Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/KH1fBgdHgQMes9MIjuirH1qec0U.roa
File: KH1fBgdHgQMes9MIjuirH1qec0U.roa (raw, json)
Hash identifier: UBlXnmdFuAyfJiihIokjYSAwJin04WrdXKEE2oteD9k=
Subject key identifier: 28:7D:5F:06:07:47:81:03:1E:B3:D3:08:8E:E8:AB:1F:5A:9E:73:45
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 1364
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/KH1fBgdHgQMes9MIjuirH1qec0U.roa
Signing time: Mon 21 Apr 2025 07:31:48 +0000
ROA not before: Mon 21 Apr 2025 07:31:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146806
IP address blocks: 45.250.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4964 (0x1364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Apr 21 07:31:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=287D5F06074781031EB3D3088EE8AB1F5A9E7345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:f8:c7:d7:5c:47:31:30:8f:4b:ac:ab:9c:
2f:6f:4b:23:f3:5c:43:66:81:d4:a1:4d:96:e9:09:
e5:5f:e4:21:4a:bb:15:91:82:e2:7f:6c:ec:1a:09:
23:1f:6c:91:bd:d3:a9:22:74:e3:4f:72:64:7e:63:
fc:8a:8e:eb:ac:b0:ef:89:85:12:90:98:27:cc:4e:
1f:e4:26:42:f3:ab:04:52:65:6e:cc:cc:f8:0d:fa:
3b:65:6a:39:48:a0:d2:bf:ad:3e:b9:fc:dd:85:54:
7d:8f:82:28:b2:37:4e:a6:a6:c5:4c:f3:8b:e6:a3:
ba:73:a0:26:fc:25:09:65:32:ca:c1:b7:31:07:c2:
3f:f3:cd:ec:59:d6:bc:dd:c9:3b:c2:4c:46:fa:5b:
b4:09:4f:0c:97:57:23:67:be:ff:d2:5c:d4:fe:7e:
31:15:99:f6:f4:b7:30:b7:df:1f:8c:bc:39:77:d6:
8c:20:37:48:d5:9f:19:63:c2:d0:c5:e0:a4:3c:bc:
e3:75:0f:e4:73:9d:49:da:8c:8b:40:9e:0d:b6:59:
10:cc:86:9b:00:77:07:e4:22:43:73:0f:f3:d0:0c:
b0:17:a4:e4:e4:2d:f4:6d:21:ad:28:12:59:3e:4c:
50:f4:50:42:73:8a:0e:1e:de:32:52:23:71:a1:bf:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:5F:06:07:47:81:03:1E:B3:D3:08:8E:E8:AB:1F:5A:9E:73:45
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/KH1fBgdHgQMes9MIjuirH1qec0U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.152.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:a6:cb:2c:c8:f9:fd:06:2e:b5:7b:9f:5e:1f:27:38:50:ac:
bc:14:de:52:7b:97:45:39:cb:b4:92:60:4b:3a:3f:70:20:44:
26:ab:40:4c:cf:31:7d:2f:21:aa:b7:61:89:48:5d:90:50:ea:
3e:4f:f1:63:f9:ec:40:6f:ff:ab:32:19:63:87:c6:38:bb:a1:
be:c1:ef:6f:a4:e0:e8:b1:19:72:c4:56:ab:68:f3:ab:84:b8:
e5:45:aa:84:33:86:3f:82:ff:19:8e:ee:30:ae:98:d2:7c:31:
6a:f8:70:37:a4:d6:ec:cc:2f:c4:8a:4d:14:19:4f:f3:29:1a:
fd:ad:ba:d9:9e:bc:40:11:47:cb:28:0b:be:2e:9c:4a:38:da:
6d:99:68:d6:89:a7:6e:34:85:67:b9:5c:6c:b8:3a:0d:d4:d3:
f8:19:4c:5d:dd:dc:67:2a:bf:15:40:d5:29:c4:f7:62:a7:36:
94:5a:6d:61:8a:cc:0d:df:08:97:f2:9f:06:84:f9:3d:c6:fc:
3e:01:34:c4:7b:24:da:5c:b1:e4:f8:4f:84:ae:0f:02:84:ac:
6e:d9:58:45:b7:b0:aa:38:9a:be:52:b4:05:64:f0:d8:13:25:
3c:2b:7f:9f:f7:9a:47:b3:96:9a:90:b9:9e:2d:a1:47:9f:68:
af:f6:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:44 2025 by rpki-client on console.sobornost.net