Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/7UpFd6F1X3a9JmR5447aOHJDmco.roa
File: 7UpFd6F1X3a9JmR5447aOHJDmco.roa (raw, json)
Hash identifier: S7LpwMJ61ehHo+g33pULuvLnAyXDCoDoiKJ2wlBBchs=
Subject key identifier: ED:4A:45:77:A1:75:5F:76:BD:26:64:79:E3:8E:DA:38:72:43:99:CA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 08F2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7UpFd6F1X3a9JmR5447aOHJDmco.roa
Signing time: Mon 27 Jan 2025 09:55:16 +0000
ROA not before: Mon 27 Jan 2025 09:55:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 27 09:55:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ED4A4577A1755F76BD266479E38EDA38724399CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:35:4d:df:49:1d:9d:a7:7c:c6:9a:d8:00:5d:
4a:cd:1b:4b:04:b4:3c:34:de:be:1c:b6:40:3f:bd:
ac:c3:e9:c8:ef:88:52:4c:65:c7:be:6d:bc:5b:f0:
01:75:38:de:6b:57:0d:f2:9b:e4:95:7b:d4:df:94:
45:3a:54:69:77:2a:38:01:ca:15:00:d1:ee:e5:ba:
81:45:57:0c:d1:26:1a:22:03:5e:e6:69:4b:f7:85:
7b:ca:fe:72:08:44:02:96:16:b1:9a:d2:2e:a2:9d:
d0:4d:7b:3c:d1:e3:08:10:b3:6c:d4:0e:1d:95:10:
49:da:34:b3:97:a3:ff:a5:7d:6d:b8:d9:66:63:72:
b2:34:dd:f1:ee:9d:2b:90:a2:88:42:bc:e0:f1:46:
6e:6f:a2:1d:14:d3:81:65:e1:6d:14:89:4e:62:a6:
2d:96:09:84:6a:1a:7a:8c:f7:f1:95:8c:1d:20:63:
c9:8a:47:52:2c:5a:f1:22:3c:d0:68:9a:94:4f:24:
e0:1a:77:93:de:6e:b4:56:38:38:92:1b:44:57:02:
e8:86:a5:09:45:78:a4:6f:e2:0e:12:e3:6c:9a:a2:
72:a1:5c:09:94:a1:a4:dc:7c:a7:bf:19:72:04:52:
e8:cc:09:fe:95:4c:d7:b8:ed:13:69:57:38:ad:c9:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4A:45:77:A1:75:5F:76:BD:26:64:79:E3:8E:DA:38:72:43:99:CA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7UpFd6F1X3a9JmR5447aOHJDmco.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:03:b0:f0:c9:29:59:eb:09:95:30:4b:a8:2f:6c:2c:38:a8:
6a:fa:14:d6:24:93:a3:03:0d:86:20:db:e8:a6:43:eb:5a:49:
65:1d:60:4a:dc:5f:37:cb:85:08:f1:c5:e5:c0:4f:e3:1e:30:
9e:ae:0d:b3:91:43:b4:ec:85:4d:b2:de:69:f1:72:eb:9c:40:
e6:b0:c1:fd:17:f7:95:f7:55:34:15:b3:e3:8a:ce:dd:21:4c:
e9:3f:19:e9:99:5d:d9:ce:e6:21:37:14:78:aa:38:cc:e5:10:
53:da:a1:ce:e6:6d:ca:14:a3:e8:d6:9f:eb:16:b8:19:14:99:
3b:9f:7d:19:8f:df:bb:23:17:83:75:33:04:6c:39:23:c6:1c:
39:5e:0b:dc:f4:38:8f:d1:cf:3e:db:9c:49:c2:30:13:77:33:
ab:3c:00:2c:66:3d:66:ba:c2:73:64:35:1b:e8:86:1f:4f:50:
ee:b0:c1:6d:08:63:d0:cc:e0:d7:a5:12:e5:b3:ae:24:86:9a:
a5:7e:ac:ea:e8:50:3c:7d:aa:74:da:51:23:49:42:78:d0:01:
d6:14:54:7e:dd:12:b5:7d:8e:38:93:72:9d:5c:be:a2:28:21:
1b:51:b6:76:e3:70:0d:ba:88:2a:47:ae:b1:dc:98:9e:eb:3b:
66:65:46:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:58 2025 by rpki-client