Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/Yld0PLcu0kDFCM8FFa_e7PUkDBs.roa
File: Yld0PLcu0kDFCM8FFa_e7PUkDBs.roa (raw, json)
Hash identifier: Weph8XosCTlgY4xUw8VOwWRpLaXRiZ0P1fwqSL0Cp+s=
Subject key identifier: 62:57:74:3C:B7:2E:D2:40:C5:08:CF:05:15:AF:DE:EC:F5:24:0C:1B
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1D07
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Yld0PLcu0kDFCM8FFa_e7PUkDBs.roa
Signing time: Fri 17 Jan 2025 01:26:46 +0000
ROA not before: Fri 17 Jan 2025 01:26:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 135377
IP address blocks: 106.75.192.0/24 maxlen: 24
106.75.193.0/24 maxlen: 24
106.75.194.0/24 maxlen: 24
106.75.195.0/24 maxlen: 24
106.75.196.0/24 maxlen: 24
106.75.197.0/24 maxlen: 24
106.75.198.0/24 maxlen: 24
106.75.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7431 (0x1d07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jan 17 01:26:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6257743CB72ED240C508CF0515AFDEECF5240C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:72:47:0d:98:43:c3:d3:4c:bf:a7:78:46:
b5:4f:16:09:7a:d2:74:25:a0:52:3d:17:0c:fa:9f:
18:23:30:3e:22:19:79:51:50:7c:a6:05:a3:af:bf:
92:62:20:e5:00:59:8a:a5:af:ee:e0:7a:67:b8:de:
60:12:cd:62:38:a2:2c:15:a0:40:dd:eb:f5:c4:26:
53:c4:30:a7:fa:68:4e:b9:42:5e:9b:12:4f:4d:39:
ee:c0:cc:f5:c9:ad:24:12:28:e1:84:f1:07:20:88:
2d:ab:4b:20:10:2a:bb:f5:f4:0e:36:d1:1f:54:48:
e5:bd:a8:d0:0b:cf:89:0c:5a:e5:3d:ef:57:ce:ea:
b6:8d:ce:cc:bc:16:df:7c:5b:06:dc:25:c2:d4:57:
ee:0d:5b:ff:15:80:ff:e2:d0:56:ec:fb:c5:00:0a:
91:6b:7a:ff:45:0a:bb:bb:50:58:06:c3:43:40:d5:
7a:ff:34:77:02:bd:8a:81:df:e1:f8:ad:9c:ac:c8:
57:53:89:a6:6d:82:51:3d:52:82:86:2b:97:9a:85:
b2:5c:ab:2d:d2:bb:5a:61:0d:76:44:9f:0d:39:a8:
9e:04:ea:2e:1d:c8:d0:d4:3e:ea:02:28:ba:e2:d8:
29:94:d7:66:51:00:63:f1:60:18:6b:38:3b:0f:e1:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:74:3C:B7:2E:D2:40:C5:08:CF:05:15:AF:DE:EC:F5:24:0C:1B
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Yld0PLcu0kDFCM8FFa_e7PUkDBs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.192.0/21
Signature Algorithm: sha256WithRSAEncryption
af:a1:6f:7f:3d:9d:ac:32:f4:a2:c3:9d:35:5b:22:e6:34:c7:
1b:7d:70:af:3a:71:c5:33:55:22:80:5e:2a:c5:d4:de:d6:19:
91:1a:35:2d:12:89:6e:4d:2a:4d:2c:20:c7:e7:2f:5d:45:9f:
69:ce:00:c7:2d:97:66:f2:af:da:c2:02:18:08:e4:13:fb:70:
3b:39:4d:39:4c:26:53:4b:3e:96:24:4a:6e:eb:59:91:c7:79:
dd:62:c4:3d:46:93:e3:e8:99:5f:a4:33:4b:a2:6f:10:69:fa:
a4:c0:c4:58:e5:53:6c:4e:8a:3c:c5:0d:70:de:c2:a2:c5:8f:
5a:75:b2:02:47:9d:f7:93:47:d9:49:ea:54:50:28:dc:a1:ba:
71:41:fc:87:f2:ff:cd:ea:06:aa:65:c6:08:60:b3:da:1b:76:
7a:18:ad:74:04:0e:55:c3:a8:5f:b7:3b:04:d2:54:c2:bf:92:
01:3d:db:f2:0d:80:91:8a:c5:18:72:2e:e4:06:81:e9:b2:d9:
38:e5:ef:fe:31:06:4a:dd:44:04:99:38:e3:87:20:08:95:de:
3c:77:cf:3d:79:6b:88:7e:1a:b4:75:12:77:e3:f1:a6:9b:2b:
09:8d:da:f8:7d:f6:f4:49:09:f8:a3:56:f9:e9:b6:90:f1:b7:
e8:ab:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:57 2025 by rpki-client