Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/jCHcBwiMsMGruoboPN9JaUb2F-Y.roa
File: jCHcBwiMsMGruoboPN9JaUb2F-Y.roa (raw, json)
Hash identifier: XfghknMM+d103KxLh/UyfORTGdhGoDklFKUqYNOYLXQ=
Subject key identifier: 8C:21:DC:07:08:8C:B0:C1:AB:BA:86:E8:3C:DF:49:69:46:F6:17:E6
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 17FD
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jCHcBwiMsMGruoboPN9JaUb2F-Y.roa
Signing time: Fri 17 Jan 2025 01:24:24 +0000
ROA not before: Fri 17 Jan 2025 01:24:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6141 (0x17fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8C21DC07088CB0C1ABBA86E83CDF496946F617E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:82:02:22:1c:83:45:6d:b3:db:c6:b4:4a:
b6:d7:a3:2c:73:85:15:a8:ae:8a:ed:7f:a1:9c:a7:
6a:a1:c2:91:c2:35:ed:12:6f:18:24:c7:8b:48:1d:
0f:13:d1:22:ad:4d:c5:f8:3a:bb:0e:db:d9:c2:a3:
e4:ac:ac:ff:d8:5a:6d:68:a7:b6:0f:ca:66:2b:11:
4a:52:08:96:a0:fc:cc:b1:00:fc:65:4b:27:a9:7f:
3f:ed:36:08:44:6d:d9:0f:67:7a:75:d1:5a:f9:53:
89:5e:8c:de:c6:82:c9:71:3b:ca:95:15:ea:e2:2d:
ca:66:19:72:e0:85:89:7c:f1:80:56:f8:ec:b3:9d:
48:c1:d9:89:35:c3:3b:3a:45:5b:fc:e5:46:42:0a:
35:13:96:27:b9:be:4a:1c:51:73:56:35:73:91:d0:
12:70:4f:76:8e:ab:34:55:65:10:27:88:30:5e:ab:
04:fd:13:f0:a1:a0:ed:ae:95:3c:5f:49:8d:ea:fe:
ce:02:87:ac:da:db:32:43:60:bd:d9:77:e2:5c:e3:
5b:cb:69:97:31:d3:82:ca:0f:cf:be:54:d2:c9:9b:
50:32:d5:76:b4:7a:f5:21:93:21:20:e3:85:8b:cf:
b1:08:1f:68:ab:6e:85:4f:dc:05:b8:4e:22:18:d2:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:DC:07:08:8C:B0:C1:AB:BA:86:E8:3C:DF:49:69:46:F6:17:E6
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jCHcBwiMsMGruoboPN9JaUb2F-Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
08:fc:b3:68:25:66:7b:db:00:b1:29:db:f0:4d:f1:f1:da:54:
0e:48:cf:02:81:a8:ec:19:ab:41:d2:65:72:40:77:1e:e4:cb:
2d:73:6c:bf:c9:88:63:f6:fc:bd:30:a5:94:da:5c:15:9c:ff:
ae:80:7c:8d:c4:03:ae:4b:1d:26:55:ac:57:d0:b6:96:1a:d7:
84:78:9f:a0:c9:0f:01:13:78:2e:67:9b:ef:52:59:95:a2:7c:
f3:8c:13:cc:c1:b1:a9:45:ed:8e:93:01:39:91:65:1b:d3:20:
e0:24:3f:9a:ed:93:0a:db:bd:e5:64:7b:e1:97:76:5a:57:4b:
ad:a4:27:5d:73:a3:de:d2:fa:dc:ca:e1:2d:83:99:a9:8b:e8:
15:92:2e:6b:ae:ae:06:b9:e1:df:e5:39:64:c6:c8:bb:b4:4d:
c9:d5:a6:ef:fd:81:98:5d:80:56:cc:d0:c9:d4:6c:d6:fa:9b:
2a:eb:cc:ab:90:82:a1:ec:4f:19:70:a8:b1:aa:e7:75:cf:9d:
d9:21:4a:21:bf:d6:8c:a7:76:3c:7b:69:6e:88:03:e4:e0:c1:
55:8c:44:62:81:b4:c0:62:f2:69:c4:dd:f0:c4:d1:6d:bf:88:
36:49:32:34:bf:f8:e4:c0:77:8a:0f:78:66:0d:e9:5a:9d:93:
cc:b6:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:53:20 2025 by rpki-client