Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/ruDAApQtnQqODzqBzOT-ZJ8jsmw.roa
File: ruDAApQtnQqODzqBzOT-ZJ8jsmw.roa (raw, json)
Hash identifier: UIGLFuI1po41QeUYI/n5Pww9tob3MLP9TUzdaUkD7O0=
Subject key identifier: AE:E0:C0:02:94:2D:9D:0A:8E:0F:3A:81:CC:E4:FE:64:9F:23:B2:6C
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 1BB5
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/ruDAApQtnQqODzqBzOT-ZJ8jsmw.roa
Signing time: Wed 13 Mar 2024 01:23:25 +0000
ROA not before: Wed 13 Mar 2024 01:23:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 59067
IP address blocks: 103.36.96.0/22 maxlen: 22
103.202.116.0/22 maxlen: 22
103.255.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7093 (0x1bb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Mar 13 01:23:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AEE0C002942D9D0A8E0F3A81CCE4FE649F23B26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:72:59:bd:a1:e8:4f:e8:5a:cf:b3:ce:66:
b0:9d:5e:fb:5b:bc:ad:d6:1f:f0:2e:ec:d4:c5:7a:
dc:3f:df:5e:51:31:d3:9c:64:90:a8:40:f7:d4:47:
da:a5:2c:c6:5e:d1:a1:1f:74:c0:18:5b:f8:e7:34:
d7:d7:e5:39:ed:e0:df:bd:aa:05:21:e6:f0:f9:d2:
fb:ff:78:68:a7:83:c3:be:8a:1c:88:7e:58:19:99:
8a:de:99:1d:81:51:24:cc:78:fd:4b:2b:23:0b:9d:
7e:2a:a6:6a:9f:8a:53:bb:5d:48:c4:1b:62:05:36:
ac:86:8c:9b:06:42:27:7e:1e:65:d2:f2:15:f4:ee:
0e:72:c4:b7:99:1a:74:6c:2b:74:98:8c:14:34:c8:
dc:24:6b:d7:f8:b8:c0:a8:1f:98:de:75:96:ce:98:
f8:07:25:fa:b8:7f:f8:00:65:fb:fe:54:3f:c7:0a:
eb:59:be:68:0c:82:22:d9:63:7d:f8:ac:04:cb:a8:
d3:47:71:1b:c3:f0:89:4c:f3:e2:14:5e:57:c5:f1:
f5:9c:c1:0f:45:dd:40:5a:d2:c3:6a:bb:a6:67:73:
4e:5f:ad:65:91:7b:8e:e9:6c:09:86:51:4a:4d:43:
5e:09:ad:d8:1f:b6:e6:ce:44:1e:55:69:06:5b:73:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E0:C0:02:94:2D:9D:0A:8E:0F:3A:81:CC:E4:FE:64:9F:23:B2:6C
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/ruDAApQtnQqODzqBzOT-ZJ8jsmw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.96.0/22
103.202.116.0/22
103.255.140.0/22
Signature Algorithm: sha256WithRSAEncryption
84:2b:c2:7a:c8:04:7d:5f:cd:ea:f1:92:c2:a6:be:17:d6:91:
29:39:4a:1c:d2:e5:81:98:9a:79:a0:72:7f:d7:ff:f4:0b:c2:
69:d7:b5:eb:49:75:09:13:76:33:e9:6d:96:b4:ee:ef:54:ae:
7d:c4:f0:8c:60:20:0c:2f:35:91:26:7b:5d:55:45:db:0c:3a:
8b:ed:42:e8:0a:d4:84:70:bc:ba:ef:7f:ed:fe:09:65:10:35:
a6:1a:cb:5f:f7:32:57:87:2c:47:a4:9a:1b:b0:f8:94:45:22:
50:90:e1:aa:e7:1a:b1:0e:c7:70:ed:44:2c:62:e7:01:4e:55:
4c:76:fb:aa:68:ea:71:5a:0b:b0:1f:80:cb:eb:fc:2f:aa:08:
01:f7:d8:71:1d:36:9c:47:81:38:42:28:5d:06:5b:e6:98:b9:
61:b3:7b:18:53:b6:8f:43:9a:8b:74:32:5e:7d:c8:32:1b:b4:
14:d0:8d:49:49:03:a5:6d:ef:4a:d8:cb:bf:50:56:ca:c0:d3:
c1:b2:5f:81:1d:cd:b8:fb:a9:ee:cf:79:85:86:f7:a5:2a:4f:
1a:5f:df:ee:8a:8f:ab:8c:54:3f:77:de:c9:57:49:cf:48:26:
a3:9f:fa:17:03:9f:98:50:7d:5d:91:af:7c:f1:f5:2b:e7:4c:
28:32:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:41 2025 by rpki-client