Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/mlMCvl3JtLRELSM0dAmYY_QyXYA.roa
File: mlMCvl3JtLRELSM0dAmYY_QyXYA.roa (raw, json)
Hash identifier: ycbIxVFuxzhTUCuY+uVju6/YdBab59Sazv1Ubu9YxeE=
Subject key identifier: 9A:53:02:BE:5D:C9:B4:B4:44:2D:23:34:74:09:98:63:F4:32:5D:80
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 1BCD
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/mlMCvl3JtLRELSM0dAmYY_QyXYA.roa
Signing time: Fri 17 Jan 2025 01:27:04 +0000
ROA not before: Fri 17 Jan 2025 01:27:04 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63677
IP address blocks: 27.0.204.0/22 maxlen: 24
27.0.208.0/22 maxlen: 24
27.0.212.0/22 maxlen: 24
103.208.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7117 (0x1bcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: Jan 17 01:27:04 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9A5302BE5DC9B4B4442D233474099863F4325D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:78:94:f0:4d:0c:7f:8e:5a:1a:f9:d6:9c:
d4:b7:77:b0:ba:29:1b:5d:eb:fa:c8:bf:40:05:e3:
bd:f0:21:72:4a:f5:2f:38:25:55:d9:5c:da:bf:af:
bf:70:e7:ff:c7:35:f8:de:49:e2:2f:f8:d3:38:d3:
18:ae:42:eb:83:59:31:fb:ea:d9:bd:f2:a6:57:72:
f1:e2:8e:43:25:1c:0a:d9:ea:a2:14:06:f3:14:e9:
30:46:22:dc:d0:5d:9c:44:b7:df:d6:48:ae:3f:fc:
95:ea:fa:a0:79:71:2a:e2:65:fa:90:b9:d1:19:e4:
4a:b3:b1:48:a5:22:96:f1:af:ab:98:06:ae:63:5c:
55:e6:ea:bd:24:4b:fa:5f:6e:2e:bf:f3:f8:44:b3:
74:8f:a0:4b:08:c4:b7:66:6c:0d:4d:a2:6a:72:92:
8b:d6:09:89:7e:a4:bd:82:ff:db:de:01:8f:54:7b:
b9:a7:59:1c:08:b0:f8:74:a8:cc:e2:3e:f6:f6:01:
da:8d:2a:4b:e8:70:95:ce:f4:38:91:5e:f2:ac:df:
1e:c9:3c:3c:02:7d:2b:28:36:8e:50:0b:b7:c1:98:
f5:e9:08:a2:f0:0d:bb:f6:86:ff:39:fb:3a:e0:03:
22:1b:9e:6c:b2:a9:2f:a8:04:26:65:d5:da:5d:2d:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:53:02:BE:5D:C9:B4:B4:44:2D:23:34:74:09:98:63:F4:32:5D:80
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/mlMCvl3JtLRELSM0dAmYY_QyXYA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0-27.0.215.255
103.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
af:ac:33:61:94:ec:4b:24:6b:ea:72:32:df:cb:07:16:6d:24:
ab:ee:b6:c5:1b:eb:66:cd:0a:0e:bf:46:e8:8c:98:24:10:c5:
eb:e3:c9:ab:db:58:30:01:da:5f:e2:cb:cc:e2:36:e6:10:5b:
dc:86:49:84:1b:5a:39:bf:e4:6b:76:62:41:88:d5:8f:31:f2:
f5:01:2b:44:0a:18:06:08:eb:f1:e6:22:64:b1:77:a8:59:06:
2d:9c:9c:04:8f:de:e3:51:2b:c3:bd:61:6e:c8:df:b2:63:88:
d5:eb:ce:2a:83:96:23:ba:1c:d3:f3:df:ec:0d:c8:3d:a6:22:
88:8b:8d:4d:26:42:83:8f:28:61:a8:7d:ef:e6:ef:2d:c5:77:
dc:c8:20:a3:d3:fa:19:a3:35:77:c7:20:37:d1:f2:5a:48:2f:
08:df:80:96:b6:a5:c8:cb:22:88:48:1e:ec:09:bd:08:2a:26:
46:84:45:e6:d1:fd:ae:5e:0f:bb:91:e7:80:c5:1d:78:22:10:
cb:32:b0:77:59:da:68:66:8f:a0:39:fb:ef:f8:cd:a8:79:0f:
c2:83:86:ec:7b:34:ab:46:b1:ff:c4:fe:53:84:51:38:9b:00:
70:1b:94:c5:62:61:13:df:f2:bb:42:a5:12:03:83:ce:9e:02:
6e:c3:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:38 2025 by rpki-client