Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa
File: i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa (raw, json)
Hash identifier: 8a3s9KqUkQhOrZSBJq2JkK0Sdj3yykOgJrB/OxjID58=
Subject key identifier: 8B:E2:9A:EB:2A:B0:F7:29:5A:DB:08:83:74:15:2C:DE:6E:F0:B5:CF
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0661
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa
Signing time: Tue 04 Mar 2025 07:58:33 +0000
ROA not before: Tue 04 Mar 2025 07:58:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7641
IP address blocks: 211.146.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1633 (0x661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Mar 4 07:58:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8BE29AEB2AB0F7295ADB088374152CDE6EF0B5CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:24:8b:93:23:03:64:f6:1b:ee:f8:19:8b:
39:56:8e:6f:68:05:c9:95:30:6e:f8:aa:f7:f6:48:
51:d8:61:29:d5:87:e0:ad:ce:9d:bd:cc:3a:ea:3a:
cd:2a:4e:e1:7e:da:c7:50:ec:bb:27:83:f3:93:12:
3c:ab:ba:74:9e:b3:97:fe:6f:c2:87:f2:a2:96:14:
5a:6e:54:b6:de:77:6a:9b:ee:ec:59:b4:74:d5:aa:
71:e4:c7:f2:79:a4:60:87:96:ca:a5:82:7b:5a:d5:
cd:98:57:df:32:6a:d9:1a:0a:86:7c:82:98:3e:c0:
43:b6:4f:b1:d2:ee:b4:66:62:97:75:88:4b:a1:d4:
c2:70:3a:5d:61:14:94:38:45:11:5e:27:58:2b:54:
03:21:80:5a:3a:bb:e0:10:7c:7d:08:db:c5:4d:4a:
8c:6c:24:1c:63:d6:19:7d:4b:cf:ec:97:13:4e:b3:
20:33:3d:93:9b:84:69:18:c5:dc:b6:ee:76:f5:7f:
45:1b:67:63:1d:c3:ed:35:69:42:e6:a7:0f:7f:1b:
e8:dd:7d:7f:dd:50:d5:ea:7c:67:5f:9c:4f:80:08:
f7:bf:6f:48:4b:5b:56:16:d4:f8:49:32:09:3f:03:
bc:62:45:67:dc:c7:ba:c7:a5:1e:34:65:12:57:61:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E2:9A:EB:2A:B0:F7:29:5A:DB:08:83:74:15:2C:DE:6E:F0:B5:CF
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.146.24.0/21
Signature Algorithm: sha256WithRSAEncryption
70:f0:e7:3c:9e:f0:9f:45:09:94:0d:41:7d:11:84:b9:ee:bd:
96:17:82:3e:9d:43:fb:02:6a:84:ea:36:ae:d3:a9:8f:cb:11:
ed:04:7b:93:88:45:8c:04:c4:37:4d:1f:8a:84:1e:15:6b:52:
79:11:2f:99:b2:18:fc:a1:62:9c:08:53:f4:00:3f:e3:70:b0:
a0:7e:4d:06:e4:96:e9:8d:91:72:8a:40:b1:17:86:65:79:c8:
09:ce:04:68:e5:59:88:c6:b8:d2:fe:e9:79:39:d9:87:75:75:
c9:0f:11:09:e2:05:7e:a7:c8:2e:f5:36:61:1a:4c:02:14:44:
39:58:b9:c3:9e:ce:c1:da:ee:ed:6a:1c:d7:cb:5a:a5:ac:70:
02:00:14:49:8c:b5:e5:30:fd:24:b5:e2:ac:71:3c:9c:2f:09:
94:30:31:f3:1e:fc:8d:e8:a7:4b:1d:d0:f6:0c:e1:91:5d:93:
b4:1b:46:e1:45:29:10:ce:94:ef:6b:b2:bf:d8:ac:55:76:77:
2b:bb:2a:e9:0b:3a:23:23:f2:a5:5d:cf:54:86:bd:a8:3f:f8:
86:21:b6:c8:79:11:99:b6:c6:b1:53:57:c0:6b:53:29:61:a5:
f6:7f:d0:db:ef:88:0c:61:c3:2f:8b:a5:7e:38:3b:33:49:97:
4c:fd:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net