Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/R3Vu3XinmXwSescKzqv8RYF1rJQ.roa
File: R3Vu3XinmXwSescKzqv8RYF1rJQ.roa (raw, json)
Hash identifier: vFRvZlBYVhhj/pgfljWNRAwZN8ox28pyp8rqq+EfJSc=
Subject key identifier: 47:75:6E:DD:78:A7:99:7C:12:7A:C7:0A:CE:AB:FC:45:81:75:AC:94
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0F9D
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/R3Vu3XinmXwSescKzqv8RYF1rJQ.roa
Signing time: Tue 14 Jan 2025 07:08:10 +0000
ROA not before: Tue 14 Jan 2025 07:08:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 101.232.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3997 (0xf9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jan 14 07:08:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=47756EDD78A7997C127AC70ACEABFC458175AC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:46:66:8d:58:dc:11:93:90:c2:b0:61:d9:
17:3e:3d:78:53:ff:e6:d7:72:8f:27:04:05:5f:cc:
b0:51:a9:a8:59:f5:a7:e7:87:0e:11:eb:30:99:59:
f7:bf:6e:cd:34:0c:62:b2:3f:3c:4e:8f:65:1a:59:
41:70:50:12:24:53:1f:e2:d4:2b:7a:3f:f0:43:81:
00:c4:5f:21:ab:b2:04:94:5e:2e:3f:23:c3:99:e4:
ae:8a:3e:1e:97:93:2c:11:e7:d8:fb:a2:fb:e4:fc:
a9:6d:81:14:34:61:9e:13:1d:44:c6:38:69:fb:03:
f4:6d:38:d0:92:df:c2:d2:b8:4f:bc:9c:f8:e0:61:
dc:40:86:21:a3:bd:14:a5:26:d8:0a:41:5b:90:93:
26:ff:15:9b:d4:5d:0c:8a:f2:f6:f4:4c:d0:6f:4f:
d0:39:cc:c2:a5:2d:57:07:14:bf:d9:ae:01:aa:a9:
f5:cb:05:48:5f:7e:5e:44:12:ba:b1:1a:6c:9b:c0:
ed:d0:3f:34:1f:88:9b:57:d7:b0:dc:63:40:d5:bd:
cd:a1:a4:1a:c9:e3:e7:85:8c:41:05:6c:32:5a:b9:
b3:a5:a4:40:f9:1a:62:4e:70:be:46:7f:1d:37:3f:
17:15:26:52:dd:ce:47:37:21:d2:5a:b5:f8:84:d6:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:75:6E:DD:78:A7:99:7C:12:7A:C7:0A:CE:AB:FC:45:81:75:AC:94
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/R3Vu3XinmXwSescKzqv8RYF1rJQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.64.0/19
Signature Algorithm: sha256WithRSAEncryption
79:7c:37:26:be:bf:58:b1:fd:3e:8a:87:c0:9c:9e:3c:43:c3:
3c:d3:f0:f7:84:f0:c2:3a:8f:a4:48:14:b2:9e:d0:fd:df:a7:
ab:ce:4b:68:ee:df:8a:c1:da:da:bd:66:d5:16:09:8d:e0:99:
f6:e7:47:2a:01:a4:94:e8:36:61:27:49:6c:d7:3b:ef:90:64:
f5:e5:a4:8b:61:6b:fd:ea:7e:2a:33:1e:e4:ff:f8:4a:aa:52:
64:24:ec:f0:ae:1c:93:fe:bb:9a:43:ea:15:7e:50:d6:7a:69:
68:b7:40:0f:87:b2:5f:85:1e:19:50:2c:6f:46:7f:f4:93:07:
bb:57:00:73:16:29:29:8c:12:d6:ca:a1:40:f5:59:d6:ca:03:
fc:25:82:98:ba:11:a2:1d:bf:44:05:fd:7a:8f:15:55:1c:70:
39:0e:0e:99:48:7a:c9:d8:51:69:b1:4f:39:25:5f:00:9d:0a:
59:b0:81:09:f4:8b:ab:ec:af:6c:ed:69:56:be:03:71:a3:47:
10:b1:10:ac:a2:df:7b:c8:ef:92:e8:6f:17:67:1b:00:da:8f:
aa:b8:e2:f8:57:05:e5:e2:d2:31:5d:8c:ed:24:4a:30:d8:3a:
15:e8:8a:c3:2e:9c:a1:5a:84:7b:45:18:cf:f6:c9:40:9f:43:
22:5f:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:47 2025 by rpki-client on console.sobornost.net