Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/0VbvmI5KKX2GATRgqxHabBCN954.roa
File: 0VbvmI5KKX2GATRgqxHabBCN954.roa (raw, json)
Hash identifier: cmpkZvU77v26o8dnFCRM2D9WAkScFYq312Ual1tdjtg=
Subject key identifier: D1:56:EF:98:8E:4A:29:7D:86:01:34:60:AB:11:DA:6C:10:8D:F7:9E
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 21AD
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/0VbvmI5KKX2GATRgqxHabBCN954.roa
Signing time: Fri 17 Jan 2025 01:28:33 +0000
ROA not before: Fri 17 Jan 2025 01:28:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59067
IP address blocks: 103.255.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8621 (0x21ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Jan 17 01:28:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D156EF988E4A297D86013460AB11DA6C108DF79E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:52:74:96:5a:4a:61:7a:4e:05:4a:89:d1:
24:5b:d2:30:f5:13:74:d0:a5:b0:06:7b:8a:8b:3c:
1b:32:af:79:08:9b:92:91:57:e9:28:18:14:94:e6:
5c:dc:14:89:c6:4b:aa:ca:03:93:f2:1b:09:b7:ca:
86:82:3a:6b:8b:f8:52:5f:4a:1f:17:9b:90:3e:7a:
06:fa:8c:9e:23:a1:dd:ed:2e:10:c7:79:7e:08:59:
1c:f9:75:d6:96:0f:7f:a3:10:9a:53:b0:93:85:18:
6a:ae:05:6d:de:0d:b5:b2:d4:0e:a0:dc:f9:39:ea:
ac:fe:88:99:a3:b2:e6:52:53:c9:cb:f1:26:f7:fb:
aa:b9:45:27:65:2c:3d:a6:56:9e:ec:1d:77:58:28:
5a:79:b0:7a:5d:d9:99:32:e8:fc:94:49:b6:da:26:
24:77:59:c7:bb:57:ee:a6:7f:ce:08:6a:4f:e0:72:
8a:11:69:cb:4b:d2:53:15:13:13:8a:bd:7c:ce:b4:
ca:e5:57:c5:60:2b:ee:3c:7a:a3:55:c0:bd:a0:7c:
27:5e:b2:d1:b4:ff:e0:1f:0c:a1:b8:35:91:8e:01:
d2:cd:d6:d3:fe:97:5d:72:da:2d:4f:21:5a:89:2d:
f2:51:7c:6a:6e:79:da:96:da:1e:ee:93:46:dc:a4:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:56:EF:98:8E:4A:29:7D:86:01:34:60:AB:11:DA:6C:10:8D:F7:9E
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/0VbvmI5KKX2GATRgqxHabBCN954.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:e3:9e:68:06:a0:70:57:27:fa:55:04:37:91:35:84:94:b3:
9f:9e:1d:09:58:3b:cd:bc:58:fc:88:9f:45:e3:8e:00:87:a7:
59:e8:8d:83:0d:2b:65:d1:e6:1c:83:10:cb:8d:09:d2:8d:5e:
eb:c4:c3:eb:04:1d:6f:7e:22:eb:1c:6b:0d:ba:54:40:58:65:
7e:70:5c:a6:ce:71:e4:03:e7:2a:52:02:d9:e8:41:f5:d1:9e:
bb:85:ec:06:b8:82:10:88:fc:ab:b4:05:68:6e:27:39:c1:84:
95:b9:16:c8:df:ae:d7:e4:37:6b:67:79:f0:8c:60:6d:66:3a:
28:f9:1a:93:26:47:7c:03:19:c0:12:f1:38:c6:a5:1c:1d:0e:
44:be:6f:d3:fd:65:48:6e:b2:61:60:96:3d:ce:9e:0e:45:97:
c8:00:be:fb:fb:ca:d4:00:73:4c:9b:5d:a8:41:05:04:15:e5:
80:cc:5c:b5:a0:69:b8:f0:1d:90:57:71:fd:80:58:03:82:47:
58:5d:92:ea:a8:b3:93:b2:39:7a:23:ab:71:2e:09:29:ba:09:
be:0e:5f:47:06:36:5c:a7:4c:6d:6a:96:3c:29:63:ff:c9:32:
f6:f1:73:8d:da:df:b2:5b:aa:4a:db:70:b8:83:3c:fc:c1:0e:
46:45:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:04 2025 by rpki-client