Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2671/t046ocjVzR5RVU4MgL8a40I6WXM.roa
File: t046ocjVzR5RVU4MgL8a40I6WXM.roa (raw, json)
Hash identifier: bpJtaKatuHT31RMM4QTq/swvYvz+zQwsuB8w1QRVAUk=
Subject key identifier: B7:4E:3A:A1:C8:D5:CD:1E:51:55:4E:0C:80:BF:1A:E3:42:3A:59:73
Certificate issuer: /CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
Certificate serial: 1D30
Authority key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/t046ocjVzR5RVU4MgL8a40I6WXM.roa
Signing time: Fri 17 Jan 2025 01:29:50 +0000
ROA not before: Fri 17 Jan 2025 01:29:50 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 103.108.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7472 (0x1d30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
Validity
Not Before: Jan 17 01:29:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B74E3AA1C8D5CD1E51554E0C80BF1AE3423A5973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:92:92:2f:03:3c:c4:e2:8e:3a:15:b0:e3:
fb:19:6a:9e:0f:fe:78:a8:e3:5c:e7:2d:1a:1f:12:
9c:ba:58:30:17:15:c1:ec:ca:5c:1c:3d:3f:05:fe:
86:e4:5f:20:5e:92:cb:4b:c4:2f:a4:73:f7:af:e5:
cf:94:c2:ed:c3:63:c2:de:c3:10:f7:68:d3:cb:e0:
ea:43:79:4b:ec:7d:41:81:87:7f:c2:fd:43:c0:a2:
58:4b:c3:59:e7:18:8a:8d:d1:34:f0:43:dc:4a:c7:
e7:80:3f:89:23:a6:f6:61:c9:33:d5:a5:48:55:85:
53:d1:b1:77:21:20:9f:74:6c:3d:75:6a:11:29:39:
ee:fa:ed:02:1e:08:5d:8d:3b:b1:d1:da:aa:78:71:
de:7b:f0:2a:a0:4f:3d:b7:fe:42:c1:6d:f2:bc:3b:
46:04:50:8d:85:1b:4a:23:57:7a:a6:90:fc:24:13:
2c:d2:8c:70:c5:d3:db:01:9e:3c:7b:17:ce:70:76:
ff:64:be:8b:c4:49:0d:a8:c5:20:06:e4:75:bf:3c:
e3:83:88:4f:7f:e4:98:51:be:df:73:03:da:78:34:
85:a9:56:6b:73:af:c3:4b:42:69:3c:0d:c6:c6:be:
2a:ac:65:ad:32:d1:f2:f6:af:20:59:cc:3d:93:bf:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4E:3A:A1:C8:D5:CD:1E:51:55:4E:0C:80:BF:1A:E3:42:3A:59:73
X509v3 Authority Key Identifier:
keyid:DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/t046ocjVzR5RVU4MgL8a40I6WXM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:9b:69:73:4b:ee:33:30:0c:94:ca:b2:0f:ff:4b:69:76:36:
91:20:b3:2e:1a:b7:9e:bc:81:e3:88:81:4e:1b:5d:8a:3a:c0:
89:fc:f8:c6:27:ce:38:3a:6a:52:6a:ea:84:33:f6:fd:10:58:
ae:ce:b6:f7:db:1b:b9:b1:07:e1:9f:8a:75:68:9f:52:7b:c6:
d1:93:df:7f:d3:0e:c4:e8:e1:43:55:75:2f:83:4d:74:86:7c:
e5:dd:c2:2a:69:c2:b6:47:d7:2d:17:db:96:4f:9d:cd:5d:3c:
05:1f:dd:7d:29:8a:83:71:01:25:94:df:09:32:82:a5:21:bb:
68:12:00:52:29:ac:94:88:99:39:ee:25:09:a3:3d:0d:ba:42:
ac:ba:cb:1e:d9:58:65:8d:3d:68:9e:63:fd:74:e3:4a:5f:21:
8c:8e:bb:10:21:91:34:a9:5a:3c:02:ba:e8:b3:26:b0:a1:84:
0e:c6:db:ca:b4:69:75:25:5a:a1:f5:a7:66:64:d1:9d:ad:7a:
7c:9f:77:5e:4e:7a:27:12:8a:f6:7d:50:34:2a:0f:fb:df:1d:
8d:a0:d2:62:5e:0c:b8:6a:67:d2:c1:22:f4:30:a8:aa:1b:9c:
69:43:af:6b:2a:52:b1:74:02:5d:11:9d:da:42:aa:04:76:b2:
f7:e3:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:38 2025 by rpki-client