Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/313/nyeWjKVDTSSFf1sRupBws5XxaKc.roa
File: nyeWjKVDTSSFf1sRupBws5XxaKc.roa (raw, json)
Hash identifier: XDjBfHQ5TvvNdiunDS43jrCg5hXszJoM4jpYtb56c/Y=
Subject key identifier: 9F:27:96:8C:A5:43:4D:24:85:7F:5B:11:BA:90:70:B3:95:F1:68:A7
Certificate issuer: /CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47
Certificate serial: 1DAD
Authority key identifier: F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/nyeWjKVDTSSFf1sRupBws5XxaKc.roa
Signing time: Sat 26 Apr 2025 02:46:10 +0000
ROA not before: Sat 26 Apr 2025 02:46:10 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 38365
IP address blocks: 42.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7597 (0x1dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47
Validity
Not Before: Apr 26 02:46:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9F27968CA5434D24857F5B11BA9070B395F168A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:c8:a6:83:93:ac:76:45:eb:7f:3d:13:31:
ae:e4:af:e6:3f:35:6f:68:ab:e1:ad:7d:a8:d7:5a:
80:35:74:b9:23:ca:3b:9e:93:41:f1:b4:96:86:76:
0a:d0:e5:11:26:f5:84:eb:62:91:b3:33:c1:ae:fc:
b2:20:39:a7:20:dc:96:1f:19:60:90:74:23:23:73:
a8:15:a6:e0:76:97:03:0e:5b:25:75:30:8b:a5:e1:
3b:6d:b6:24:49:3a:73:77:a7:5b:96:a9:6f:ae:87:
c4:62:65:3a:ad:25:eb:ef:11:49:37:3d:fe:93:3c:
75:ac:83:6f:a2:6e:14:d5:55:50:4d:3f:da:ef:e6:
8d:37:e9:b6:99:f9:10:06:38:38:7b:14:40:b7:fe:
c1:c5:9e:a9:70:41:61:2b:dd:35:39:37:63:83:b2:
98:85:ef:f4:8e:16:80:95:1d:78:a3:8e:4c:f5:b6:
34:fb:64:23:8d:4c:9a:6e:c2:2a:89:1b:ab:04:25:
ee:b2:19:7f:34:8b:e3:7c:fa:f0:10:1d:c9:95:fe:
14:d7:00:76:79:04:8f:84:41:52:16:fc:7b:95:c7:
16:42:12:c9:fd:0f:b9:74:e2:b6:5c:b4:d7:dc:a1:
1a:d9:d8:30:2c:13:df:c7:ec:c6:c4:83:79:69:7c:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:27:96:8C:A5:43:4D:24:85:7F:5B:11:BA:90:70:B3:95:F1:68:A7
X509v3 Authority Key Identifier:
keyid:F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/nyeWjKVDTSSFf1sRupBws5XxaKc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.199.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:98:6b:f2:fe:87:84:d5:53:b3:b5:b8:6f:02:b0:c3:ad:06:
48:15:e4:df:2f:e5:69:7a:0e:2f:42:a8:de:7c:b2:1e:a6:7d:
0d:2f:20:1f:88:80:33:20:a5:6b:b0:67:4f:89:c0:a7:db:00:
9a:e2:d6:30:a3:6f:aa:15:f4:8a:1d:46:a8:2f:05:d4:4f:17:
d9:8b:a8:19:44:a1:56:86:af:bf:e8:7d:5d:c3:50:71:87:fb:
4d:42:cb:db:86:d8:24:79:25:0c:e4:83:83:d3:77:0f:aa:4b:
9e:71:38:30:94:ff:a8:34:72:6d:f4:2a:91:86:0d:d1:85:b7:
a4:e5:69:6f:9d:7d:df:4c:f4:07:6f:10:52:ad:90:cf:a2:43:
3e:de:85:b3:74:5f:e3:51:ad:56:a4:6e:47:6a:7a:d3:bd:5a:
6e:6d:34:8c:2a:22:c3:b7:a8:ae:5d:80:0a:b0:70:04:e8:12:
ab:1c:74:8a:7f:08:9d:fc:54:2c:85:a9:9d:3f:7d:7a:03:a8:
a4:3a:97:88:3a:32:a6:2b:20:98:bb:01:d4:93:c9:20:33:f5:
ad:8b:be:f0:29:af:47:be:ac:f4:ca:b4:3e:f3:07:df:22:b2:
4c:36:9e:ab:52:c4:f8:bf:02:19:1c:33:39:4b:f9:9a:c5:55:
54:96:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:43 2025 by rpki-client on console.sobornost.net