Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3318/5rxYcqdXJdtcpXLTewvwvvt6VnM.roa
File: 5rxYcqdXJdtcpXLTewvwvvt6VnM.roa (raw, json)
Hash identifier: My9WuzhKe41sNd6PytKL4eyyt9tP7vadP6/E1CV3chU=
Subject key identifier: E6:BC:58:72:A7:57:25:DB:5C:A5:72:D3:7B:0B:F0:BE:FB:7A:56:73
Certificate issuer: /CN=3DCAE1310119B85AC476B00EFFAC2CA1C34B4631
Certificate serial: 03
Authority key identifier: 3D:CA:E1:31:01:19:B8:5A:C4:76:B0:0E:FF:AC:2C:A1:C3:4B:46:31
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/5rxYcqdXJdtcpXLTewvwvvt6VnM.roa
Signing time: Tue 08 Oct 2024 02:02:18 +0000
ROA not before: Tue 08 Oct 2024 02:02:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 151951
IP address blocks: 103.142.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DCAE1310119B85AC476B00EFFAC2CA1C34B4631
Validity
Not Before: Oct 8 02:02:18 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E6BC5872A75725DB5CA572D37B0BF0BEFB7A5673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:74:46:09:4c:de:51:e2:3f:11:ae:3b:ba:
91:20:bf:0d:e9:d0:47:49:72:e2:02:b6:49:3c:0e:
46:19:8c:65:c2:c0:77:0f:9c:27:35:83:1d:e5:a5:
8f:a9:97:64:42:87:97:9b:05:ad:f5:46:da:de:91:
84:11:50:6a:1c:8b:26:e1:6c:d1:ac:5d:95:90:19:
1a:d2:11:ad:28:33:f5:20:65:38:41:a6:4c:7a:f0:
55:02:83:36:fe:ad:f6:89:58:24:dd:12:2c:54:f5:
89:b7:35:b0:30:00:d0:a5:69:fc:a9:ee:82:ac:a4:
79:50:ff:2b:d5:84:36:32:56:84:5c:15:a4:43:56:
ac:08:ad:be:69:2a:e5:18:ae:f0:cd:24:3d:54:62:
25:86:c8:89:37:b9:80:14:fe:a2:8d:f6:d2:23:8c:
01:23:8f:4a:76:0f:06:12:c5:19:b5:09:18:10:c0:
96:2a:b2:42:ea:65:3e:93:c8:53:3c:9c:f7:bb:48:
27:51:07:e9:cf:df:31:f4:a8:c2:9a:0c:0a:6f:67:
1a:54:60:ad:c0:e2:45:4c:42:73:ec:42:e5:a8:be:
58:5f:62:32:90:50:6b:03:4d:6f:49:76:20:68:5c:
fe:07:76:84:10:14:5b:66:9d:7b:32:76:a5:2a:b6:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BC:58:72:A7:57:25:DB:5C:A5:72:D3:7B:0B:F0:BE:FB:7A:56:73
X509v3 Authority Key Identifier:
keyid:3D:CA:E1:31:01:19:B8:5A:C4:76:B0:0E:FF:AC:2C:A1:C3:4B:46:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/PcrhMQEZuFrEdrAO_6wsocNLRjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PcrhMQEZuFrEdrAO_6wsocNLRjE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3318/5rxYcqdXJdtcpXLTewvwvvt6VnM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.82.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a7:57:59:f6:95:7c:6d:a5:42:29:d3:43:be:cd:9a:de:63:
83:16:03:26:ce:ff:8d:14:76:99:77:7e:e5:30:cf:d3:aa:85:
86:20:2a:25:5c:c7:38:7f:e8:01:aa:e5:b0:08:63:af:28:c9:
ed:86:00:4f:db:3e:e7:61:16:7d:f5:f3:de:72:04:68:d2:42:
d9:bd:20:02:3e:fa:84:52:70:35:3c:d1:3c:64:5f:3d:93:2c:
45:24:fe:b8:2a:03:61:d2:cd:54:67:26:f2:c4:b1:7c:86:7d:
54:00:c0:8d:8b:78:c4:7d:8f:ca:e5:6d:d4:88:22:71:f6:f1:
58:96:93:04:81:39:ce:9c:bc:c8:62:79:c9:e4:48:dd:5d:be:
5b:da:0d:a1:26:4c:c1:87:92:67:3d:37:3f:33:da:db:2f:0a:
8d:b0:da:3b:04:76:b9:3a:d9:a4:c0:b9:13:26:69:e2:9a:14:
09:81:26:65:ff:a1:1a:d0:b8:61:9f:c3:65:c9:52:6d:9f:7d:
37:20:6a:4b:bd:53:55:4e:de:08:e2:8b:59:02:01:73:e1:f1:
53:90:d6:f6:12:88:b7:9e:19:81:06:4f:be:72:ff:87:2b:fc:
21:87:98:ad:dc:a2:e1:13:28:a9:27:df:2f:56:71:c7:8c:55:
2b:d6:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:35:53 2025 by rpki-client