Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa
File: D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa (raw, json)
Hash identifier: ElwPAAB/RBdxmPJCt34rJ3jgiG/FnJnHOmYYjmFgxQk=
Subject key identifier: 0F:4C:D8:9B:11:19:D1:21:D9:6F:58:26:9D:61:77:A2:35:13:35:4B
Certificate issuer: /CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Certificate serial: 01F0
Authority key identifier: 7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa
Signing time: Sun 31 Mar 2024 08:57:41 +0000
ROA not before: Sun 31 Mar 2024 08:57:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 137443
IP address blocks: 103.97.56.0/24 maxlen: 24
103.97.57.0/24 maxlen: 24
103.97.58.0/24 maxlen: 24
103.97.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Validity
Not Before: Mar 31 08:57:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0F4CD89B1119D121D96F58269D6177A23513354B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:36:8e:db:7c:5f:ae:70:ae:cf:c4:5c:ab:
dc:6e:ff:9e:e2:12:ab:b7:d1:87:a4:67:89:c4:0a:
27:97:11:c7:81:dc:e1:ee:ab:b5:71:97:66:b1:ae:
f3:c4:50:e2:5a:98:9e:18:b8:2d:f9:88:bc:7e:27:
bd:d5:a7:f7:52:39:ca:27:3b:29:68:61:18:77:62:
71:9f:f1:4a:f6:cb:3f:b6:5b:e4:a6:2c:4f:45:a8:
b5:3d:b1:22:8e:9a:20:36:b5:d3:1b:df:59:6b:ee:
a0:e4:84:84:0a:fa:9b:b1:09:70:ce:4d:0b:07:a6:
d7:89:ce:c2:34:9f:af:d8:b1:c6:2c:99:00:57:7a:
cb:a1:e0:03:09:f3:a3:5a:29:94:53:78:45:6a:86:
13:1f:22:bf:68:dc:b3:60:80:29:ba:ee:7c:ab:79:
ac:fa:04:45:57:88:cc:9a:a7:cd:0d:63:d9:72:7a:
38:c1:b8:69:a8:e7:8e:58:2e:2c:b6:2b:80:60:3d:
a9:f8:78:59:a9:44:57:c5:87:70:c5:c2:dd:04:94:
f9:e8:a4:77:62:a0:0f:07:35:eb:80:f1:ff:3b:e8:
15:3f:32:92:32:a1:f0:77:9d:c0:04:98:08:18:08:
f7:47:53:e8:a6:af:f5:6b:e0:02:44:7f:e2:e2:ee:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:D8:9B:11:19:D1:21:D9:6F:58:26:9D:61:77:A2:35:13:35:4B
X509v3 Authority Key Identifier:
keyid:7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/D0zYmxEZ0SHZb1gmnWF3ojUTNUs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.56.0/22
Signature Algorithm: sha256WithRSAEncryption
74:58:ea:d3:92:d1:e9:f5:1f:89:56:47:a5:74:b4:66:c5:ad:
e3:6f:00:b2:2f:7e:c9:81:b2:6d:77:86:eb:f1:0b:c3:d7:c6:
3e:24:3e:f2:ce:7c:f5:0a:af:ec:19:65:e4:40:f7:2a:2c:f0:
3c:5e:34:02:da:39:1b:0e:2f:76:76:05:54:47:57:50:27:18:
55:c9:35:87:e5:f2:12:2e:69:f1:8d:f8:34:cc:09:48:57:40:
0b:e4:b1:f6:af:e6:69:02:e1:56:3b:6b:6e:70:4a:fe:3a:97:
a3:e6:10:96:7b:61:34:0c:91:eb:34:e6:c7:71:1a:8e:f5:4b:
0d:f0:db:f1:50:62:7a:c9:23:9f:3c:25:75:e7:8b:0d:4a:b9:
25:75:7a:71:73:36:a4:2a:43:5b:b5:28:36:66:0d:81:c1:c7:
6c:4b:a4:91:23:2f:58:e8:85:07:55:1d:6c:5f:99:06:44:54:
60:63:9a:2c:19:ab:08:17:bf:11:bc:61:a1:af:d5:d8:ef:e9:
02:f0:c4:15:bf:7f:9b:35:1a:e7:75:6b:d3:e4:df:11:c4:64:
19:93:5f:0c:7f:c4:ae:20:1a:83:06:fd:10:0c:85:8f:e8:c0:
e4:c5:7b:50:c1:2b:30:ef:c9:5a:09:95:34:15:e2:82:e5:2a:
61:2b:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:45 2025 by rpki-client