Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/fW6FERaewX9Tp4AlXlsYrNvmO0I.roa
File: fW6FERaewX9Tp4AlXlsYrNvmO0I.roa (raw, json)
Hash identifier: Di73Wj3xz58K8cmAded8rI6NEZXCUfB5rd7EVM4P+0E=
Subject key identifier: 7D:6E:85:11:16:9E:C1:7F:53:A7:80:25:5E:5B:18:AC:DB:E6:3B:42
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 026F
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/fW6FERaewX9Tp4AlXlsYrNvmO0I.roa
Signing time: Wed 31 Jan 2024 03:06:02 +0000
ROA not before: Wed 31 Jan 2024 03:06:02 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 43.248.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Jan 31 03:06:02 2024 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=7D6E8511169EC17F53A780255E5B18ACDBE63B42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:ad:9a:95:32:ba:c1:ba:cb:f5:73:fd:0c:
cd:a0:a0:07:27:dc:69:a8:97:11:92:1d:7e:0f:6f:
38:fe:dc:25:64:51:16:7f:06:6f:9c:07:72:fc:fc:
5c:f1:47:b6:95:12:b2:87:cb:f9:e1:7f:9d:54:56:
11:b3:24:86:b9:ee:b2:a0:db:52:dc:22:5e:61:54:
45:86:34:5c:42:e7:ac:99:e1:32:85:b3:57:9e:77:
d4:dc:10:22:b2:41:80:83:39:ce:92:36:c4:66:6b:
e0:34:46:17:3a:f0:69:57:63:71:2e:0f:c2:cd:0c:
00:de:07:4a:a5:1d:e1:73:de:18:f6:d1:7e:aa:ea:
78:25:3a:cf:2f:a0:ae:d8:a1:5b:97:95:04:a8:9c:
71:02:0d:c8:d2:02:21:51:ea:c1:a9:dd:cb:39:3b:
1c:b8:01:34:47:72:56:54:8f:33:71:52:54:30:b8:
fb:d7:9e:cb:b0:8a:37:24:73:90:a9:cd:4a:ee:7e:
84:65:fa:ac:cc:d4:ff:03:be:6e:7d:e0:f8:48:4a:
eb:79:69:74:17:c0:47:b4:25:d0:bb:6e:e3:f5:d4:
f9:cb:26:70:73:b9:bd:71:1d:ef:ed:e5:fb:29:03:
dc:9d:a1:c3:d0:19:d4:ea:cd:b9:49:96:68:b5:d7:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6E:85:11:16:9E:C1:7F:53:A7:80:25:5E:5B:18:AC:DB:E6:3B:42
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/fW6FERaewX9Tp4AlXlsYrNvmO0I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.176.0/20
Signature Algorithm: sha256WithRSAEncryption
03:d2:09:40:6a:31:ea:e9:07:1c:c0:a2:cf:66:34:62:35:54:
7c:79:6d:83:34:e9:2f:08:9b:b2:9f:c8:ce:02:4f:7d:0b:5f:
ec:80:6e:5e:dd:0d:1c:f4:ff:45:52:a4:7b:b7:14:38:7d:1f:
13:5b:e2:7f:9b:c4:c0:0a:17:68:f4:12:60:ba:46:43:05:47:
a7:62:c2:fe:81:ce:4f:00:37:55:2c:27:24:11:78:60:e0:d7:
d7:e4:83:03:1d:5d:a6:2c:a0:8a:2a:99:cf:31:3e:e0:14:33:
ea:59:93:f1:28:5d:a6:79:4a:20:30:1b:fd:25:81:ea:5b:c2:
e1:28:6a:b4:dc:01:88:18:ea:52:04:54:ff:81:03:1f:a3:60:
41:40:09:63:01:ee:a3:78:97:52:98:9d:58:60:04:dc:ea:17:
ca:3a:a0:11:66:33:b7:7c:42:a3:37:6d:49:4a:8c:f7:c9:02:
88:69:c8:47:82:84:71:f4:87:38:7c:01:bf:ca:84:5b:8d:3a:
dc:95:08:43:fd:48:77:0e:61:ab:2d:ac:6a:b9:4a:1d:28:d5:
e7:91:5b:b3:96:9d:8a:27:6d:71:51:62:83:01:68:e5:f6:f5:
9c:a8:6e:f2:f6:3b:37:2b:0a:c8:44:13:fd:2c:5a:34:78:65:
22:e3:ec:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:23:50 2025 by rpki-client