Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/cMzirDskOTT5ePrJEsxyDGNCXb4.roa
File: cMzirDskOTT5ePrJEsxyDGNCXb4.roa (raw, json)
Hash identifier: waffoFYiR68Q2R0Wnu1wVzSJhplgJZ4kdjj1z5fBsFc=
Subject key identifier: 70:CC:E2:AC:3B:24:39:34:F9:78:FA:C9:12:CC:72:0C:63:42:5D:BE
Certificate issuer: /CN=FD27EB32A94DA8CBCB9D7D343FE471DF35C85003
Certificate serial: 207D
Authority key identifier: FD:27:EB:32:A9:4D:A8:CB:CB:9D:7D:34:3F:E4:71:DF:35:C8:50:03
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/cMzirDskOTT5ePrJEsxyDGNCXb4.roa
Signing time: Wed 09 Apr 2025 07:08:29 +0000
ROA not before: Wed 09 Apr 2025 07:08:29 +0000
ROA not after: Thu 09 Apr 2026 06:40:07 +0000
asID: 54994
IP address blocks: 220.243.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8317 (0x207d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD27EB32A94DA8CBCB9D7D343FE471DF35C85003
Validity
Not Before: Apr 9 07:08:29 2025 GMT
Not After : Apr 9 06:40:07 2026 GMT
Subject: CN=70CCE2AC3B243934F978FAC912CC720C63425DBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:f7:22:b2:af:75:00:7b:36:e5:c8:f1:62:
41:bd:5d:52:46:69:3a:f7:ab:9d:e5:d7:80:1e:31:
bc:01:a3:0f:a6:76:b0:a4:b9:da:08:0e:5f:df:50:
b9:9f:b6:e8:38:6d:73:2b:9b:0b:d0:9a:7a:22:4f:
15:c7:17:8e:21:a3:b2:c0:69:f4:34:0c:f4:79:34:
6c:79:34:9b:e9:c1:a7:01:12:0a:34:8f:f9:e2:1a:
fc:3b:76:c3:a8:14:d1:53:02:b8:c6:3a:44:be:3a:
85:dc:f3:70:f3:b8:db:39:6f:07:b0:aa:ff:d5:1e:
74:2d:d0:29:d9:87:36:11:1a:ec:86:b6:ce:f4:42:
5e:4b:ae:85:8f:09:df:33:e0:ca:32:7c:5b:3b:bd:
be:ce:a6:03:8d:66:0b:b1:3e:5f:62:30:f2:93:d9:
69:0d:55:ed:c0:e4:1b:4c:1c:ff:1b:c9:ae:bd:a5:
6c:9c:34:54:72:3b:0f:b1:d2:aa:ef:ed:49:54:0b:
93:5e:89:00:4b:4e:f7:e6:53:be:dd:f2:73:b0:cf:
05:10:e0:bb:42:fc:94:87:1f:25:69:16:47:0b:55:
e5:cf:a2:a5:a9:04:7b:0c:a4:58:7c:2d:1c:19:d0:
f0:e6:d9:fa:bf:88:0c:f5:ef:b9:fc:7b:40:c2:dd:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:E2:AC:3B:24:39:34:F9:78:FA:C9:12:CC:72:0C:63:42:5D:BE
X509v3 Authority Key Identifier:
keyid:FD:27:EB:32:A9:4D:A8:CB:CB:9D:7D:34:3F:E4:71:DF:35:C8:50:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/_SfrMqlNqMvLnX00P-Rx3zXIUAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/cMzirDskOTT5ePrJEsxyDGNCXb4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.243.248.0/24
Signature Algorithm: sha256WithRSAEncryption
45:22:94:02:3d:c4:19:a1:41:db:9b:ea:2b:35:ed:7a:0e:57:
a7:e5:17:a7:c6:9c:36:6f:2e:75:bb:57:b0:a5:4d:64:70:eb:
25:92:1c:1e:76:49:bb:4a:53:de:b9:57:c6:38:44:97:e0:e6:
21:af:54:48:6b:5e:52:9d:10:ef:ee:8a:85:64:9b:6e:62:a0:
dd:ca:ff:24:91:9c:c8:98:6c:f1:21:97:1c:ca:48:49:1d:2a:
d0:e7:dd:dc:4c:85:a3:57:1d:02:4d:5a:37:83:86:91:73:73:
1d:1b:70:a4:a9:31:3d:6a:e6:87:95:c7:f4:a1:e5:6f:ff:21:
09:ef:ac:7d:7c:3d:27:5d:ec:37:9c:36:b0:1a:5f:7b:7f:de:
82:b5:13:a2:fc:5b:ef:1a:81:83:2c:42:08:20:b0:0a:7e:61:
d0:ed:f6:d7:71:d8:a5:28:3c:22:8d:96:90:76:12:12:99:5e:
6b:1a:3d:48:14:45:1e:7a:a7:08:14:38:3d:32:75:a5:1d:1b:
ce:c6:09:08:b4:58:5d:74:08:bf:a4:d6:e6:a3:e0:08:d8:3b:
d6:11:bb:3d:87:d0:16:96:e3:e1:e4:67:80:aa:9b:93:4a:ea:
34:3d:10:8b:e7:42:6a:e6:62:ef:9f:3e:84:22:85:be:1d:3e:
e3:6f:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:33 2025 by rpki-client on console.sobornost.net