Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/5xiBP9oAgtPkPbuqp_jQN04CKOk.roa
File: 5xiBP9oAgtPkPbuqp_jQN04CKOk.roa (raw, json)
Hash identifier: tceHGoGymQUtpl0azpN7OzZGjav6xnOi9XVl7tk4RAQ=
Subject key identifier: E7:18:81:3F:DA:00:82:D3:E4:3D:BB:AA:A7:F8:D0:37:4E:02:28:E9
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 4D1E
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/5xiBP9oAgtPkPbuqp_jQN04CKOk.roa
Signing time: Fri 17 Jan 2025 01:26:31 +0000
ROA not before: Fri 17 Jan 2025 01:26:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 5068
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19742 (0x4d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: Jan 17 01:26:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E718813FDA0082D3E43DBBAAA7F8D0374E0228E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ed:ac:33:3d:05:dd:bd:46:7a:80:c4:c6:41:
11:cb:be:93:59:2d:3f:19:af:7e:0e:6c:56:14:51:
64:8a:4f:33:57:82:3d:db:93:6d:ed:a9:b3:a1:c8:
ec:ad:d7:55:ba:82:12:e4:df:55:3b:a3:f1:0c:33:
e8:b7:64:44:06:a0:94:09:44:ae:5c:4a:2d:60:0d:
35:a5:06:c5:c4:89:ec:4c:79:47:46:f0:a7:b2:8f:
93:3b:58:0f:8b:15:bd:5a:cc:c7:ab:c1:3c:3f:73:
d9:26:46:91:3b:e2:08:82:ff:8f:9d:57:ee:6d:9b:
6e:69:ce:94:1e:7d:6c:ba:70:13:d9:e3:c9:e2:d9:
93:e6:1e:2c:4e:90:18:d8:58:ff:a1:15:a3:a9:45:
12:8a:29:44:8f:8a:19:51:cf:92:2a:c3:07:5d:a8:
6e:57:4f:85:f4:3f:8e:aa:93:a5:02:2e:7c:d8:cc:
5a:9e:68:3b:49:47:1d:49:1d:69:ba:2c:cf:ae:20:
93:c3:66:d4:e0:23:58:27:c9:e7:d3:d2:9d:f2:fd:
ec:99:84:aa:c7:fe:f9:29:bf:89:d9:7f:4d:0a:0b:
37:c2:4f:68:1c:63:ca:bc:0a:59:d4:1c:84:57:15:
cc:18:6f:8a:f5:71:56:0d:1b:0f:70:3d:10:53:e8:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:18:81:3F:DA:00:82:D3:E4:3D:BB:AA:A7:F8:D0:37:4E:02:28:E9
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/5xiBP9oAgtPkPbuqp_jQN04CKOk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:ce:49:a2:5e:b3:31:0f:5e:85:92:15:1d:35:2f:2d:99:95:
b5:30:11:38:b0:7b:ba:72:49:06:99:55:41:97:68:0d:a4:63:
8f:c0:a4:8b:ed:4b:95:2b:45:ed:5a:ff:eb:b7:c0:16:6e:63:
4c:f6:8a:70:02:bd:28:95:4e:8a:7d:3e:fc:22:65:4f:0a:b5:
10:09:83:6b:17:db:e6:3c:46:40:6c:54:02:93:6e:80:49:ba:
cf:b8:6f:36:fe:24:f0:84:9a:18:6f:3f:52:ac:77:f1:75:da:
43:cf:70:b9:96:96:ac:d1:81:76:61:cd:0f:a1:4c:fc:f9:51:
f6:95:ab:72:3f:7b:6e:ae:24:d2:17:a7:49:5c:71:c2:0d:38:
ac:6f:fe:0e:a5:af:a7:da:d1:4b:5f:6c:3b:f9:16:a1:5c:24:
54:f0:80:1a:a9:d1:88:13:d8:fc:0e:67:80:42:8d:de:0a:db:
8e:c9:4b:d2:12:c3:36:3e:4f:5b:da:d4:a0:9e:ec:6a:cf:dd:
84:0c:b5:64:07:5b:81:e3:a9:e0:23:7d:4c:01:08:21:46:e4:
18:13:38:a2:3f:47:11:e9:22:f6:42:b7:62:c3:16:ee:d6:d8:
4c:89:88:a6:87:e9:79:c2:ee:25:c6:6c:03:5c:ba:82:98:5d:
42:39:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:46 2025 by rpki-client