Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/bE6EGAOliwyC4ic3M9ouQLQOlSw.roa
File: bE6EGAOliwyC4ic3M9ouQLQOlSw.roa (raw, json)
Hash identifier: vuGBAhB+4vxK7Vaj1k+j7SD4BUEWJHiiafgwQiJkBZs=
Subject key identifier: 6C:4E:84:18:03:A5:8B:0C:82:E2:27:37:33:DA:2E:40:B4:0E:95:2C
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 09EB
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/bE6EGAOliwyC4ic3M9ouQLQOlSw.roa
Signing time: Mon 17 Feb 2025 13:58:31 +0000
ROA not before: Mon 17 Feb 2025 13:58:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 18811
IP address blocks: 59.107.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2539 (0x9eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Feb 17 13:58:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6C4E841803A58B0C82E2273733DA2E40B40E952C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:1d:ea:f9:48:7f:ce:fb:88:44:be:1f:81:
e3:30:40:15:43:eb:fd:62:4b:65:7c:bf:ff:06:44:
6c:f0:16:c2:59:fe:25:09:e9:23:04:2a:db:a0:fc:
50:43:01:29:26:c9:8f:9b:20:34:78:bd:c3:84:c9:
89:7e:5b:e1:fb:e3:60:27:3e:07:c5:02:1b:28:6d:
e3:9d:65:fa:65:ca:de:9f:90:0b:2e:aa:0a:cd:fa:
64:ae:fc:dc:5f:8a:fd:a1:4b:3f:5f:b5:6e:20:e4:
a7:ce:62:35:43:84:2f:f4:87:c9:d0:c4:ab:ad:48:
d6:bd:fe:b5:ae:aa:94:92:80:6e:98:bb:67:c4:b4:
cc:cf:7a:08:43:d3:4f:ad:69:39:6a:1e:c6:31:a9:
eb:60:86:2c:8b:bf:8f:2c:f0:05:c6:38:4d:bc:5d:
47:71:23:dd:ae:a3:52:af:3c:b6:6f:ad:a8:82:ea:
a5:77:32:e9:dc:ab:68:0c:02:04:4b:35:b4:be:ef:
08:f4:57:60:82:cf:d7:53:f1:3a:26:76:34:7a:46:
a4:a4:a2:f3:6b:4e:f0:e1:d8:85:ef:ea:0a:b9:7b:
bf:c5:05:5b:3d:5f:29:3b:a8:04:ae:8d:30:ca:01:
61:13:00:3f:96:83:8e:72:2f:bd:a3:7c:05:68:95:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4E:84:18:03:A5:8B:0C:82:E2:27:37:33:DA:2E:40:B4:0E:95:2C
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/bE6EGAOliwyC4ic3M9ouQLQOlSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.107.192.0/18
Signature Algorithm: sha256WithRSAEncryption
c9:c4:11:f1:6e:2d:8c:5f:e5:7e:7d:5d:34:d6:85:10:55:ea:
23:24:bc:84:04:76:cd:98:00:6f:b7:04:d4:63:eb:86:cd:42:
41:32:ec:3f:b7:d9:54:d9:d9:d9:fb:35:8f:4f:f0:1d:11:25:
bb:06:88:a3:d6:c5:a1:87:ee:55:86:8f:c8:ce:0a:ca:e8:5e:
0c:0d:a5:38:e7:24:12:71:f7:73:ec:1f:a9:13:42:c1:60:21:
b0:48:71:72:93:15:3f:df:38:c2:58:28:a2:ef:37:e2:97:d6:
f2:0f:0a:cd:fe:47:ef:19:a2:61:85:26:d3:3a:d9:6e:f2:29:
47:a2:1e:67:08:64:ea:95:5e:37:f4:43:38:6d:10:0f:40:81:
47:1e:77:b1:88:9c:1d:9b:9a:ff:58:a0:7a:8c:aa:9d:8d:6c:
e7:09:5d:64:14:5f:31:b2:2d:26:b7:c7:8a:11:65:73:73:fb:
16:c3:43:8f:88:92:e6:56:81:f0:c0:7b:54:17:06:05:a6:d7:
b8:a0:05:af:e4:0d:66:a1:e5:8b:85:72:0f:12:20:16:8e:f3:
df:f9:80:a1:95:71:8e:18:df:1a:bf:0e:8c:d2:fe:79:3d:39:
de:4d:02:d2:04:2b:62:c4:22:96:e9:e7:00:fe:2c:0c:e5:06:
a9:af:45:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:33 2025 by rpki-client