Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/aWQAkKVEm9E0XML9xvMW-U7w5SI.roa
File: aWQAkKVEm9E0XML9xvMW-U7w5SI.roa (raw, json)
Hash identifier: B+x+8YxfbClX0ecRmuy89qgF9yHtdysv+NEQoG3lfsA=
Subject key identifier: 69:64:00:90:A5:44:9B:D1:34:5C:C2:FD:C6:F3:16:F9:4E:F0:E5:22
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18D9
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aWQAkKVEm9E0XML9xvMW-U7w5SI.roa
Signing time: Fri 17 Jan 2025 01:25:41 +0000
ROA not before: Fri 17 Jan 2025 01:25:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59083
IP address blocks: 43.254.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6361 (0x18d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=69640090A5449BD1345CC2FDC6F316F94EF0E522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:6e:32:4d:e0:10:9e:d6:92:b5:f8:25:8a:
9b:cc:72:79:19:65:f4:4b:15:3d:ce:2d:ee:d7:bc:
99:b3:52:69:42:02:2d:3e:ae:cf:f3:e3:8b:59:23:
bc:a2:d6:14:f4:f4:29:40:2b:67:a8:a0:f3:8c:8a:
e5:71:3e:ad:01:dd:ef:e5:c5:ce:0c:ef:c6:94:09:
04:6a:b1:4a:c1:29:af:6f:aa:1a:5f:0d:a7:64:d8:
41:26:7f:c4:ae:0b:ad:50:65:24:97:89:e9:2b:ec:
2a:91:20:c1:45:ff:20:07:bf:bf:f8:ed:dc:9e:42:
d8:7a:1e:91:17:03:e3:d9:3d:97:0e:b1:31:f3:ba:
83:a0:c9:65:b8:3d:cf:21:f9:e1:72:cf:04:60:db:
f6:be:0d:06:36:6e:e9:9e:1f:87:f3:39:b4:e4:ae:
dc:49:8e:7f:d9:00:3b:d9:b9:51:26:48:5b:f7:58:
22:6b:a0:7d:43:a6:19:ad:06:b1:ee:8f:5e:00:14:
8c:6d:e2:58:ea:5a:84:cb:23:7f:5e:f7:e3:c6:39:
e4:19:b7:d0:2b:d9:1a:d4:9f:9c:2e:a6:e7:98:d1:
dc:39:9d:2e:35:b0:43:38:7e:0d:d5:a1:1a:97:8d:
bd:6b:4c:aa:48:22:14:88:88:2a:0c:ee:72:7c:d1:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:64:00:90:A5:44:9B:D1:34:5C:C2:FD:C6:F3:16:F9:4E:F0:E5:22
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aWQAkKVEm9E0XML9xvMW-U7w5SI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.154.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:44:8a:67:fe:a7:15:2c:88:32:74:7e:f1:02:37:ef:bf:16:
10:13:94:01:a8:4d:09:4c:8b:0e:af:51:ca:f4:5a:b7:c0:3e:
b5:fb:c6:16:fa:92:0a:99:0b:3b:88:ae:ca:6a:32:98:3a:44:
08:b0:18:5d:fb:31:7d:ac:85:31:e0:3b:05:8d:08:0c:76:73:
73:df:ba:c1:4e:08:49:05:55:25:79:a7:fa:01:fc:1d:9c:15:
f6:1e:a7:0e:ee:00:1d:e5:a1:95:41:26:d0:36:76:07:59:04:
82:47:36:36:9d:20:4f:ae:6a:59:c4:ea:8c:e3:17:ff:5a:66:
8b:0e:0b:41:cd:4b:79:ff:56:bf:43:be:0f:c8:ca:11:32:bc:
39:42:0d:a3:5e:36:23:52:08:98:69:8b:53:24:17:c4:36:3f:
16:22:fa:5a:a8:78:c9:8a:0d:17:32:3e:87:dd:01:ad:f9:89:
17:40:bf:9c:8d:2c:c3:ff:86:e2:99:6a:a2:b3:12:04:fd:38:
72:de:31:48:77:f0:ba:7f:94:6b:a5:b6:5b:67:0f:e1:14:1f:
eb:53:81:7b:1d:c4:6d:17:91:3f:d6:5d:e5:34:a1:ac:f5:2e:
6c:8b:de:35:a5:82:ca:4b:62:c4:91:74:32:ab:cf:24:ee:bc:
0d:ae:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:59:32 2025 by rpki-client