Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/yw2BPIXUIuBMFC6wpUZpuD10a4M.roa
File: yw2BPIXUIuBMFC6wpUZpuD10a4M.roa (raw, json)
Hash identifier: WAyNh9vmyBLzlaJdco2J++XegPG7YdkDe8ABy3tHOA4=
Subject key identifier: CB:0D:81:3C:85:D4:22:E0:4C:14:2E:B0:A5:46:69:B8:3D:74:6B:83
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CF0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yw2BPIXUIuBMFC6wpUZpuD10a4M.roa
Signing time: Fri 07 Feb 2025 01:25:46 +0000
ROA not before: Fri 07 Feb 2025 01:25:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 01:25:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CB0D813C85D422E04C142EB0A54669B83D746B83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:c9:93:16:9f:32:6c:4e:b7:5b:50:6c:59:
12:3b:a5:6a:bd:2a:66:c8:c5:e5:00:20:a6:35:99:
23:63:97:6e:22:e4:4c:34:6b:bd:05:18:0c:21:61:
aa:20:cf:3c:0e:37:2b:00:38:88:36:6e:2d:f4:b7:
7a:76:f4:b7:73:93:c3:ae:9b:9d:61:78:c4:66:55:
4c:eb:46:1b:01:17:6d:51:70:e2:12:4f:d0:8d:d9:
5b:e6:cd:45:a6:b1:d7:63:ae:da:d8:43:93:fa:e6:
68:03:05:30:86:d1:db:04:43:56:59:76:32:f7:dc:
e0:69:59:ee:6a:0b:b7:d2:e8:dc:12:63:aa:35:b0:
ed:0d:b2:17:a9:de:2e:e4:64:b9:62:a2:ec:b6:c5:
be:a2:74:6b:a7:9c:0f:3c:2b:58:83:f4:fb:17:50:
71:f0:62:98:77:c8:9d:4b:a6:95:2f:19:8f:b7:c2:
80:84:54:d1:1c:5a:d6:25:be:34:57:60:a1:c8:67:
23:26:ba:1b:ad:7d:2d:ee:cf:8f:97:35:2a:bd:9e:
a5:35:e0:33:ea:b6:d3:2a:7a:65:9b:b1:da:d3:25:
b1:ae:dc:1f:33:84:19:5c:7b:41:67:46:62:fd:8a:
91:98:02:4c:a8:ea:16:9d:d2:f8:da:4a:c2:11:8c:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:81:3C:85:D4:22:E0:4C:14:2E:B0:A5:46:69:B8:3D:74:6B:83
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yw2BPIXUIuBMFC6wpUZpuD10a4M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
56:16:f1:03:08:fc:c8:58:67:d3:11:f6:1b:4b:53:4e:5e:16:
1d:8f:ae:2d:17:71:63:92:c3:d4:59:ed:d2:bc:5e:98:b6:f0:
08:50:f2:8d:0b:04:13:b7:3e:36:90:d9:07:cb:7b:4d:49:82:
99:11:10:3c:c7:76:93:d2:64:2f:53:ad:a4:f9:a0:bd:5d:37:
0f:6b:12:d7:cf:16:08:00:d0:a1:29:5f:f6:57:a3:91:dc:0d:
a1:f3:4a:96:80:b2:a8:09:18:90:3a:21:30:41:1b:7a:8d:41:
7c:91:db:77:07:c4:ad:ab:14:2a:02:95:7b:76:f9:a2:fa:1a:
60:5b:07:75:c3:28:66:36:d7:1d:45:b0:7d:b6:35:95:53:b8:
ce:ab:b6:f4:69:da:67:a1:24:f8:02:09:0d:1e:c8:3e:d6:72:
f8:a1:6c:f0:bc:ba:07:24:73:95:24:8e:fa:f4:ac:5a:11:51:
9d:1f:71:e3:0b:43:b6:a2:1e:90:0d:7a:c9:f3:7a:6f:51:57:
fc:78:13:ff:00:77:f9:08:d2:e0:a5:d5:a3:ce:a2:8d:0f:e4:
f1:69:3d:a5:93:31:13:0a:ca:d4:54:75:a7:f8:02:5a:73:38:
dd:ea:c0:b5:c6:55:31:0d:94:5a:78:71:a4:97:61:3f:b6:13:
f7:9e:2d:3e
-----BEGIN CERTIFICATE-----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=
Generated at Fri Feb 7 05:42:46 2025 by rpki-client on console.sobornost.net