Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2742/b6xYKSLGz18BN2xIrblSCRlue8Y.roa
File: b6xYKSLGz18BN2xIrblSCRlue8Y.roa (raw, json)
Hash identifier: ZKbFiHS0maTwFnBvd4+Py3hTk8m0FCCWWHKGFVhk4Vs=
Subject key identifier: 6F:AC:58:29:22:C6:CF:5F:01:37:6C:48:AD:B9:52:09:19:6E:7B:C6
Certificate issuer: /CN=D6DD0B467EE8D75B15146628C991AC3140558F94
Certificate serial: 1B6E
Authority key identifier: D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/b6xYKSLGz18BN2xIrblSCRlue8Y.roa
Signing time: Fri 17 Jan 2025 01:27:39 +0000
ROA not before: Fri 17 Jan 2025 01:27:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 56005
IP address blocks: 103.22.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7022 (0x1b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6DD0B467EE8D75B15146628C991AC3140558F94
Validity
Not Before: Jan 17 01:27:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6FAC582922C6CF5F01376C48ADB95209196E7BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:00:e2:e8:64:59:62:08:25:6c:5b:90:a1:
de:b2:39:77:dd:18:6c:b5:26:a0:33:eb:ec:74:c3:
22:0c:11:ac:7f:fc:72:6d:85:7d:51:90:33:0a:13:
c3:96:9f:8b:2a:37:62:55:0a:b6:80:9b:34:6d:fa:
e4:30:4a:7e:43:07:c5:8c:d7:94:0d:f9:50:c9:3e:
cc:5f:5c:f5:c3:0b:1c:41:77:d7:e9:fe:15:d6:1b:
b3:72:a0:02:42:da:99:52:59:40:b0:fd:3c:5c:93:
a5:a4:ed:19:ca:3f:6d:59:aa:ef:09:e5:c3:c6:82:
27:d0:98:b7:66:58:46:c9:a5:3a:a7:36:4a:ef:b1:
4f:41:6a:33:08:32:24:f0:c0:55:0e:e2:b7:fc:14:
34:fa:10:d6:3d:61:3a:ff:1a:61:c3:cf:95:61:56:
a3:3e:11:9a:f3:cc:34:d6:d6:26:01:a1:42:f9:ca:
02:87:63:64:ae:d7:aa:d7:62:f7:be:83:d5:26:d0:
d3:31:96:f5:e7:4b:76:d3:ef:17:2b:4c:ee:a7:55:
34:71:06:e4:a3:ea:8d:97:70:a6:18:ab:55:f2:86:
3d:d9:e4:34:3c:96:2f:7f:1e:c2:03:bc:80:7e:b9:
c9:31:60:b7:82:a7:b5:6d:13:09:4d:69:22:39:99:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:58:29:22:C6:CF:5F:01:37:6C:48:AD:B9:52:09:19:6E:7B:C6
X509v3 Authority Key Identifier:
keyid:D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/b6xYKSLGz18BN2xIrblSCRlue8Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.22.188.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fa:6b:ee:ba:84:de:c9:fc:64:d0:a9:e6:59:91:c2:5b:70:
4a:df:91:8e:ed:3c:58:e1:fd:2c:3f:fc:1f:5c:9c:3e:2d:6a:
6d:6d:0b:53:ac:7b:81:65:50:38:9e:00:e6:41:fd:61:d3:0d:
87:dc:5d:20:c4:c5:19:8d:a4:60:ee:81:0a:2f:96:5d:8a:9e:
3e:e4:6b:19:eb:cc:8d:02:38:44:f8:2b:63:e9:20:15:de:a2:
0b:8e:ad:7e:64:92:3b:ca:53:59:18:24:28:47:0d:29:bb:58:
86:97:e9:55:7d:4f:64:ee:13:8f:56:00:9f:db:ba:b3:d7:44:
6b:91:68:9f:69:40:d2:c5:cf:af:f2:77:00:5c:a1:df:62:e4:
45:c7:9b:6f:cd:a9:2c:19:27:7e:55:ab:c6:17:16:f7:20:31:
4c:99:e2:15:96:03:5e:c6:29:de:bd:5d:3b:37:5a:f9:91:d9:
2a:09:d1:46:0b:63:25:e8:94:6b:8f:19:59:f7:3a:4b:ce:88:
86:a1:28:7f:e6:3f:b0:42:c0:d7:5f:ee:e0:58:46:9e:9e:4b:
bc:e7:33:0a:aa:48:63:50:e1:28:89:7d:7e:bb:61:67:2f:6b:
d0:c5:cc:20:39:75:64:a5:bd:2e:a6:c3:f5:7d:0f:10:d7:5a:
23:36:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:46 2025 by rpki-client