Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/MSeUJvFTY9o-_khDapawXnZ-LNI.roa
File: MSeUJvFTY9o-_khDapawXnZ-LNI.roa (raw, json)
Hash identifier: ZHI2+ejxdkV2JDfHiihk+oNfqwqvO6AtvULRFom7nLg=
Subject key identifier: 31:27:94:26:F1:53:63:DA:3E:FE:48:43:6A:96:B0:5E:76:7E:2C:D2
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 2027
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/MSeUJvFTY9o-_khDapawXnZ-LNI.roa
Signing time: Fri 17 Jan 2025 01:24:10 +0000
ROA not before: Fri 17 Jan 2025 01:24:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 212237
IP address blocks: 103.31.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8231 (0x2027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jan 17 01:24:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=31279426F15363DA3EFE48436A96B05E767E2CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:97:d2:2b:89:49:90:86:d9:53:33:4f:f8:
cf:86:02:84:54:77:81:23:4a:cc:91:d2:ba:35:3b:
78:f4:83:2c:f1:e3:db:91:e8:f1:3d:e9:0a:c8:96:
92:cc:48:c2:de:86:e2:3b:f5:95:e5:88:d1:20:42:
21:62:41:98:ba:03:68:7c:a0:a0:96:ec:06:67:75:
93:24:2e:0c:5d:b3:a9:a0:e6:98:c0:86:26:e2:d6:
88:8a:82:da:eb:cb:aa:e5:ce:1a:26:72:7d:d6:2a:
9b:e5:e6:90:8b:a6:07:54:dc:94:92:0b:d6:da:f3:
61:6c:8a:29:43:97:e0:cd:5f:f8:f7:47:fa:c1:75:
de:fa:d6:a5:eb:0f:55:72:d9:a7:0b:20:cc:63:bf:
51:e1:2f:ab:10:c4:56:be:32:7c:eb:57:01:d8:08:
f4:f8:e3:36:0a:32:11:5b:68:eb:63:70:14:55:a3:
c4:11:1e:79:1c:22:2e:f9:0c:ff:51:f7:58:db:01:
57:2e:65:55:b8:10:8a:2f:e7:bc:0a:6a:1f:1b:29:
a5:64:34:90:28:6e:e7:bf:b3:19:6a:4a:87:b3:91:
49:90:20:01:de:46:bc:a6:2c:84:1a:ca:34:da:db:
eb:bf:75:f5:58:9a:2e:77:54:4d:88:e9:19:c5:e2:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:27:94:26:F1:53:63:DA:3E:FE:48:43:6A:96:B0:5E:76:7E:2C:D2
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/MSeUJvFTY9o-_khDapawXnZ-LNI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:eb:fb:a8:50:c9:ca:ea:54:f1:df:49:77:e4:90:eb:b1:99:
ed:8f:9c:41:3a:94:a2:6a:49:6a:8f:db:54:78:b2:79:19:db:
2c:60:fb:c3:d7:3a:d3:d9:1e:c9:65:ff:03:a1:18:33:41:15:
74:d1:1e:83:91:7a:a3:43:6d:a3:2f:42:78:12:96:e9:b4:2c:
95:4c:e4:55:e2:16:2d:96:1d:e4:c4:57:e6:b1:04:02:15:1d:
ce:16:3e:eb:8c:b4:77:37:87:18:f2:c9:cc:c6:34:65:81:28:
f4:1b:12:29:c8:df:e5:de:14:06:e3:7d:a0:d9:e0:b6:0e:4c:
73:69:b8:2b:47:41:95:b2:5f:f6:e0:33:32:dc:d2:fc:47:4e:
53:5f:7b:8c:7b:71:b0:cc:44:b7:0b:63:4f:fe:32:69:c5:d7:
c4:fa:ec:1b:66:33:56:6c:9d:4f:39:87:fe:76:0c:96:7c:b5:
d7:c2:1e:cd:ef:19:e1:55:1d:42:6e:b8:7e:19:2b:55:2b:2c:
5d:97:6a:b3:f0:23:5b:ff:59:12:27:a3:8c:bd:e9:94:ab:24:
fd:4b:68:8c:33:d7:51:13:8a:bc:f0:22:0e:be:03:da:c5:f4:
f3:d0:db:e3:db:5f:01:b1:cc:85:8b:77:98:9a:bd:a6:d3:8d:
fe:da:c5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:44 2025 by rpki-client