Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/Cx_PMXrwCzMbeqeFlDPfklmRXzE.roa
File: Cx_PMXrwCzMbeqeFlDPfklmRXzE.roa (raw, json)
Hash identifier: sfsnweCmG/jHm5nbrPsozdJRdYLLaS3/WMbJAlYUq4E=
Subject key identifier: 0B:1F:CF:31:7A:F0:0B:33:1B:7A:A7:85:94:33:DF:92:59:91:5F:31
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1D0B
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Cx_PMXrwCzMbeqeFlDPfklmRXzE.roa
Signing time: Fri 17 Jan 2025 01:26:47 +0000
ROA not before: Fri 17 Jan 2025 01:26:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4808
IP address blocks: 106.75.0.0/19 maxlen: 19
106.75.32.0/19 maxlen: 19
106.75.64.0/19 maxlen: 19
106.75.96.0/19 maxlen: 19
117.50.0.0/19 maxlen: 19
117.50.32.0/19 maxlen: 19
117.50.64.0/19 maxlen: 19
117.50.96.0/19 maxlen: 19
117.50.128.0/19 maxlen: 19
117.50.160.0/19 maxlen: 19
117.50.192.0/19 maxlen: 19
117.50.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7435 (0x1d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jan 17 01:26:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0B1FCF317AF00B331B7AA7859433DF9259915F31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:a8:00:9c:31:f1:88:b1:a7:15:e6:b4:9c:
b8:03:ee:b4:02:7a:6d:f5:02:92:0f:95:23:3e:3c:
60:6e:fd:7e:19:02:b4:ff:bf:3b:68:e4:cd:6e:35:
63:1b:ed:e4:20:65:02:ca:88:09:c0:e8:e4:92:81:
e2:49:ac:c9:ec:6b:57:7d:7f:7b:73:9a:c7:29:63:
c9:17:8d:e6:17:df:81:3f:41:62:dc:7b:fc:f8:1b:
75:2e:23:1f:59:43:88:8f:01:5b:7d:be:52:0d:4c:
d5:f9:81:76:e8:ec:2d:7b:d1:4b:72:1f:c7:fc:cd:
eb:12:e2:07:0e:41:05:eb:a6:ac:38:19:31:9c:ad:
45:21:85:4f:30:65:4d:60:e8:8a:d1:b6:ff:14:c1:
8d:78:4a:a7:ff:0d:42:77:72:e4:31:0d:86:9d:b4:
37:5b:bf:96:c1:39:95:4e:f2:bf:a9:2b:73:11:16:
c1:96:64:c4:7a:52:77:7b:32:97:57:7a:bd:fb:8f:
61:99:41:02:a2:62:d4:00:cc:a1:bc:a9:ef:c9:10:
a2:6b:1d:46:4d:f3:7a:69:1c:50:52:c1:50:ae:1c:
e2:1b:bb:65:56:c9:2c:c3:fa:bd:2a:3b:e7:80:be:
00:da:f9:cd:a6:88:70:7b:c2:4c:10:ee:78:33:04:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:CF:31:7A:F0:0B:33:1B:7A:A7:85:94:33:DF:92:59:91:5F:31
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Cx_PMXrwCzMbeqeFlDPfklmRXzE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.0.0/17
117.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:c3:06:57:24:cf:d6:37:53:7c:8c:f6:ac:c1:24:55:f0:5b:
a9:80:94:87:51:4c:97:92:e1:0d:1e:eb:2e:b2:16:00:bf:50:
44:e8:27:87:1e:d6:98:c2:d6:ab:2b:38:a5:d3:74:43:2a:17:
4f:76:8f:34:de:bb:46:49:4b:5c:5e:08:08:f6:b6:d0:0d:f3:
d3:97:59:ea:66:e2:6a:eb:7c:5d:ee:38:1b:35:98:1e:34:06:
18:56:c1:56:66:8a:b4:0d:9d:a3:ea:64:ed:33:8f:52:b3:0f:
a5:ab:3d:fd:e1:85:2f:83:af:7d:4c:b9:d8:e2:16:15:93:f7:
b9:3e:74:31:bd:97:4b:63:1a:5a:0b:47:18:51:4d:ed:ae:b5:
4b:8e:2d:f0:9f:1c:c7:67:be:d2:21:4e:55:6a:c4:b9:db:07:
e1:c9:81:62:5f:75:46:d6:1e:5c:9a:53:f2:a1:94:d7:af:00:
83:bb:3a:18:18:d7:22:35:1a:02:2c:7e:f5:b5:a9:e9:85:6b:
b2:02:54:17:6e:61:55:c6:75:a0:ba:e7:bb:a1:20:63:3b:1e:
58:0c:3a:2e:16:ac:66:50:7c:61:b3:18:c8:3a:9d:bc:e5:14:
ab:b0:27:92:37:c6:08:68:87:37:f7:6b:22:b4:27:f7:b5:8e:
71:97:11:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:34 2025 by rpki-client