Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2816/DIIzwjna6x5VEpKk2HYN0-HevDw.roa
File: DIIzwjna6x5VEpKk2HYN0-HevDw.roa (raw, json)
Hash identifier: lwJ18gPT7MLZ8D++sLG4Luhl2MCnByjAr/kDAeeg/8o=
Subject key identifier: 0C:82:33:C2:39:DA:EB:1E:55:12:92:A4:D8:76:0D:D3:E1:DE:BC:3C
Certificate issuer: /CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Certificate serial: 0CA2
Authority key identifier: 85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/DIIzwjna6x5VEpKk2HYN0-HevDw.roa
Signing time: Wed 13 Mar 2024 01:22:25 +0000
ROA not before: Wed 13 Mar 2024 01:22:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 137768
IP address blocks: 103.131.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3234 (0xca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Validity
Not Before: Mar 13 01:22:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0C8233C239DAEB1E551292A4D8760DD3E1DEBC3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:9d:d1:bd:fe:91:68:7e:91:25:32:d0:d3:
fe:6e:f8:c8:10:4c:4e:74:65:5e:7d:65:5b:bc:69:
5b:cf:4c:81:80:ab:34:22:cf:67:3d:c0:59:57:1a:
31:57:f9:99:fc:be:52:3b:34:ca:9f:19:84:3d:00:
ef:ba:b5:fd:87:c6:4a:4c:c9:b8:c5:f3:40:df:69:
d5:98:79:c4:c0:b2:65:1c:a8:0e:f5:e3:94:ce:9e:
03:34:ae:4d:d9:d8:71:18:9c:66:c1:3d:b4:ac:00:
92:35:fc:36:be:94:a6:71:3b:c9:3b:c5:bf:ec:11:
c6:09:5b:7c:92:e5:85:52:41:3b:c7:1f:3f:cb:1e:
d3:88:35:b2:79:84:93:aa:4b:a9:ec:3c:69:5a:08:
76:72:15:1f:e2:3b:e6:81:03:eb:93:10:b0:3c:b5:
ab:e1:ae:bb:42:93:ea:c7:cd:94:84:ad:81:e0:81:
2a:2b:aa:7b:9f:6b:08:f8:79:0f:3b:25:14:0d:b4:
65:34:f9:09:64:9b:51:21:c2:95:44:1d:dc:4d:6c:
aa:79:2f:b6:6e:27:ca:1c:0b:4e:2b:9b:10:4a:05:
db:2c:80:d3:af:52:82:76:aa:d0:2d:bf:c8:7f:b4:
14:1a:0e:d2:d5:31:04:0b:2c:27:32:b6:76:96:44:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:82:33:C2:39:DA:EB:1E:55:12:92:A4:D8:76:0D:D3:E1:DE:BC:3C
X509v3 Authority Key Identifier:
keyid:85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/DIIzwjna6x5VEpKk2HYN0-HevDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:9b:7f:76:82:10:a2:d9:fa:b5:fb:95:08:df:6b:43:98:d2:
e1:db:43:5d:2b:0a:76:c5:b2:a7:06:34:10:67:48:b6:aa:6d:
5e:b0:05:05:61:80:bb:4d:ca:37:24:19:f0:25:dc:ab:cd:72:
80:d7:e0:21:35:5f:11:70:df:9c:c9:95:07:aa:03:cd:d4:ed:
e9:95:c0:93:a4:1f:84:19:5c:e0:21:92:53:6e:34:b8:b7:1f:
e2:33:3b:cf:f6:f7:c3:6a:aa:2a:d1:42:97:a2:ed:e5:78:0d:
84:b0:11:1e:45:34:9f:1a:46:ed:fb:c1:e9:94:d7:ff:76:fd:
53:d8:6c:8c:08:d8:03:84:48:4f:2e:10:2b:b3:af:b7:15:d8:
40:97:04:c9:8e:f6:ae:de:63:59:b3:f2:83:e7:66:15:91:b2:
0f:e3:0b:d8:eb:12:94:b2:19:9f:b4:a5:78:95:da:58:25:f6:
96:5a:75:2b:6c:ab:48:2f:a5:06:e4:50:ef:a6:fe:d5:00:84:
63:95:44:32:30:7a:1b:36:f1:6e:74:f6:02:c2:de:d6:1c:10:
c7:15:59:0b:af:0b:e7:ec:a2:af:c4:a7:1a:3b:54:74:ee:72:
f6:dc:8f:74:6b:74:b1:04:8c:09:72:32:ee:c1:c4:8f:49:6a:
b1:5e:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:39 2025 by rpki-client