Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/CmiHCiNmmmHBexs1jUHSE3JAvLE.roa
File: CmiHCiNmmmHBexs1jUHSE3JAvLE.roa (raw, json)
Hash identifier: UqE1EI1bLQq/OA/HiPE/kaJMKPccyTK0ZKWfNVv4bFM=
Subject key identifier: 0A:68:87:0A:23:66:9A:61:C1:7B:1B:35:8D:41:D2:13:72:40:BC:B1
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 102F
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/CmiHCiNmmmHBexs1jUHSE3JAvLE.roa
Signing time: Wed 25 Dec 2024 03:25:03 +0000
ROA not before: Wed 25 Dec 2024 03:25:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 115.175.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4143 (0x102f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Dec 25 03:25:03 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0A68870A23669A61C17B1B358D41D2137240BCB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:b9:26:ff:0f:2b:a3:28:bb:c1:30:c8:33:
b0:cc:53:16:39:69:e1:ff:e6:c3:b3:21:a6:b5:9b:
66:67:6a:0b:cd:62:a9:c9:59:52:ef:e5:02:ed:62:
6b:e8:c9:bd:6e:c7:64:62:31:20:ea:06:ac:a3:98:
c3:9a:53:9d:ba:69:d0:25:1f:d1:66:63:93:58:53:
67:46:38:73:fd:e1:08:42:ea:2a:20:71:99:8f:83:
36:f6:fa:b8:37:21:8a:7c:3b:b6:77:0d:ff:fc:ed:
53:79:35:07:ee:50:60:14:21:f9:bf:38:b4:f9:70:
e1:8e:f0:68:7b:8a:e8:13:94:05:41:60:57:b5:c0:
1d:76:60:46:01:3c:0d:08:e9:c7:3b:ac:b0:ee:52:
bc:f7:0d:6b:17:5b:6e:51:39:a5:be:c6:4b:1b:d8:
df:4d:45:8d:7c:e2:7b:2d:ef:15:ea:d5:65:b8:96:
bc:3d:ce:30:ce:b3:32:5d:f4:02:58:1f:01:fa:6b:
1d:0b:21:08:05:c6:79:10:f8:8a:c4:b0:1d:3a:94:
4e:fd:9c:2f:43:fe:ec:6f:08:e8:f8:3b:e7:50:6f:
68:36:0f:55:06:6c:9e:d6:9a:dd:7f:55:ae:7d:97:
ec:78:0a:3d:7e:52:75:fb:7a:84:1a:b3:b1:6d:64:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:68:87:0A:23:66:9A:61:C1:7B:1B:35:8D:41:D2:13:72:40:BC:B1
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/CmiHCiNmmmHBexs1jUHSE3JAvLE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.175.0.0/19
Signature Algorithm: sha256WithRSAEncryption
62:ff:65:a1:73:14:5f:53:15:73:07:45:eb:5b:a8:75:c4:8d:
47:e7:d3:e0:bd:a0:9b:7c:26:b2:d7:9a:a1:cc:42:49:29:d8:
8b:2d:24:c5:13:15:14:ce:98:07:1d:31:4e:e2:d0:de:b7:9e:
6f:7a:b2:4d:7a:9e:d9:6f:fc:19:79:80:12:a5:8f:04:db:5b:
5c:fe:3e:3c:5d:56:bd:96:1d:53:16:9b:00:2d:b9:34:35:40:
2e:80:7c:af:ce:af:de:04:60:05:55:02:55:ae:2a:57:47:53:
fc:23:03:34:7e:6e:ba:eb:90:aa:9d:9d:db:b1:2a:11:71:df:
91:b3:ba:7c:7d:cb:3f:99:a7:0a:90:06:cf:2d:4e:10:c2:fd:
d1:4b:e7:f0:0f:42:80:68:92:c2:40:ca:bd:1e:b5:f0:df:be:
3f:fb:de:b8:52:0d:44:82:57:d0:78:ec:10:97:e4:b0:5f:82:
39:e9:30:b1:1a:e4:12:c8:be:99:b1:b7:a2:fc:cb:ae:76:a0:
4b:04:de:5d:9a:40:8a:5e:ce:bd:84:c6:db:b4:85:06:10:6d:
1d:5c:ea:56:a8:80:a6:d7:8c:33:6a:64:83:cf:f5:33:65:5c:
98:38:85:0f:62:de:b7:46:df:31:b1:35:2d:12:bc:c2:d9:7a:
af:75:66:16
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICEC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDEyMjUw
MzI1MDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBBNjg4NzBBMjM2NjlB
NjFDMTdCMUIzNThENDFEMjEzNzI0MEJDQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB47km/w8royi7wTDIM7DMUxY5aeH/5sOzIaa1m2ZnagvNYqnJ
WVLv5QLtYmvoyb1ux2RiMSDqBqyjmMOaU526adAlH9FmY5NYU2dGOHP94QhC6iog
cZmPgzb2+rg3IYp8O7Z3Df/87VN5NQfuUGAUIfm/OLT5cOGO8Gh7iugTlAVBYFe1
wB12YEYBPA0I6cc7rLDuUrz3DWsXW25ROaW+xksb2N9NRY184nst7xXq1WW4lrw9
zjDOszJd9AJYHwH6ax0LIQgFxnkQ+IrEsB06lE79nC9D/uxvCOj4O+dQb2g2D1UG
bJ7Wmt1/Va59l+x4Cj1+UnX7eoQas7FtZJ5rAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUCmiHCiNmmmHBexs1jUHSE3JAvLEwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvQ21pSENpTm1tbUhC
ZXhzMWpVSFNFM0pBdkxFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXOvADANBgkqhkiG9w0BAQsFAAOCAQEAYv9loXMUX1MVcwdF61uodcSNR+fT
4L2gm3wmsteaocxCSSnYiy0kxRMVFM6YBx0xTuLQ3reeb3qyTXqe2W/8GXmAEqWP
BNtbXP4+PF1WvZYdUxabAC25NDVALoB8r86v3gRgBVUCVa4qV0dT/CMDNH5uuuuQ
qp2d27EqEXHfkbO6fH3LP5mnCpAGzy1OEML90Uvn8A9CgGiSwkDKvR618N++P/ve
uFINRIJX0HjsEJfksF+COekwsRrkEsi+mbG3ovzLrnagSwTeXZpAil7OvYTG27SF
BhBtHVzqVqiApteMM2pkg8/1M2VcmDiFD2Let0bfMbE1LRK8wtl6r3VmFg==
-----END CERTIFICATE-----
Generated at Thu May 1 04:47:20 2025 by rpki-client