Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/VDVO6ffc33De4-lugSZFoNJ2FNU.roa
File: VDVO6ffc33De4-lugSZFoNJ2FNU.roa (raw, json)
Hash identifier: AeeBjAe+Ck36/3yL0wnP4wfL1jnSObH1/4iugi7uElA=
Subject key identifier: 54:35:4E:E9:F7:DC:DF:70:DE:E3:E9:6E:81:26:45:A0:D2:76:14:D5
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 2087
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/VDVO6ffc33De4-lugSZFoNJ2FNU.roa
Signing time: Sun 02 Feb 2025 18:57:45 +0000
ROA not before: Sun 02 Feb 2025 18:57:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 834
IP address blocks: 103.31.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8327 (0x2087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Feb 2 18:57:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=54354EE9F7DCDF70DEE3E96E812645A0D27614D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:d0:ab:e5:9e:e6:b2:34:ee:10:ad:04:fe:
b9:c0:d1:9e:ea:ce:bc:52:2d:8f:01:e2:2a:9e:4b:
18:c9:b1:58:12:df:13:99:e3:02:6d:ea:a3:50:3c:
91:cb:16:38:b7:2f:9d:66:17:f9:9c:e7:6c:04:cb:
63:c3:76:4e:30:0a:c9:1c:45:a5:74:6f:d8:65:d1:
3e:8d:89:4d:62:f8:5a:0a:b3:68:0e:73:10:b3:12:
41:c2:38:00:41:07:a2:fa:38:a7:4e:23:2a:4f:e8:
c6:d7:8a:c2:22:39:04:6d:05:ca:9c:2f:62:cd:a3:
74:72:54:fb:26:40:61:7a:2e:60:d7:cc:94:12:bb:
34:bb:ca:d4:dd:35:4c:7f:38:67:d9:cf:5c:b8:02:
db:59:e9:72:a1:71:67:dd:bc:35:44:d1:50:db:24:
8c:b7:ce:e0:42:77:59:4f:f5:42:fb:7e:fc:01:46:
42:4b:90:58:eb:a8:6d:37:44:2c:57:47:ac:7f:a9:
cb:75:a8:74:e4:5c:56:8f:9a:43:03:5f:93:c9:7f:
7b:f8:84:36:d4:35:85:b5:89:47:7a:e4:8d:f5:2d:
9d:31:fd:ab:4d:90:f0:d7:5d:f7:39:f6:c3:97:9e:
66:70:ce:b3:7c:19:e8:07:a0:66:6f:37:52:0c:a0:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:35:4E:E9:F7:DC:DF:70:DE:E3:E9:6E:81:26:45:A0:D2:76:14:D5
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/VDVO6ffc33De4-lugSZFoNJ2FNU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.239.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f6:c0:0d:72:41:f5:8a:f1:79:28:a1:c4:6b:c4:15:ba:65:
f0:6f:dc:1c:ff:89:15:72:78:a8:3a:cb:d8:fc:cb:61:50:75:
4c:b3:c0:20:15:37:94:46:fa:2d:d0:b5:99:fc:1f:66:f2:ea:
02:76:08:aa:df:fa:35:36:ee:56:02:8a:0f:fc:0b:e7:36:5c:
84:1b:47:c2:8a:f4:61:08:97:52:d7:48:f5:22:58:20:d5:16:
ab:99:e8:25:82:90:a6:1d:21:50:e3:90:c1:86:c4:4f:11:57:
d1:28:75:38:32:7e:b2:a6:10:31:13:ec:56:21:d9:c0:25:34:
d9:1e:97:7e:83:70:81:79:32:3f:3e:57:57:99:0b:85:0a:8a:
e9:55:42:61:94:d1:22:d7:ab:2a:8a:13:6f:92:8e:84:7e:d7:
93:73:a9:62:07:8f:fe:54:e8:0b:b3:e6:93:9d:eb:06:15:c7:
13:bf:71:1c:61:3f:cc:e3:62:2b:f6:9b:5b:04:37:f8:78:ba:
c8:81:cf:35:88:e9:87:e2:cf:9f:79:2a:7f:c3:d3:ac:00:04:
52:e5:14:36:a4:9f:95:6f:c6:02:13:b8:3f:cb:3e:d5:2e:fa:
ba:db:7e:dc:22:3a:8b:88:43:7a:10:49:93:a6:19:a9:02:af:
6b:ed:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:37 2025 by rpki-client