Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/Jmefjwi9I3kxPqKCVhe0VQos-RA.roa
File: Jmefjwi9I3kxPqKCVhe0VQos-RA.roa (raw, json)
Hash identifier: TtxsxPDOL+17PW69cdfEmxnkR1SMUDrwE/BGCCxb440=
Subject key identifier: 26:67:9F:8F:08:BD:23:79:31:3E:A2:82:56:17:B4:55:0A:2C:F9:10
Certificate issuer: /CN=F76C9E43361DEA446077AD7029057380AFFF3266
Certificate serial: 19D4
Authority key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Jmefjwi9I3kxPqKCVhe0VQos-RA.roa
Signing time: Wed 13 Mar 2024 01:23:44 +0000
ROA not before: Wed 13 Mar 2024 01:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24424
IP address blocks: 103.203.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6612 (0x19d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F76C9E43361DEA446077AD7029057380AFFF3266
Validity
Not Before: Mar 13 01:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=26679F8F08BD2379313EA2825617B4550A2CF910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:4e:5e:25:79:19:87:84:ce:ad:fa:a7:9d:
9a:ea:61:a8:e2:f8:0f:3b:6f:49:e1:7d:83:a4:7f:
be:be:50:1b:56:ae:3d:52:12:25:bd:bf:a5:db:85:
01:ca:4e:cf:84:b3:78:ef:3e:b5:25:c8:47:df:f0:
3c:d4:b7:da:7e:78:6b:06:55:71:b5:05:bc:00:9f:
0f:4b:12:c8:e1:d8:39:4c:27:54:f7:4d:34:12:04:
98:ff:fe:03:11:db:7e:c0:ae:ac:38:d4:0c:ed:56:
bf:ed:34:04:05:bc:ed:84:a5:b9:e6:87:d6:e4:73:
20:b0:18:0e:f8:e0:79:32:60:9c:da:61:9c:91:ba:
16:1b:a0:19:16:d8:c7:5b:5e:d5:c4:db:7c:46:d3:
91:40:06:56:4b:3d:bf:9c:fd:1a:4a:59:84:cc:51:
b0:4e:15:86:84:e2:4a:1f:5d:a7:4f:c4:81:35:77:
6c:fb:2f:f6:9a:23:78:c3:fc:32:db:bf:85:c4:50:
85:0d:25:cb:f7:5c:0c:9b:fd:b6:17:0f:6d:e9:fc:
ed:11:97:74:2a:09:2b:40:ff:0d:9f:6f:3b:9b:22:
03:db:a8:a8:26:e1:e1:45:20:d0:19:ef:51:99:01:
43:a6:cf:08:95:97:dd:7d:6f:0d:4c:da:18:8e:df:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:67:9F:8F:08:BD:23:79:31:3E:A2:82:56:17:B4:55:0A:2C:F9:10
X509v3 Authority Key Identifier:
keyid:F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Jmefjwi9I3kxPqKCVhe0VQos-RA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.212.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b8:58:c4:ce:ad:10:b3:e0:43:cf:ee:aa:ff:24:5d:10:bf:
38:71:21:fd:4c:87:57:c4:fd:72:05:09:d9:57:2a:fa:43:f4:
00:84:9d:df:5d:a8:f0:74:ec:26:a2:15:21:d7:b2:f7:8b:f0:
31:0a:75:db:95:94:3c:14:4c:95:02:98:0f:e8:23:06:8a:33:
18:e2:d9:b3:1e:7a:98:48:e2:97:90:e2:2d:0b:c1:5a:9a:7e:
b6:0f:b4:b7:c4:1b:25:06:02:46:3a:8f:de:32:5b:e0:a3:fe:
a1:a2:b8:8e:b1:12:15:16:5c:f6:a1:e9:08:82:8a:5c:27:d4:
f4:88:22:f4:78:9e:7f:1c:3a:ea:94:ce:f8:9d:5e:a3:89:61:
01:af:6f:67:b0:5d:06:5e:82:2e:97:3f:cc:7b:bd:13:ba:b1:
3d:61:9a:ee:d7:6a:44:bd:3a:f1:23:64:c4:85:f4:6c:ef:e8:
99:d4:9e:3f:85:f4:74:f3:ab:ba:ea:dd:0e:c2:40:c0:d5:47:
bd:f4:bd:08:ec:cf:f0:2d:7f:a7:80:06:ca:80:cb:a2:72:c7:
1d:d4:5a:50:a5:78:b7:36:4d:ab:95:e8:dc:a1:86:01:b8:38:
ec:ff:27:67:21:31:89:11:90:d1:16:b3:53:d6:e7:28:ad:d1:
1c:6c:f4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:12 2025 by rpki-client