Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/gDdGLKpcpdmvOzPp_D9br_Wr7Qk.roa
File: gDdGLKpcpdmvOzPp_D9br_Wr7Qk.roa (raw, json)
Hash identifier: eZkJiROiHhUkwPVo9JjHpwDgx6jD+iRMB+VGON9CoOY=
Subject key identifier: 80:37:46:2C:AA:5C:A5:D9:AF:3B:33:E9:FC:3F:5B:AF:F5:AB:ED:09
Certificate issuer: /CN=9582A072805FF48C74231BB432D95ADE2256B886
Certificate serial: 05
Authority key identifier: 95:82:A0:72:80:5F:F4:8C:74:23:1B:B4:32:D9:5A:DE:22:56:B8:86
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lYKgcoBf9Ix0Ixu0Mtla3iJWuIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/gDdGLKpcpdmvOzPp_D9br_Wr7Qk.roa
Signing time: Wed 09 Jun 2021 19:59:36 +0000
ROA not before: Wed 09 Jun 2021 19:59:36 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 137797
IP address blocks: 103.116.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9582A072805FF48C74231BB432D95ADE2256B886
Validity
Not Before: Jun 9 19:59:36 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=8037462CAA5CA5D9AF3B33E9FC3F5BAFF5ABED09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:7d:f5:e2:f5:e0:57:2d:f2:d3:06:d7:9a:
b3:95:d3:31:07:22:3c:5a:88:10:b8:88:a5:2f:bc:
4b:c2:8b:bc:8b:72:5c:23:f5:13:0f:13:f2:34:c3:
b8:2e:bc:39:46:a2:12:4c:b4:68:5a:d6:98:c8:f8:
41:27:2d:45:bc:7d:c5:e6:31:d6:20:94:6a:3a:1c:
83:90:80:f2:b1:58:fa:67:19:79:a8:44:34:2d:c4:
0a:6d:ef:96:12:f4:68:3a:6c:1f:78:03:5a:ef:26:
6f:3f:16:54:94:53:16:39:f2:2f:19:71:9c:db:1b:
1d:b8:6c:e0:76:37:b7:f1:8d:d3:ce:82:e8:35:43:
32:33:9d:88:5a:dd:ac:07:29:83:09:c3:1f:e3:e1:
9f:d8:08:8f:fd:8b:0a:7d:30:d5:a8:06:92:90:8d:
1f:6d:50:be:f9:30:37:e5:00:02:e7:c0:c6:09:90:
e3:ea:ba:1c:fc:1a:21:76:58:98:5a:e5:58:7c:47:
00:47:87:ff:4c:fc:05:dc:f7:68:e7:a0:56:22:30:
08:4b:07:b2:de:35:f2:07:f2:00:0b:13:fe:53:a5:
47:0d:ce:32:5b:64:e4:ff:8e:5d:ce:65:52:5e:b8:
a5:e6:9b:24:99:37:0c:f4:97:43:fe:40:a6:55:13:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:46:2C:AA:5C:A5:D9:AF:3B:33:E9:FC:3F:5B:AF:F5:AB:ED:09
X509v3 Authority Key Identifier:
keyid:95:82:A0:72:80:5F:F4:8C:74:23:1B:B4:32:D9:5A:DE:22:56:B8:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/lYKgcoBf9Ix0Ixu0Mtla3iJWuIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lYKgcoBf9Ix0Ixu0Mtla3iJWuIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/gDdGLKpcpdmvOzPp_D9br_Wr7Qk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f3:49:be:21:9a:96:ef:65:f9:bc:ac:70:56:79:95:6b:15:
89:96:88:52:ff:e7:67:48:66:7d:96:90:55:d0:e1:48:42:40:
ea:15:37:1c:c2:58:77:99:40:6b:7e:19:73:df:6c:ee:7e:43:
b9:74:de:1d:a7:cd:be:46:46:4e:b8:8e:ba:cb:d1:15:98:83:
4a:d9:5a:7c:3f:a9:b1:92:60:b1:10:66:42:9c:d5:df:d8:cf:
67:1e:97:7a:60:83:79:e5:ab:60:51:79:3a:d7:a2:19:b0:1f:
9f:f2:1a:ec:82:1a:6b:7e:da:8c:81:5d:89:4f:96:1d:e7:8e:
33:8a:ab:1b:34:be:86:70:ee:bd:85:57:4b:f3:92:ad:87:3f:
4a:74:4b:40:c8:f5:c8:d0:09:49:97:f4:09:9a:75:ae:77:25:
37:d1:03:e8:35:97:ef:1f:8e:d2:9f:89:cf:b2:e0:25:b9:8e:
a1:5b:da:b1:d3:99:a8:62:2b:78:84:9c:9f:a3:80:d6:d8:f6:
b3:ee:fe:f1:1e:e1:d0:b2:f7:34:2f:14:25:ac:7e:f4:9a:43:
fd:c7:4f:eb:2e:df:ae:df:3e:21:d7:41:d3:d0:95:ea:7b:d4:
11:72:5c:da:e2:f9:7b:2c:b7:37:b3:5a:8c:10:66:76:10:47:
f3:bd:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:21 2025 by rpki-client