Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/lVatHXgJYHeEv1kpYqyFWkiQNvc.roa
File: lVatHXgJYHeEv1kpYqyFWkiQNvc.roa (raw, json)
Hash identifier: Ig2uqLibdpo5bXeKVMPoQj35Ki9XftJlKWfFY3dWSaM=
Subject key identifier: 95:56:AD:1D:78:09:60:77:84:BF:59:29:62:AC:85:5A:48:90:36:F7
Certificate issuer: /CN=86DB0D88746FFC0814E589A139240F2F742D0C56
Certificate serial: 1322
Authority key identifier: 86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/lVatHXgJYHeEv1kpYqyFWkiQNvc.roa
Signing time: Mon 10 Feb 2025 01:29:37 +0000
ROA not before: Mon 10 Feb 2025 01:29:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63566
IP address blocks: 122.11.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4898 (0x1322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86DB0D88746FFC0814E589A139240F2F742D0C56
Validity
Not Before: Feb 10 01:29:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9556AD1D7809607784BF592962AC855A489036F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:32:58:3f:7d:4d:7a:94:56:25:18:d6:2f:
a7:ff:b3:5c:a7:50:9a:35:e1:29:42:6b:9e:12:3c:
14:2c:0b:1f:11:ff:1f:15:71:9f:67:06:ef:c4:ca:
a3:b1:1a:27:4a:27:45:44:e3:93:5f:d1:91:b9:8a:
62:d7:75:38:99:24:d7:ac:2e:94:35:b5:cf:e2:ff:
2c:23:a1:41:07:e0:cb:10:95:02:cf:f0:62:83:e4:
1b:59:21:7a:65:86:e3:06:b8:68:41:94:d9:78:3f:
cb:84:ce:aa:60:bf:92:36:ae:74:4a:2f:97:bd:3f:
38:65:ef:85:46:f2:d4:1b:29:d3:66:28:1e:b2:a9:
b5:78:47:34:11:59:38:cf:7e:7d:e3:e6:2f:19:a7:
57:99:4a:df:6e:52:9b:39:1b:29:ca:7c:91:f0:47:
5a:06:62:79:00:50:36:23:d3:fb:90:fd:4b:05:22:
d9:a9:d6:fb:df:be:99:85:fd:7a:c3:08:16:2e:22:
d4:42:52:36:7f:d1:89:c9:d5:44:5b:31:00:d4:87:
e1:b3:eb:1a:8a:2a:c5:1b:97:fb:aa:b8:70:e6:28:
ea:eb:60:0e:cd:91:2b:45:e9:83:69:76:43:a5:f8:
76:de:2a:79:ee:d9:be:9b:40:70:75:d0:1f:7c:31:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:56:AD:1D:78:09:60:77:84:BF:59:29:62:AC:85:5A:48:90:36:F7
X509v3 Authority Key Identifier:
keyid:86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/lVatHXgJYHeEv1kpYqyFWkiQNvc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.11.0.0/19
Signature Algorithm: sha256WithRSAEncryption
35:cc:48:1a:b0:9d:c3:03:27:18:df:a2:4b:10:75:3d:f0:6a:
af:2b:d2:13:19:a3:fa:f6:48:54:ef:67:d0:68:b0:15:f3:9c:
3b:4a:22:f0:e2:04:10:30:f1:b2:32:08:a2:c4:b8:e9:99:17:
22:b4:40:6a:fd:f2:04:f7:17:fd:37:47:fd:18:64:53:34:1d:
1a:04:cf:8d:61:e3:14:65:81:60:b1:03:63:57:12:1d:fb:81:
59:32:3a:16:85:85:d3:84:14:6e:6e:3e:bf:84:ad:c6:97:de:
7c:62:77:e1:e0:fa:52:31:ec:88:f7:fd:5d:12:ba:a1:a9:f9:
a0:02:fe:dd:06:a4:f0:db:ce:45:18:b4:0e:d1:fb:c2:11:3d:
29:71:1d:7c:a8:9e:46:ff:7f:f6:54:ed:e5:69:e6:f8:e0:ce:
47:b4:79:8d:82:f9:45:07:e4:2d:29:b4:74:64:ad:28:4c:11:
31:1e:51:c9:7b:30:8d:71:b0:fb:a4:19:ab:82:b6:8e:ad:07:
ca:a9:f9:06:bc:66:5b:cc:f4:ee:72:c4:a4:3e:f1:dc:d1:b1:
59:c2:bf:99:ab:64:3b:e0:a2:e2:02:cf:3a:9a:9e:0b:5d:37:
24:cb:b7:5a:bd:87:d1:59:8a:b3:d2:1a:98:43:b2:cb:ba:1d:
72:2b:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:38 2025 by rpki-client on console.sobornost.net