Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/62dLcW3plavrpsIbNHqw720lfPk.roa
File: 62dLcW3plavrpsIbNHqw720lfPk.roa (raw, json)
Hash identifier: gCTxCmZ8gdoRjQKUaCHDH/9k8CDn24niIaIerASZoKo=
Subject key identifier: EB:67:4B:71:6D:E9:95:AB:EB:A6:C2:1B:34:7A:B0:EF:6D:25:7C:F9
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 4D20
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/62dLcW3plavrpsIbNHqw720lfPk.roa
Signing time: Fri 17 Jan 2025 01:26:31 +0000
ROA not before: Fri 17 Jan 2025 01:26:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 131530
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19744 (0x4d20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: Jan 17 01:26:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EB674B716DE995ABEBA6C21B347AB0EF6D257CF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:e2:a1:cd:5b:3e:47:b7:55:fc:99:25:52:
43:62:12:c7:a9:42:92:62:54:6a:2f:16:19:86:7b:
7f:6d:68:66:d6:d6:e4:83:57:aa:fb:6a:d6:bd:3e:
a2:0e:4a:20:f3:58:01:ff:79:de:48:59:8e:88:18:
bd:6e:d5:a6:98:8f:87:6e:ad:41:50:10:45:5f:3c:
11:63:c6:01:6f:d0:fe:72:fa:f9:02:fd:b6:2c:d6:
82:c0:ec:d6:fe:8b:d0:65:3a:18:59:f6:bc:70:4a:
f7:8b:25:98:8b:c8:87:1a:a1:cc:30:a0:68:31:75:
d2:50:d2:af:0f:1a:25:93:22:9f:71:f0:5c:2d:96:
5b:27:e6:0a:fc:87:4a:08:38:89:0f:22:39:92:25:
84:58:fd:a7:7c:0b:63:19:3e:aa:d8:d1:7e:03:36:
f1:1c:7e:c1:10:ec:60:a7:5c:65:65:e8:59:69:32:
67:b0:66:c4:83:b0:00:4a:b3:e9:6b:59:2b:c7:46:
48:56:c6:a7:1b:24:12:b1:f2:5d:7b:7d:77:7f:0a:
dd:b7:d5:c6:e6:ea:e3:4a:b1:5d:d7:4e:dc:e0:d2:
fc:ad:93:e9:50:f9:50:fc:8d:ac:4e:3a:81:21:c8:
4a:91:a9:e9:17:c5:e8:34:93:47:cb:a7:51:ba:b0:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:67:4B:71:6D:E9:95:AB:EB:A6:C2:1B:34:7A:B0:EF:6D:25:7C:F9
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/62dLcW3plavrpsIbNHqw720lfPk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:93:aa:1f:e5:68:92:7d:c7:6a:d6:fd:f7:f5:1e:78:20:e7:
10:9e:fe:43:4c:a4:c8:0f:a2:f8:28:8a:a3:50:e3:28:1c:98:
3f:24:34:cb:6f:a6:a0:0a:59:23:d1:f4:37:e1:e2:50:ce:29:
c2:af:9b:18:4d:70:0a:75:a8:ba:f8:48:3d:51:9e:10:e5:44:
fc:12:b7:33:93:15:ca:e9:5f:95:c2:a5:5c:a1:1f:01:1f:3a:
cb:f2:c6:4e:6e:0a:9c:36:ca:b7:50:1e:81:b1:49:c6:3b:09:
9e:cf:eb:42:c9:7d:af:28:31:65:e4:96:55:04:f1:8d:a2:63:
9f:dc:89:56:04:b3:65:f6:d3:c7:89:f4:43:48:fc:3c:cc:e2:
d0:1f:db:d7:c3:e3:c0:9a:8d:da:c5:d6:89:2d:c1:a7:1c:43:
5b:eb:57:eb:47:e6:9d:a2:33:d8:b0:75:e8:53:15:91:bb:c9:
94:20:6a:1f:2e:ba:63:4d:a2:4e:7d:d3:8f:68:20:f9:80:12:
1b:1d:fe:fe:82:1a:d5:4e:3c:f2:35:19:24:15:dd:07:87:d7:
38:5d:fa:c7:3d:7d:5c:9e:27:48:3a:c1:c1:9f:4d:65:d1:f2:
83:a1:be:69:21:5e:fb:79:52:95:07:e1:d9:7b:2e:33:23:54:
31:f5:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:33 2025 by rpki-client