Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/bI7qJDaBx__3-IW_pp53GfEC6M0.roa
File: bI7qJDaBx__3-IW_pp53GfEC6M0.roa (raw, json)
Hash identifier: CSGTZ1FRGgeCLzTYboZeZjjfVJFP3kcNz3zU9OGRJYM=
Subject key identifier: 6C:8E:EA:24:36:81:C7:FF:F7:F8:85:BF:A6:9E:77:19:F1:02:E8:CD
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 1D90
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/bI7qJDaBx__3-IW_pp53GfEC6M0.roa
Signing time: Thu 12 Sep 2024 11:20:05 +0000
ROA not before: Thu 12 Sep 2024 11:20:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 212237
IP address blocks: 103.31.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7568 (0x1d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Sep 12 11:20:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6C8EEA243681C7FFF7F885BFA69E7719F102E8CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:0f:21:60:82:31:af:e3:e8:b3:00:ee:9b:
0d:93:82:22:f8:f0:e5:86:55:9b:fa:5f:d7:65:7a:
8c:d0:be:e6:84:f4:98:2f:58:ea:63:11:58:73:16:
cb:75:21:09:bb:c0:fe:b7:8c:93:a4:52:ed:af:a0:
a9:5a:74:64:f7:e7:20:00:12:02:ac:4a:0d:7a:dd:
77:ea:09:33:d4:e8:67:38:31:b2:24:35:1e:39:74:
db:77:3c:09:34:53:d1:98:24:39:4d:d5:b0:94:a1:
45:4e:36:78:bc:d6:25:26:d6:a4:4a:fe:8d:96:d3:
66:f6:00:21:cd:48:5c:bc:d4:b3:a0:67:50:fc:6a:
8c:ae:16:42:ee:6e:6e:b6:cf:79:69:2f:b9:61:8b:
4f:a3:22:24:26:57:70:e8:cb:41:bd:88:1a:a1:cd:
80:0d:30:3e:f5:a9:01:15:50:53:d4:04:6b:d2:85:
cf:3f:99:41:09:ee:63:3f:a1:a0:5e:c2:93:11:93:
48:c9:36:f8:04:98:6e:9b:3d:36:b8:be:dd:32:d6:
41:8a:e5:25:58:a2:7f:50:bc:6f:f9:1b:c8:db:11:
74:8c:f7:c6:ca:ce:9d:55:4b:0b:5b:a7:e1:85:9d:
2a:00:08:c7:84:dd:38:b1:8d:5a:f3:37:c7:20:d9:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8E:EA:24:36:81:C7:FF:F7:F8:85:BF:A6:9E:77:19:F1:02:E8:CD
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/bI7qJDaBx__3-IW_pp53GfEC6M0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.237.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d6:cb:51:64:64:c2:a1:f7:0b:7f:f5:60:55:42:96:59:b0:
fb:cc:e5:ea:04:75:22:57:a6:25:c8:cf:e9:61:b8:52:1d:a1:
2e:d0:4c:a6:be:6e:01:c8:cc:53:27:83:a0:38:ef:10:17:df:
2b:80:57:3c:5b:fc:d0:c8:b9:5d:f3:3f:ef:be:c6:a0:9d:1e:
1f:be:76:5a:ab:f1:4e:69:ef:03:9b:58:dd:02:9b:3b:40:aa:
89:eb:19:59:bc:9c:38:41:84:a3:be:b3:84:29:97:59:11:3f:
c2:37:84:49:70:35:47:d1:76:4a:3b:01:35:66:dc:ea:52:9e:
c7:73:81:6e:e6:0a:09:d4:3f:29:27:db:d5:9c:39:8d:2a:74:
cb:03:a8:0e:03:be:f0:c0:35:18:95:58:96:5a:c2:a1:ae:2a:
30:52:d3:58:16:ed:cb:06:92:d2:96:4b:42:70:88:aa:c7:2b:
13:60:a3:5e:cb:dc:5a:1a:51:04:7b:15:ee:91:75:1f:84:0f:
e3:b0:c8:b6:a3:a6:a0:f3:a5:38:b9:b8:91:12:ee:4e:2d:8f:
7b:78:16:8e:32:c8:b7:63:85:0b:7a:24:d5:70:d9:7e:b3:e6:
d3:e5:44:ec:73:36:6e:69:0f:ca:8c:02:92:c3:38:0a:48:79:
17:9c:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:36 2025 by rpki-client