Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa
File: st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa (raw, json)
Hash identifier: teKJPwHr+FjeXiLBkvonrKuw/vvZ8PpXoyaipi8yxV4=
Subject key identifier: B2:DE:4F:D9:04:C8:5E:D1:A0:9F:1E:24:54:9E:84:27:C6:AA:BD:6C
Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial: 1DAC
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa
Signing time: Thu 24 Apr 2025 09:17:55 +0000
ROA not before: Thu 24 Apr 2025 09:17:55 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 131314
IP address blocks: 119.161.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7596 (0x1dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Validity
Not Before: Apr 24 09:17:55 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B2DE4FD904C85ED1A09F1E24549E8427C6AABD6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:98:65:14:44:d6:0c:30:65:e6:7c:9d:05:
2c:18:9f:e3:9a:32:f2:90:cb:81:7d:93:00:38:30:
83:8c:14:61:c8:a9:bc:5f:91:5d:c7:09:9e:a2:0f:
83:a5:00:85:8c:5a:ee:f5:9e:a9:e4:eb:52:87:f3:
94:23:02:f1:ed:b4:e5:ad:12:f1:7b:3a:e5:94:60:
99:70:cb:9a:fd:29:7c:6d:9a:0d:ca:04:19:4e:d3:
9e:22:20:1c:77:3b:f5:f9:ec:61:87:ec:c1:ae:f0:
8b:02:12:d6:26:8d:52:f6:85:99:1f:cb:c8:60:9d:
24:b2:75:b6:89:f8:2d:c7:8e:98:cb:ce:09:7b:53:
3a:31:5d:2e:db:ea:fb:04:d2:fc:73:57:d3:b0:7d:
c6:33:c8:35:d9:d6:f8:95:f0:30:3a:c3:07:c1:b3:
36:89:05:40:84:91:98:bf:51:64:1b:d5:75:a5:31:
31:6c:35:3e:d7:36:30:47:88:c8:ff:4b:f7:9c:b4:
bd:71:c3:c6:f2:20:f7:62:80:0d:b8:76:f2:03:b2:
60:79:25:29:81:6e:e8:77:8b:c0:5e:40:6a:c1:58:
79:de:34:a5:7f:9c:48:eb:fa:90:5b:da:fd:26:d4:
dd:f0:d3:39:ca:e9:ac:c1:08:1f:d7:e8:1d:f5:ed:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:4F:D9:04:C8:5E:D1:A0:9F:1E:24:54:9E:84:27:C6:AA:BD:6C
X509v3 Authority Key Identifier:
keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.161.124.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7e:39:32:a6:68:a0:d5:3c:c4:01:dc:83:89:10:17:26:1e:
1c:55:b0:b1:57:72:20:aa:71:38:eb:3e:a4:4c:0d:2f:af:cb:
39:bd:ff:71:cb:e5:65:dc:17:77:ef:94:01:c1:03:51:ee:59:
09:88:3d:a5:85:a7:0d:4c:ec:78:2d:9f:25:16:7c:ec:e5:1f:
f0:05:6d:a9:c1:cd:22:e2:be:9f:79:97:cb:f4:53:8f:36:77:
64:b6:f8:2b:22:df:fc:92:81:21:f2:3f:05:da:6a:38:9b:24:
10:14:01:d0:d6:d8:06:b4:b4:95:b5:c1:41:47:f2:3e:51:ac:
65:e5:bd:67:5f:54:ad:63:16:e9:77:42:f3:12:06:e1:a9:58:
29:e2:b1:4d:eb:a5:0e:79:bd:3c:d8:a3:17:64:ca:60:51:3a:
b4:51:01:79:c8:cd:c4:6a:79:47:eb:5c:b4:68:16:59:56:d4:
23:1e:4e:0a:39:a3:07:75:8e:61:0c:f1:83:03:14:79:b7:a4:
b5:85:74:5d:c0:a4:26:35:c3:bf:1b:a2:43:96:6b:d5:36:4a:
5d:d3:a7:b3:99:f0:4b:43:b2:43:ba:fc:f2:c6:dc:0f:a8:76:
c3:d4:b6:84:38:81:2d:7f:f5:b1:73:c7:51:51:68:ff:8f:fc:
6a:6c:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:47 2025 by rpki-client on console.sobornost.net