Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/775/Hzhgzo6r7Dc7AhWVXTO0YwkJldw.roa
File: Hzhgzo6r7Dc7AhWVXTO0YwkJldw.roa (raw, json)
Hash identifier: wdkONXPoKkXF4kgClxYuINjHx4v9d49dvFTHajLsd0E=
Subject key identifier: 1F:38:60:CE:8E:AB:EC:37:3B:02:15:95:5D:33:B4:63:09:09:95:DC
Certificate issuer: /CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050
Certificate serial: 06CC
Authority key identifier: CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/Hzhgzo6r7Dc7AhWVXTO0YwkJldw.roa
Signing time: Wed 21 Aug 2024 05:46:17 +0000
ROA not before: Wed 21 Aug 2024 05:46:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 59078
IP address blocks: 101.48.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050
Validity
Not Before: Aug 21 05:46:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F3860CE8EABEC373B0215955D33B463090995DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:d1:4a:bf:70:29:cc:4b:1a:63:db:f7:ee:
a5:7a:5e:20:86:ed:64:17:51:e4:76:02:00:c4:77:
6c:e9:14:88:12:c9:2c:f9:4a:75:5c:32:ae:b5:1f:
23:bd:5a:1e:23:0b:d0:cf:ef:f6:f3:02:42:e5:af:
91:7d:9d:d6:0f:d0:92:79:e5:d0:34:02:e4:1e:27:
9b:5e:c6:c4:6a:32:1f:9c:e3:5d:9b:99:c0:bd:39:
4d:96:f9:86:d9:1a:4a:b1:c9:86:4c:12:26:67:16:
58:cb:9c:39:b5:07:0d:73:d4:f4:0e:bd:21:bf:9b:
be:e3:ff:65:73:b7:6b:3d:c5:29:ff:a6:18:dc:e2:
bd:f1:45:71:d5:22:bb:c3:48:98:65:dc:d9:fb:84:
fe:fd:67:45:67:f9:8f:fd:a7:0a:4c:86:ec:d1:1a:
1c:c6:98:2b:ce:85:4b:cd:06:eb:75:ac:92:95:27:
bc:a7:a9:f3:41:bd:56:e8:12:b6:64:93:27:da:25:
00:31:ad:40:a4:44:30:63:20:7b:ac:17:15:a2:da:
2a:da:23:c1:a0:69:75:a3:7e:8a:b1:a1:f4:01:b8:
0d:32:09:62:8f:a4:bc:45:f1:98:0d:41:55:38:ae:
76:77:e4:51:d3:50:89:e6:2b:7a:25:04:d6:04:a4:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:60:CE:8E:AB:EC:37:3B:02:15:95:5D:33:B4:63:09:09:95:DC
X509v3 Authority Key Identifier:
keyid:CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/Hzhgzo6r7Dc7AhWVXTO0YwkJldw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:33:ac:d0:60:69:46:97:f2:56:59:c2:96:fb:d8:4b:ec:00:
34:bc:54:5f:54:bd:ab:f7:13:a0:4a:5f:66:94:9b:e2:29:3f:
09:a9:ba:0d:bc:6f:db:b5:ad:86:32:b8:98:75:c6:00:82:c4:
48:7c:63:60:7a:23:89:b3:f4:ac:74:cc:ed:bc:4a:60:1a:0d:
ae:47:1f:00:92:8c:44:7c:93:45:ea:06:4a:f0:46:bf:83:08:
fb:78:f9:7e:fa:99:ee:60:78:ea:7c:ef:00:fa:0e:b5:59:9f:
ca:59:78:59:42:35:57:61:1b:fb:9d:e3:2a:13:63:88:1e:e6:
f3:9d:34:72:02:d5:6f:04:dc:a8:85:53:50:de:1f:94:d3:dc:
5f:10:c7:0f:a6:0c:ad:18:57:b4:7f:7a:08:4b:b2:9b:03:84:
1c:24:df:19:d6:ba:09:b9:2a:b6:19:53:6e:c8:8b:dd:4e:ab:
0d:0b:1f:06:f8:a7:46:5c:87:8c:79:ed:a1:b0:45:a0:ad:39:
25:04:4d:99:66:e5:84:86:68:83:8a:3f:bb:a9:9b:53:b2:4b:
0b:93:0c:dd:98:f1:51:3a:c5:1c:6a:82:6c:c5:04:bc:b5:0f:
3c:03:8a:4b:b9:1e:51:bb:0b:a6:24:af:3f:22:d7:bc:77:09:
c4:8b:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:10 2025 by rpki-client