Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/UeWMtdJvNlOhYmCG7a6nZBvRdUY.roa
File: UeWMtdJvNlOhYmCG7a6nZBvRdUY.roa (raw, json)
Hash identifier: V5G86OkSnvQncc1PKTMDc9Ostp8wBa38yMq72QsXRvs=
Subject key identifier: 51:E5:8C:B5:D2:6F:36:53:A1:62:60:86:ED:AE:A7:64:1B:D1:75:46
Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial: 14B8
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/UeWMtdJvNlOhYmCG7a6nZBvRdUY.roa
Signing time: Fri 17 Jan 2025 01:27:24 +0000
ROA not before: Fri 17 Jan 2025 01:27:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 37963
IP address blocks: 112.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5304 (0x14b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Validity
Not Before: Jan 17 01:27:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=51E58CB5D26F3653A1626086EDAEA7641BD17546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:8d:7e:da:41:a4:d6:25:06:0a:52:ed:76:
16:a5:c5:ab:58:42:1a:e0:a2:19:cb:32:93:bc:10:
2a:0d:90:58:77:8e:1b:d2:d4:0e:0f:05:f6:81:61:
d5:d0:02:03:c4:c4:56:1b:79:65:74:ae:2b:8e:82:
8b:8a:fc:0c:8b:f2:3b:78:c7:f4:2b:81:96:88:f9:
06:77:bc:71:9e:43:28:a9:92:61:76:7c:92:1e:4b:
b0:aa:d8:c4:72:11:3f:7b:d8:0c:c1:8a:e0:84:4d:
85:eb:c2:01:3e:16:21:2c:d2:45:aa:a5:3b:07:6d:
b7:13:6f:48:1e:04:b6:9a:7d:ba:90:e0:0a:2c:e8:
05:47:f3:b4:4b:10:98:40:3b:fb:ed:82:94:d4:39:
88:17:f9:ad:32:c2:65:cc:19:8c:ea:bc:c2:2b:16:
af:1a:11:18:a3:50:17:36:66:4d:fa:5f:39:41:0b:
e8:f2:15:28:0c:16:e3:9c:6a:99:af:82:11:a1:85:
03:29:64:00:9c:f8:2a:b2:6a:ae:c2:0d:ff:70:ed:
1b:93:ac:20:ce:52:3f:74:d3:f0:3e:c1:ad:96:bc:
b2:dc:68:fc:c3:6d:ec:d3:a9:4b:39:8b:9d:70:a6:
d4:4d:70:1c:f3:61:b6:73:69:69:1b:13:80:f6:c7:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:8C:B5:D2:6F:36:53:A1:62:60:86:ED:AE:A7:64:1B:D1:75:46
X509v3 Authority Key Identifier:
keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/UeWMtdJvNlOhYmCG7a6nZBvRdUY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.127.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:c2:d7:f8:42:c5:5c:7a:85:bc:fd:cd:92:fd:d9:f0:0e:21:
aa:a8:a5:34:4c:97:32:7c:54:b1:31:20:fc:a6:3c:d2:f4:65:
03:eb:9d:ae:36:85:3d:2f:79:a6:c2:97:81:84:6a:05:60:b0:
3c:8a:28:d2:d2:8f:ad:41:38:75:08:09:de:58:78:03:ca:61:
d5:72:dd:6e:40:21:46:d5:cc:fb:ec:78:2a:22:06:9d:ae:36:
59:6c:c6:33:7f:e5:ca:49:60:b2:57:e7:61:61:61:c0:eb:63:
fb:1b:40:79:bb:42:ce:02:2e:31:5c:36:e6:f7:46:8d:32:86:
8f:7b:da:b8:de:c4:0e:3e:13:ee:c1:10:34:09:47:fe:f9:5e:
fa:c2:f6:6c:c9:55:05:0a:12:96:16:40:ec:16:5e:99:63:45:
8a:67:32:18:2a:5d:f7:2a:a2:db:19:cc:9a:da:0d:25:6c:db:
bd:de:2a:e9:54:32:1a:e4:db:4e:38:e0:6a:31:ce:f0:c6:dc:
68:2d:55:7b:50:02:8f:5a:5b:73:5d:b6:1b:49:9f:f6:06:ef:
ec:35:bf:61:15:4a:7b:a2:e5:d1:4a:60:74:43:fc:b4:62:c0:
10:98:3a:ad:83:ef:41:d4:5c:cb:58:1e:ce:5a:52:98:b0:07:
cc:ce:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:59:18 2025 by rpki-client