Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/p5exbNsYSmDiln-g7yIyKvynhwU.roa
File: p5exbNsYSmDiln-g7yIyKvynhwU.roa (raw, json)
Hash identifier: n2w8Ek5ok0RMeIpd650AJAP9TYepbKHwFbnAgmfM7Bs=
Subject key identifier: A7:97:B1:6C:DB:18:4A:60:E2:96:7F:A0:EF:22:32:2A:FC:A7:87:05
Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial: 1DA3
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/p5exbNsYSmDiln-g7yIyKvynhwU.roa
Signing time: Thu 24 Apr 2025 09:10:06 +0000
ROA not before: Thu 24 Apr 2025 09:10:06 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 131314
IP address blocks: 111.118.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7587 (0x1da3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Validity
Not Before: Apr 24 09:10:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A797B16CDB184A60E2967FA0EF22322AFCA78705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:69:4e:bc:1d:e7:a4:16:67:69:bf:f7:d6:
2b:15:50:8d:f5:c4:8a:59:95:ed:69:80:74:35:28:
75:51:b5:41:d9:db:f5:76:2a:29:39:b4:9c:85:34:
e3:47:87:0c:03:e7:86:a4:59:f2:19:70:59:c8:8a:
db:fc:a7:a1:81:08:e2:05:fe:8a:8f:32:ed:46:68:
4f:1e:09:97:65:e5:e1:a0:03:87:5e:32:c2:15:83:
07:47:62:5e:2d:4c:d2:3e:d1:3d:0a:15:42:10:3c:
78:66:e1:c5:72:8a:3c:d8:46:dd:47:67:f7:0d:62:
db:a3:44:90:ff:53:53:83:25:ce:1d:f6:9c:df:57:
36:9e:58:24:61:00:99:f5:bc:0a:5d:83:cf:25:99:
99:bc:16:ff:33:49:9e:58:5a:53:ae:28:77:49:86:
cb:0f:67:64:c3:29:6a:6b:cb:ef:0d:12:83:91:dd:
f6:e3:bd:44:0c:96:85:cf:87:8a:19:53:98:28:ce:
37:1c:1a:7e:1d:34:cd:a4:e2:79:6b:2e:f6:83:4b:
c3:d0:4f:70:ea:c3:19:c0:72:a9:65:7a:a0:00:03:
c6:6d:d5:fd:23:f0:56:c8:da:88:d9:0b:72:24:e3:
a0:a4:99:be:7c:f4:39:4a:83:3d:4c:2e:9b:17:fd:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:B1:6C:DB:18:4A:60:E2:96:7F:A0:EF:22:32:2A:FC:A7:87:05
X509v3 Authority Key Identifier:
keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/p5exbNsYSmDiln-g7yIyKvynhwU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.118.200.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:63:39:33:de:2b:1f:9d:04:ac:ef:ac:10:6c:26:ce:60:3d:
49:1e:2d:7e:08:71:c6:cc:9e:2d:eb:64:10:6c:31:cf:0b:a8:
59:85:4e:c3:c3:ef:83:b5:9e:63:bd:b2:3e:18:22:ac:8c:a1:
39:12:29:ad:dd:51:ce:45:19:96:d6:e7:7e:d6:41:6c:e0:11:
9c:83:d1:dd:a6:1d:8a:c7:ae:ad:27:13:e2:72:89:e0:e5:ec:
b2:9c:d9:29:c0:da:08:db:11:1b:89:e7:b7:ce:bd:c0:c4:ed:
c5:82:bb:f8:88:0d:5e:b6:39:27:07:c9:a2:99:6c:57:9d:02:
b7:9b:08:ed:19:49:37:70:bf:f9:12:f4:ee:ed:70:31:f5:8d:
31:17:fb:97:c4:25:07:3c:4a:6f:d3:da:ee:71:62:4c:d7:41:
3c:9b:a0:f2:00:f6:9b:b4:1b:de:ce:a1:d5:45:c5:35:8e:d8:
a4:74:cd:3c:07:e5:8b:6b:7f:53:bc:07:d6:8e:3c:c0:d0:f5:
8d:dd:a4:7c:65:87:0c:0e:0d:0e:b2:70:27:67:d4:8e:b7:56:
f1:35:96:ce:7e:da:87:68:9e:ee:27:98:51:7a:a2:01:ac:9a:
76:5c:6c:fb:ec:07:b5:43:da:c6:ae:b3:0b:39:79:f4:f3:a3:
fd:ca:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:47 2025 by rpki-client on console.sobornost.net