Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2785/gSkd6A4h9soSgsnL1gwv_ZaTpXk.roa
File: gSkd6A4h9soSgsnL1gwv_ZaTpXk.roa (raw, json)
Hash identifier: /ePEyOx0cammh0obLmcE/YBuFH1gX+5nN6CzmwxqWsM=
Subject key identifier: 81:29:1D:E8:0E:21:F6:CA:12:82:C9:CB:D6:0C:2F:FD:96:93:A5:79
Certificate issuer: /CN=DEE08F5287F669313CE6990F117401B179848AE1
Certificate serial: 1982
Authority key identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/gSkd6A4h9soSgsnL1gwv_ZaTpXk.roa
Signing time: Tue 24 Sep 2024 00:21:44 +0000
ROA not before: Tue 24 Sep 2024 00:21:44 +0000
ROA not after: Sat 20 Sep 2025 07:41:26 +0000
asID: 137720
IP address blocks: 103.120.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6530 (0x1982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEE08F5287F669313CE6990F117401B179848AE1
Validity
Not Before: Sep 24 00:21:44 2024 GMT
Not After : Sep 20 07:41:26 2025 GMT
Subject: CN=81291DE80E21F6CA1282C9CBD60C2FFD9693A579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:a4:36:80:b1:61:e5:53:a5:94:c6:3d:ea:
fb:d5:5b:30:5b:65:4c:8b:65:7c:ac:70:7c:f9:2e:
42:59:6b:25:31:53:ef:d1:47:86:36:16:d1:62:0c:
fe:83:89:f9:47:28:e9:9a:6d:62:31:20:e4:c0:4d:
88:83:1a:a5:e6:f7:7c:79:99:a0:68:e1:cd:7e:6a:
00:86:eb:4b:4d:51:df:7d:4b:9d:45:6c:22:8c:a9:
bd:50:0b:30:05:b9:90:ee:ce:28:8e:28:78:f4:e7:
cb:84:9a:96:92:ce:29:6a:e8:a2:54:73:d4:bc:d1:
31:2e:2a:3d:44:28:91:70:7d:4d:f0:5d:39:60:82:
17:82:9a:28:6e:e3:72:e5:5d:c6:42:b3:63:d7:56:
b3:50:e6:a6:b7:19:b7:a1:08:75:93:91:b6:66:80:
83:6a:d4:bc:79:6e:a5:f3:c5:54:ff:d9:29:3e:db:
db:20:e4:fa:51:39:91:62:2c:54:aa:01:63:24:8b:
44:07:35:d3:df:f3:cf:78:31:67:c5:43:ed:7a:3f:
c5:ee:b6:ad:2e:d1:e0:56:e8:d6:7b:31:7a:f3:33:
5b:ef:72:d4:17:78:23:84:63:83:36:35:c4:a3:59:
e4:b3:83:93:08:b7:b0:a0:93:91:46:71:5e:f0:53:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:1D:E8:0E:21:F6:CA:12:82:C9:CB:D6:0C:2F:FD:96:93:A5:79
X509v3 Authority Key Identifier:
keyid:DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/gSkd6A4h9soSgsnL1gwv_ZaTpXk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.96.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:0d:dd:63:f8:7c:d9:e1:a7:95:c7:44:80:7c:2e:6c:27:c9:
19:df:85:a9:82:16:9b:ab:51:c9:2d:a3:b1:09:1b:56:95:58:
c6:0d:ce:9f:74:13:be:a2:65:30:ae:cd:f5:d8:92:9f:f6:04:
63:0b:a8:40:10:b7:f4:17:5b:9e:ca:a6:ae:a1:29:a6:b4:bc:
18:31:d2:55:39:01:c0:ce:82:ba:cd:33:77:d3:bd:ca:b3:af:
b2:5d:b8:ec:29:05:96:38:6e:a3:bd:91:93:de:1a:f8:a2:97:
10:4a:48:a3:29:ec:e5:8a:6a:10:ac:5b:08:17:a4:d8:78:04:
95:99:58:33:03:2e:9e:06:e0:f6:59:09:fa:c7:f6:c8:a0:33:
d7:a2:a2:1d:1c:f2:3a:62:b4:02:1f:b9:d1:f4:95:be:5b:66:
d7:35:da:e8:27:21:95:01:b7:e0:c1:35:32:aa:db:ef:95:4d:
cf:43:3d:24:a2:b7:89:7a:7e:02:56:bb:69:ea:83:1b:50:19:
f2:c4:6b:2f:f9:4f:8d:6d:c1:a8:21:1a:41:0e:9c:06:b3:d8:
7e:7d:f1:f8:17:d9:85:0a:ff:2d:35:da:76:1b:fc:4a:e2:8c:
5c:6f:d4:f3:d2:b0:b3:94:5d:e3:f9:1f:40:5f:36:7e:83:1e:
17:73:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:19 2025 by rpki-client