Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/pP2_1K83CFKUzt6daLPVOoczMIc.roa
File: pP2_1K83CFKUzt6daLPVOoczMIc.roa (raw, json)
Hash identifier: o8ECgfUnAoe75inwKKyZpV+tByZPHixKdIbmmMa+2sY=
Subject key identifier: A4:FD:BF:D4:AF:37:08:52:94:CE:DE:9D:68:B3:D5:3A:87:33:30:87
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18D2
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/pP2_1K83CFKUzt6daLPVOoczMIc.roa
Signing time: Fri 17 Jan 2025 01:25:37 +0000
ROA not before: Fri 17 Jan 2025 01:25:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6354 (0x18d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A4FDBFD4AF37085294CEDE9D68B3D53A87333087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:6f:7e:94:56:23:5f:4c:88:78:49:2e:32:
e2:81:40:20:e5:9e:9d:a8:bf:2d:7e:96:8d:eb:d3:
79:12:6c:e6:5e:c0:5e:d4:46:72:90:58:98:40:08:
fc:be:32:69:93:5e:d5:24:c9:d1:9f:6e:90:d8:b7:
b3:7f:53:f2:81:dd:03:c8:d7:ab:39:54:fc:7d:2e:
15:6c:04:4e:57:34:78:39:45:0d:85:ba:e0:20:05:
1c:18:ff:d3:2e:45:e7:be:33:95:8d:8d:e4:75:04:
37:ce:08:08:82:84:66:78:c8:e3:c0:c3:05:49:f2:
b8:f4:99:ca:10:5f:f6:c5:18:fa:29:05:33:9a:e7:
f2:7f:49:25:54:cd:9f:1b:5a:67:ba:d2:9d:62:67:
6d:63:d5:0e:7d:f2:fc:9d:d7:04:8c:2e:86:bf:f5:
a5:82:91:40:28:a2:b8:34:c7:7a:9b:07:3c:5c:40:
0a:7b:4c:18:02:75:94:11:69:7a:2c:67:b5:48:3a:
da:58:b9:c3:d3:ab:3d:8a:29:c1:cc:62:92:0c:fa:
fd:cb:a7:87:05:49:97:4c:2a:f6:b6:84:74:09:e4:
28:ff:6e:f0:33:af:89:9d:e3:07:3e:ed:9d:f4:65:
2e:6f:e1:ad:45:82:df:ce:e5:67:f6:74:b0:b0:0f:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:BF:D4:AF:37:08:52:94:CE:DE:9D:68:B3:D5:3A:87:33:30:87
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/pP2_1K83CFKUzt6daLPVOoczMIc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8d:b7:8f:2b:3b:cf:3b:51:c6:53:0d:0f:3e:47:dd:23:95:
3e:21:12:2a:cd:60:03:ff:5a:51:dc:a9:ac:88:bd:52:5a:f0:
a7:35:7b:8d:f8:30:c5:22:b2:be:4f:51:7c:84:10:d1:db:29:
d8:f1:b3:e4:fa:d6:18:88:f6:8e:d3:8f:9b:d7:e3:9c:6b:10:
8b:32:e2:4e:48:fe:3e:43:44:5f:48:59:94:95:72:78:30:6e:
04:d0:5e:fd:48:68:b5:31:0a:f2:ba:5b:45:20:89:cb:b0:ea:
92:42:42:d8:9f:40:de:02:84:94:7b:77:1c:c4:40:5d:9f:3a:
d9:a8:9b:44:52:06:e3:31:f0:f2:db:6b:3e:c1:30:13:3f:9a:
0c:6b:58:94:db:fe:9f:d4:94:72:41:5b:53:d5:df:b5:c2:0c:
f7:e9:c3:85:54:0a:4f:85:3d:ad:09:e3:62:4c:69:51:73:fa:
51:47:a9:93:ba:21:f5:fb:a5:be:df:76:13:fd:e7:1e:94:87:
79:50:7b:d8:79:e7:bc:fd:5c:b7:ed:fa:fc:3b:23:3e:82:3f:
1a:66:9d:80:38:83:d4:8e:e6:83:09:aa:78:2b:3d:c9:b0:c2:
d3:f9:dc:e7:0d:2d:94:cd:0e:a4:02:81:5d:9e:bb:84:1c:b3:
b8:38:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:50:50 2025 by rpki-client