Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/VXLZLi9c1FG1cRRh68YMOp2EfY0.roa
File: VXLZLi9c1FG1cRRh68YMOp2EfY0.roa (raw, json)
Hash identifier: 79ksCyH2dak2muL6vZIz4biyRKpbNXUDuc4GQNSxIAQ=
Subject key identifier: 55:72:D9:2E:2F:5C:D4:51:B5:71:14:61:EB:C6:0C:3A:9D:84:7D:8D
Certificate issuer: /CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Certificate serial: 2D85
Authority key identifier: 8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/VXLZLi9c1FG1cRRh68YMOp2EfY0.roa
Signing time: Fri 17 Jan 2025 01:26:28 +0000
ROA not before: Fri 17 Jan 2025 01:26:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59024
IP address blocks: 103.111.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11653 (0x2d85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Validity
Not Before: Jan 17 01:26:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5572D92E2F5CD451B5711461EBC60C3A9D847D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:cf:d3:77:20:50:05:5e:23:db:75:13:19:
65:5e:63:bd:b5:5e:f9:8b:5a:ec:49:0a:09:7e:12:
f3:01:43:72:4e:b8:62:90:f4:86:cf:39:da:db:1b:
a6:0c:d4:d7:e0:72:52:83:ac:4a:ce:da:5a:ee:ad:
b9:fe:ad:99:a2:35:ed:13:7c:21:c1:60:95:f3:21:
ae:00:a3:93:19:34:77:2b:c0:23:2a:0b:8f:df:e6:
fd:5c:d8:9c:e7:18:57:04:a1:a2:2b:98:d7:21:56:
90:b9:f5:5a:98:c3:28:49:8c:ee:a6:c4:dd:82:cd:
fc:b7:ef:a5:b9:7d:e6:bf:c0:1d:04:e3:11:c7:c3:
dd:ad:57:eb:d4:a0:52:c9:52:06:e7:e5:c3:0c:60:
81:e1:15:5a:33:13:92:e2:44:c3:52:ef:aa:3f:16:
68:40:25:71:f2:e4:2f:d6:5a:97:36:5d:24:bb:df:
8d:7b:03:0a:94:38:d6:da:01:ff:8d:0c:09:a6:3b:
4b:4f:3d:53:15:99:25:a6:7b:33:d6:c3:75:38:a6:
e7:9e:23:b7:17:85:41:fe:d3:5d:1a:49:70:83:a9:
86:41:ea:14:65:fb:dd:e2:91:7d:dd:88:79:9e:10:
16:7e:2b:80:ec:5a:dc:74:46:1d:a0:a9:07:a4:16:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:D9:2E:2F:5C:D4:51:B5:71:14:61:EB:C6:0C:3A:9D:84:7D:8D
X509v3 Authority Key Identifier:
keyid:8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/VXLZLi9c1FG1cRRh68YMOp2EfY0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ab:75:df:d2:6c:bf:a7:25:c9:42:e7:01:2e:90:68:a3:01:
08:6b:3f:a8:67:4c:74:e9:c6:63:53:b6:df:7d:b2:25:81:2c:
3b:3d:81:50:ad:9b:ca:45:1f:da:08:35:48:0d:ba:52:72:6d:
2a:a9:35:59:9a:8e:e6:3e:1c:e8:c1:0e:91:4d:38:fa:b8:ec:
a0:ac:c7:b3:62:68:b7:de:1a:f5:4e:8b:ff:3c:62:76:0a:80:
ea:48:2f:6f:0f:4a:71:a0:7d:ab:68:91:6b:67:e4:58:01:dc:
cb:b6:d2:fd:f7:0b:c4:78:48:0c:1b:b1:42:eb:09:06:27:dc:
89:a8:47:dd:c0:b6:80:f2:2c:0e:6c:5a:c3:ab:b3:b4:07:6f:
29:1a:c5:8d:fd:c7:a4:ca:5e:5a:c4:45:ba:bc:1a:e9:47:bf:
5a:12:86:29:ca:41:ac:3b:c1:21:da:c2:5a:25:e4:95:48:cb:
91:d7:fe:7c:0f:a6:09:ac:27:66:bc:d1:00:57:a2:b7:ff:cc:
46:54:9c:78:4e:ba:ea:92:d5:a9:8f:f6:c0:29:86:9e:c4:1b:
a6:2a:ff:91:8d:84:fe:94:50:72:c4:a6:45:2c:ef:17:f2:e5:
ac:fe:10:43:03:ae:3b:41:7d:99:6a:dc:90:73:2b:b5:b3:c8:
87:77:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:50 2025 by rpki-client