd:94:f8:d3:cb:36:7d:72:f1:5f:44:eb:fa:3d:68:
ec:c5:71:92:e4:78:54:26:5e:64:73:60:7c:28:3b:59:65:b9:
49:25:b3:fa:8a:7e:55:b2:91:a7:ec:93:f6:e7:b4:14:3c:2f:
ca:b8:32:5c:c8:b0:0c:2c:94:a9:8e:f1:f7:54:21:07:45:ef:
1b:f3:08:c9:25:dd:28:25:40:81:c2:e2:c4:42:8b:20:e4:9a:
e4:e7:18:41:00:4d:e8:d4:05:9a:cc:07:af:af:fb:2e:c1:74:
14:93:ef:c2:ce:e1:d1:76:5f:a2:9d:9c:98:b5:09:40:23:03:
8d:1d:92:ae:58:1b:d3:69:5b:8d:9e:a2:67:15:30:80:9d:7e:
f3:59:c7:da:8c:d9:49:e4:ee:a0:4f:ce:e6:df:15:77:9d:6d:
16:18:fb:1d:b1:a6:69:5f:8b:24:c6:a0:2d:fc:5d:95:8f:30:
5b:e3:d0:b3:00:d7:8b:7a:90:c0:13:96:82:e2:1f:41:0c:03:
c2:17:81:4f:8b:0b:b8:8d:bd:10:d8:7a:90:25:d3:67:e0:a2:
c9:06:8e:1e:3a:05:ab:4e:24:39:2c:32:10:64:b2:45:90:89:
b7:15:d1:90:64:1f:88:80:7e:26:9e:91:a6:1b:90:b5:ee:fc:
5b:97:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:03 2025 by rpki-client