Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/RAgXGI-4XUBoSwpbrQaRyr_uZto.roa
File: RAgXGI-4XUBoSwpbrQaRyr_uZto.roa (raw, json)
Hash identifier: 9j9XNaa9zdB4+2yIxZtco2KzTeZBKa3QP6XTxR4iuBU=
Subject key identifier: 44:08:17:18:8F:B8:5D:40:68:4B:0A:5B:AD:06:91:CA:BF:EE:66:DA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 083A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/RAgXGI-4XUBoSwpbrQaRyr_uZto.roa
Signing time: Sat 25 Jan 2025 11:55:08 +0000
ROA not before: Sat 25 Jan 2025 11:55:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 11:55:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=440817188FB85D40684B0A5BAD0691CABFEE66DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:1b:37:fb:d9:62:1d:b0:ab:ce:05:b6:50:
5b:e7:5e:6c:02:f0:45:f7:12:45:5b:2e:05:8b:27:
74:a7:e2:2b:47:f0:9a:80:0c:13:89:b1:4f:36:27:
af:20:13:ee:06:b6:62:02:06:a7:44:55:a4:ae:b6:
7c:3f:22:4b:27:f1:0e:f9:9f:99:aa:87:53:32:1e:
41:bc:43:cd:6c:6c:15:c9:46:23:3b:21:b2:92:fe:
1b:66:d4:3b:82:32:89:5d:a4:27:a3:f9:d4:be:b0:
22:65:cb:24:e5:d3:a7:84:b1:5e:78:ab:39:86:d2:
7b:ca:14:d0:d7:11:7c:1d:c5:02:3c:07:e2:93:93:
49:43:ad:48:cf:3c:4f:a5:7a:7e:93:a0:47:bd:f1:
8b:61:8a:33:a8:be:c5:06:3b:f1:7d:b4:1b:0b:6d:
a9:3e:8e:90:a5:55:99:82:8f:d0:92:ba:8c:b5:73:
9a:f5:95:62:87:e9:53:e2:4e:07:1e:73:8a:93:48:
92:38:4d:30:09:d8:0f:f4:a8:d7:c3:13:40:3d:3e:
29:e9:0b:7f:e1:e0:4a:80:61:1b:bd:da:05:a5:9b:
19:40:80:df:ef:20:d5:3d:ed:04:07:95:4d:e8:ed:
d2:bb:2b:31:ce:09:ef:fe:ea:e8:2d:ce:11:e7:42:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:17:18:8F:B8:5D:40:68:4B:0A:5B:AD:06:91:CA:BF:EE:66:DA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/RAgXGI-4XUBoSwpbrQaRyr_uZto.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:89:45:b1:97:09:8d:93:e5:a3:19:6e:2d:5c:16:bb:5b:68:
a4:c8:8f:b0:f2:4d:21:8b:41:57:b1:05:95:08:25:5f:f9:42:
13:cd:c5:8c:27:ab:7d:00:46:5b:45:71:59:63:a0:12:d0:cc:
3c:d6:2d:e0:66:ee:97:59:77:0f:b4:8f:71:b4:67:92:c0:bf:
4a:13:96:79:eb:56:72:8e:bb:bd:08:62:65:3f:3e:69:5c:ca:
d1:7a:37:dc:74:04:ea:cc:ed:4b:24:e3:03:45:35:64:ba:d7:
ad:cb:b2:07:f4:88:e6:ba:96:12:b0:d1:31:9b:dd:7c:ea:ab:
a1:1c:d6:cc:27:d1:1b:e6:df:75:84:f3:fe:9c:75:64:bf:ba:
38:68:c4:2b:10:48:14:b4:47:13:54:6c:c3:d6:be:81:73:c1:
06:10:59:fa:75:55:75:d0:2f:d7:44:ef:72:dc:fd:f2:49:6a:
18:3b:5e:b6:7a:b0:44:b1:2c:5d:db:98:f4:36:7b:a8:18:36:
5a:a1:84:6c:7e:7a:34:fb:e8:b7:97:5f:95:98:13:26:d7:e1:
6d:b9:a0:0d:1a:f8:bc:39:c6:3b:d2:2c:f2:8b:04:1a:07:42:
3e:45:93:8e:95:2b:a7:ca:47:48:ab:cf:17:15:34:84:27:2d:
79:ba:19:94
-----BEGIN CERTIFICATE-----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=
Generated at Sat Jan 25 15:59:12 2025 by rpki-client on console.sobornost.net