Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/313/0juefDmvXwTk-netHWxtCMJsE0c.roa
File: 0juefDmvXwTk-netHWxtCMJsE0c.roa (raw, json)
Hash identifier: 3//WRvtSOdT2nxGrSxEiliu2nBg9gHf53d3i2T+f07k=
Subject key identifier: D2:3B:9E:7C:39:AF:5F:04:E4:FA:77:AD:1D:6C:6D:08:C2:6C:13:47
Certificate issuer: /CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47
Certificate serial: 1DB0
Authority key identifier: F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/0juefDmvXwTk-netHWxtCMJsE0c.roa
Signing time: Sat 26 Apr 2025 04:18:33 +0000
ROA not before: Sat 26 Apr 2025 04:18:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 38365
IP address blocks: 117.58.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7600 (0x1db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47
Validity
Not Before: Apr 26 04:18:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D23B9E7C39AF5F04E4FA77AD1D6C6D08C26C1347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:19:aa:8e:96:8d:12:58:44:4d:83:84:c3:
d8:88:ba:44:46:ab:f2:1b:f8:f2:e8:f7:e3:6d:28:
69:e8:7f:f8:d8:77:7e:05:76:21:f7:dc:6a:7d:b7:
62:17:62:94:40:c4:e7:88:af:6e:3e:1a:fe:be:10:
ef:06:00:4f:3c:72:84:05:3d:84:02:ce:4b:ed:55:
82:a2:b3:e4:62:ad:ee:2a:cf:41:14:24:68:f7:a0:
8d:0e:96:a6:40:2d:48:8f:47:26:79:3b:cc:dd:0b:
9f:1d:a5:74:3d:7e:fd:c8:23:a4:db:5c:c4:17:1e:
f8:69:1a:15:ae:8e:21:04:5e:81:5e:8d:aa:41:14:
47:7a:ce:b0:c6:f4:58:21:e2:34:ea:dc:8c:19:13:
1c:40:2c:ee:e3:64:f0:19:e1:01:b5:90:2e:f6:85:
0c:44:12:67:33:2c:89:c9:1f:16:b3:7e:bf:e5:dd:
d3:05:c0:79:95:d5:c2:79:cd:30:d4:6d:59:0a:cb:
d7:6d:34:0e:bd:d2:11:95:44:bd:f7:1e:b2:00:cb:
5c:63:26:41:ad:de:db:51:db:95:50:51:52:a7:16:
3f:b6:14:44:21:c1:84:e9:56:78:ca:55:a0:fb:cb:
bd:da:39:f6:02:ac:76:0b:e0:49:dc:dd:52:7b:90:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3B:9E:7C:39:AF:5F:04:E4:FA:77:AD:1D:6C:6D:08:C2:6C:13:47
X509v3 Authority Key Identifier:
keyid:F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/0juefDmvXwTk-netHWxtCMJsE0c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
117.58.0.0/17
Signature Algorithm: sha256WithRSAEncryption
05:38:da:2f:16:00:28:7d:c3:7e:36:7c:da:9c:cc:4c:9f:5a:
32:4e:13:95:1c:be:c3:5a:da:f9:72:50:ae:8a:95:14:65:60:
e7:33:30:eb:c6:c4:0b:be:99:de:3c:31:a7:0a:2b:f5:22:ca:
d2:2a:9c:ec:ae:61:e1:45:8b:2f:66:a3:c8:cd:f8:65:c3:97:
50:aa:50:86:cf:94:b4:36:85:32:56:a9:07:3a:87:e7:f9:48:
c4:5d:1f:ff:c0:05:87:53:3f:30:f7:bd:5b:70:87:4d:b5:c0:
7a:3c:26:7c:2a:ef:32:58:60:77:9c:52:82:a9:cb:52:57:8d:
f2:a3:36:ab:a7:87:d5:d4:ee:a2:88:8f:f6:4b:9b:70:36:2e:
52:15:03:b1:98:ac:4d:e6:b7:78:72:dd:66:6a:be:4b:1a:4a:
95:9b:d5:b7:9e:34:fe:6a:2a:ec:89:ad:7f:16:c4:93:fc:28:
ce:1d:a0:1e:c8:05:4e:b7:75:7f:cb:d6:06:e9:dd:c9:ce:db:
5c:76:cd:a2:5b:4b:5e:6a:e1:34:8a:24:cc:6d:96:b1:55:79:
d3:ab:c0:b0:a5:62:23:96:9b:07:b4:24:33:9c:2e:60:09:8b:
f8:cd:60:ea:af:2e:8f:65:1a:c8:2e:42:41:76:23:6e:51:aa:
46:b9:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:43 2025 by rpki-client on console.sobornost.net