Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/24xLyjMy4LfsbGRkTTHxHGsVz_w.roa
File: 24xLyjMy4LfsbGRkTTHxHGsVz_w.roa (raw, json)
Hash identifier: tfWKWLl4aEdktmWd3AIGERKp6UsWq246tht5mEUzF4I=
Subject key identifier: DB:8C:4B:CA:33:32:E0:B7:EC:6C:64:64:4D:31:F1:1C:6B:15:CF:FC
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0FB3
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/24xLyjMy4LfsbGRkTTHxHGsVz_w.roa
Signing time: Fri 17 Jan 2025 01:27:53 +0000
ROA not before: Fri 17 Jan 2025 01:27:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 119.59.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4019 (0xfb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jan 17 01:27:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DB8C4BCA3332E0B7EC6C64644D31F11C6B15CFFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:7c:99:a6:57:5d:e7:70:10:8c:8d:a4:73:
6d:33:67:e8:fb:4f:1b:bd:9a:5d:33:b0:f8:fb:40:
71:9e:b2:6b:29:61:cc:ad:32:e1:16:29:9f:49:10:
98:9d:63:32:97:76:3b:9a:6c:6b:c9:fb:9c:f3:72:
87:90:96:cb:36:5c:8f:87:d5:a2:8d:9f:bd:98:75:
f1:a2:41:43:fd:05:fa:39:48:97:a4:93:7d:73:db:
cd:e2:70:a3:1d:95:09:7e:28:2f:c1:29:09:56:31:
0f:40:0b:44:ef:8e:2a:11:21:25:2c:27:85:cd:1f:
9b:56:0f:a9:5a:22:a4:e5:db:67:4e:13:23:b5:6b:
4e:bc:43:20:ff:d9:ad:a4:d3:e2:4f:5e:e5:7d:75:
e5:52:75:b3:84:74:dd:38:0e:b9:ba:a9:3d:25:49:
e7:47:50:a8:c1:ae:1c:8d:ad:87:bf:2d:33:6a:9f:
5e:d5:5d:0a:af:d9:e4:f2:e0:46:31:cd:55:b8:10:
d5:0d:8d:6f:34:ed:db:20:2b:7b:c9:59:06:bb:8c:
4b:b0:2d:82:e8:2f:48:93:e3:50:60:3d:6a:62:f6:
6d:5d:b9:62:83:74:a3:98:e7:fa:b2:dc:d9:6b:f8:
57:80:7b:f9:96:83:3c:2f:0d:e2:83:d8:10:05:ca:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:4B:CA:33:32:E0:B7:EC:6C:64:64:4D:31:F1:1C:6B:15:CF:FC
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/24xLyjMy4LfsbGRkTTHxHGsVz_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:b1:72:67:84:9a:0d:57:ab:30:7e:a2:2b:e8:9d:1a:d9:56:
4a:dd:97:fb:23:67:17:ed:f8:e9:8f:f6:a5:30:34:26:d3:59:
c5:e7:32:d4:5c:c8:86:8f:41:03:37:3e:82:e4:e0:a7:25:3b:
89:b6:6c:b6:9c:39:b7:59:b0:5c:fe:51:58:88:33:19:ba:df:
9e:a2:f7:c9:5f:16:2c:df:b9:90:ca:61:e3:4e:be:9e:bf:76:
eb:90:1e:a8:b6:7a:10:c0:0b:f1:56:80:e8:01:f1:3c:2d:a7:
13:eb:0f:f8:a6:47:58:88:a5:89:1d:bf:92:1c:42:14:1e:ff:
9d:19:e9:f3:83:f3:13:d8:bf:b3:3d:5a:e3:73:21:c2:af:e8:
19:66:b5:02:7b:16:8d:d0:6d:62:79:c1:59:ed:97:8c:4d:5f:
47:eb:d1:1f:85:39:5d:f0:3a:4b:44:dc:c5:91:b2:eb:48:20:
ac:14:03:6d:c3:d0:e0:7a:05:61:4e:db:43:af:c5:e0:49:36:
48:96:ab:dc:f4:9d:74:0e:14:3d:15:8a:f6:c1:2d:92:77:58:
d3:d3:4b:03:98:90:ed:73:3f:0e:1b:d6:de:20:f3:39:65:96:
65:ef:93:13:ab:31:62:5c:7b:fc:f8:db:18:fe:3b:58:17:bc:
b8:63:a1:33
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICD7MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAxMTcw
MTI3NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERCOEM0QkNBMzMzMkUw
QjdFQzZDNjQ2NDREMzFGMTFDNkIxNUNGRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRyHyZpldd53AQjI2kc20zZ+j7Txu9ml0zsPj7QHGesmspYcyt
MuEWKZ9JEJidYzKXdjuabGvJ+5zzcoeQlss2XI+H1aKNn72YdfGiQUP9Bfo5SJek
k31z283icKMdlQl+KC/BKQlWMQ9AC0TvjioRISUsJ4XNH5tWD6laIqTl22dOEyO1
a068QyD/2a2k0+JPXuV9deVSdbOEdN04Drm6qT0lSedHUKjBrhyNrYe/LTNqn17V
XQqv2eTy4EYxzVW4ENUNjW807dsgK3vJWQa7jEuwLYLoL0iT41BgPWpi9m1duWKD
dKOY5/qy3Nlr+FeAe/mWgzwvDeKD2BAFyuuNAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU24xLyjMy4LfsbGRkTTHxHGsVz/wwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzLzI0eEx5ak15NExmc2JH
UmtUVEh4SEdzVnpfdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJ3O9QwDQYJKoZIhvcNAQELBQADggEBAI2xcmeEmg1XqzB+oivonRrZVkrdl/sj
Zxft+OmP9qUwNCbTWcXnMtRcyIaPQQM3PoLk4KclO4m2bLacObdZsFz+UViIMxm6
356i98lfFizfuZDKYeNOvp6/duuQHqi2ehDAC/FWgOgB8TwtpxPrD/imR1iIpYkd
v5IcQhQe/50Z6fOD8xPYv7M9WuNzIcKv6BlmtQJ7Fo3QbWJ5wVntl4xNX0fr0R+F
OV3wOktE3MWRsutIIKwUA23D0OB6BWFO20OvxeBJNkiWq9z0nXQOFD0VivbBLZJ3
WNPTSwOYkO1zPw4b1t4g8zlllmXvkxOrMWJce/z42xj+O1gXvLhjoTM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:59 2025 by rpki-client