Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/Chccgovtr4Jxu9Y1IiEwZLNPEww.roa
File: Chccgovtr4Jxu9Y1IiEwZLNPEww.roa (raw, json)
Hash identifier: 4ivezYEeXqevm8aBYlTI2iZFxUZ10Xr3aU92Qwnct7Y=
Subject key identifier: 0A:17:1C:82:8B:ED:AF:82:71:BB:D6:35:22:21:30:64:B3:4F:13:0C
Certificate issuer: /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
Certificate serial: 1BD3
Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/Chccgovtr4Jxu9Y1IiEwZLNPEww.roa
Signing time: Fri 17 Jan 2025 01:30:11 +0000
ROA not before: Fri 17 Jan 2025 01:30:11 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137806
IP address blocks: 103.114.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7123 (0x1bd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
Validity
Not Before: Jan 17 01:30:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0A171C828BEDAF8271BBD63522213064B34F130C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:51:6d:95:9d:bf:38:16:63:e9:f5:c4:22:
7d:23:6e:35:76:51:1e:89:99:8f:28:51:fa:5f:3f:
39:cb:9c:5c:59:c1:2c:83:aa:fa:fa:fa:cb:7e:6c:
d1:da:da:18:ae:96:f3:f8:d2:04:d8:6f:4d:22:3e:
36:a0:d3:e4:b9:0b:12:51:68:70:a1:01:9c:7a:51:
7b:d8:dd:62:69:63:9c:80:91:68:2e:55:c7:26:59:
d6:6c:9d:bc:1c:e1:a9:c4:34:8d:e8:41:da:3e:01:
1d:1c:df:2c:3f:85:e7:25:a5:25:37:44:4f:63:01:
95:05:73:42:68:6b:7e:9b:2c:61:87:eb:34:94:58:
62:de:c2:ea:c3:47:be:aa:f6:3f:b3:b1:79:f2:14:
7f:24:04:d1:5f:00:fd:92:67:cc:19:ff:14:81:29:
52:bb:9c:5c:49:f7:92:cf:bd:63:2b:47:2f:96:26:
b2:6d:dc:5f:31:68:e2:90:64:88:5f:e4:59:e1:c3:
e3:f7:e2:e0:c4:1b:1e:30:33:58:b2:96:ee:13:74:
38:36:d4:5b:f6:ef:3e:9a:88:24:2a:c7:68:5f:93:
8d:4a:b6:54:52:22:1e:ae:e3:ad:4f:d8:4b:18:a4:
14:0f:54:0e:a8:ba:38:55:6b:28:cc:6a:50:15:27:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:17:1C:82:8B:ED:AF:82:71:BB:D6:35:22:21:30:64:B3:4F:13:0C
X509v3 Authority Key Identifier:
keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/Chccgovtr4Jxu9Y1IiEwZLNPEww.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.236.0/24
Signature Algorithm: sha256WithRSAEncryption
89:61:24:b8:4c:79:87:40:08:69:70:bc:de:aa:57:a9:71:e2:
d1:11:42:64:a9:82:48:ce:d3:8f:62:a9:28:56:29:c4:be:f5:
05:b0:0c:5e:7d:39:7b:69:00:9d:22:d0:bd:56:83:ca:e9:08:
b3:6f:eb:fc:e7:08:8b:d5:7a:49:16:c4:35:e2:15:48:7e:79:
07:f1:b8:4a:98:57:da:d6:87:46:b2:d7:79:75:ff:47:20:a1:
b1:a6:ca:23:5d:8b:c0:29:28:e9:28:9f:aa:e8:b8:b2:66:99:
a9:ba:5e:2a:18:dd:34:32:bb:a2:fe:ca:ef:59:45:06:3d:b3:
ae:08:e3:95:2b:94:0c:d2:29:d8:a8:2b:e0:e2:72:7d:0a:da:
1b:47:9d:c3:ab:88:15:f6:24:cb:4b:1a:33:e2:1e:2e:d3:91:
03:1e:d7:36:c4:e0:d9:a9:8d:c5:2a:35:c1:c5:78:1f:12:d6:
94:9a:d1:fd:88:16:6b:04:9a:7b:dd:07:1a:de:a2:e5:37:8d:
7b:9a:73:1d:d3:2f:99:6d:f8:50:83:56:74:78:4c:85:38:9b:
4c:b9:25:9c:90:0b:5a:53:04:eb:1d:1a:77:7a:16:8a:e2:87:
07:a3:c0:06:ce:8c:b3:2e:bd:a9:b9:b9:50:32:7a:ea:ce:cd:
f7:3f:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:06 2025 by rpki-client