Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/6tzQ7nCeNJ19naIwALqmtn5G0Kg.roa
File: 6tzQ7nCeNJ19naIwALqmtn5G0Kg.roa (raw, json)
Hash identifier: cJYLiw9PltpvUw8IOXoAyMGHl5zud1sahOEUIk43cvA=
Subject key identifier: EA:DC:D0:EE:70:9E:34:9D:7D:9D:A2:30:00:BA:A6:B6:7E:46:D0:A8
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 1D89
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/6tzQ7nCeNJ19naIwALqmtn5G0Kg.roa
Signing time: Thu 12 Sep 2024 11:20:02 +0000
ROA not before: Thu 12 Sep 2024 11:20:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 212237
IP address blocks: 103.31.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7561 (0x1d89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Sep 12 11:20:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EADCD0EE709E349D7D9DA23000BAA6B67E46D0A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:bc:b0:c5:f1:82:af:20:05:46:92:be:e0:
af:e6:80:fb:c8:82:3d:6f:34:2b:7f:23:bc:4f:d1:
9a:8d:06:6f:1c:78:38:94:df:95:fa:b7:23:9a:83:
2c:b6:c2:57:fe:15:56:48:28:d2:f5:aa:9e:18:79:
74:08:f4:e0:c4:71:f6:e5:b7:b1:bf:7a:d6:28:e2:
66:f9:3f:aa:8e:f6:37:c2:2b:76:4f:90:49:d1:06:
18:3f:fe:20:0b:5b:04:d3:09:fe:8a:97:a2:37:ac:
d0:f4:45:d5:42:ee:e4:1e:38:07:a6:82:b9:25:91:
05:48:7a:bf:fa:a6:e3:cd:f1:e6:51:c7:59:8f:ac:
12:7d:f0:ed:71:74:a9:ce:9a:2e:8c:07:43:21:cc:
4d:90:5e:1e:8b:d6:37:ca:1a:92:5c:f4:4a:f3:40:
c4:a6:d3:fa:73:9e:bf:5d:a4:b1:f2:54:b5:69:a7:
6a:9b:c6:fa:93:ca:30:ed:d2:dd:9f:5a:60:09:19:
1d:e7:e1:6d:1e:66:1f:2c:90:e3:f5:c0:06:35:95:
7b:13:c6:36:71:0f:e3:b5:cb:9c:46:0f:ea:0b:6d:
cc:7b:fb:35:55:a2:1d:b1:f0:62:d2:34:43:be:c8:
37:d1:d5:99:22:10:c9:47:fc:14:c9:04:ee:99:f2:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:D0:EE:70:9E:34:9D:7D:9D:A2:30:00:BA:A6:B6:7E:46:D0:A8
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/6tzQ7nCeNJ19naIwALqmtn5G0Kg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.236.0/22
Signature Algorithm: sha256WithRSAEncryption
28:74:73:4b:74:d9:05:55:3c:6a:a2:5c:26:51:be:65:f6:1d:
e7:55:2a:60:fb:3a:90:17:a9:6f:c2:1e:56:1c:f6:8b:a8:86:
e8:c5:e9:9a:d9:dc:ea:08:75:ab:b3:d7:e0:be:55:36:05:2b:
0d:51:c4:d3:7d:e9:75:99:c3:d7:7b:7d:1e:ca:90:a1:8d:c2:
03:a9:3c:ef:f3:1a:4a:ea:01:e8:d8:6e:93:25:4f:2f:8a:3b:
1c:5b:6a:51:91:48:49:fe:58:2e:40:d1:bc:16:12:53:ff:86:
5c:44:b1:b5:a6:9a:d2:8f:af:eb:cd:28:a1:4b:48:89:a0:73:
8d:02:43:b0:9c:05:70:22:90:f9:f0:a5:0b:fa:28:0a:76:52:
ff:b4:51:e0:74:ff:1e:f4:b1:73:eb:8c:37:aa:a5:10:83:a0:
a7:4f:da:58:80:12:9f:7c:22:51:8a:a2:81:84:39:41:cd:41:
d3:61:8c:c3:16:af:d6:59:b8:8b:27:93:7e:96:95:1f:77:2a:
66:b0:32:aa:d7:60:7f:82:a6:a7:c9:f4:18:77:03:ae:27:4e:
47:1b:1c:26:ee:64:d6:e4:df:88:f8:18:f4:2c:5c:8c:fc:c2:
63:62:6d:37:3e:d9:44:bd:34:ae:f6:c7:07:5b:56:61:b7:7e:
4d:9a:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:33 2025 by rpki-client