Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2833/jhEl146Xh18nVcFHzrgpQEmSx_o.roa
File: jhEl146Xh18nVcFHzrgpQEmSx_o.roa (raw, json)
Hash identifier: /SsBB3irtj2eTzoAwSinOxBMNYgfwekptzt5QE81VUY=
Subject key identifier: 8E:11:25:D7:8E:97:87:5F:27:55:C1:47:CE:B8:29:40:49:92:C7:FA
Certificate issuer: /CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Certificate serial: 04A6
Authority key identifier: 63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/jhEl146Xh18nVcFHzrgpQEmSx_o.roa
Signing time: Thu 21 Nov 2024 09:10:53 +0000
ROA not before: Thu 21 Nov 2024 09:10:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 103.125.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Validity
Not Before: Nov 21 09:10:53 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8E1125D78E97875F2755C147CEB829404992C7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:b4:64:f2:2a:16:1d:8b:e1:fd:f3:ef:e2:
75:97:94:19:d1:ca:99:68:e0:e1:1b:56:21:47:32:
3e:9e:b5:24:61:e1:6f:1e:ce:b3:68:ad:27:6f:8d:
96:22:3a:7e:ae:fe:18:d5:7f:25:3c:2d:ab:56:18:
c8:6f:a4:e0:35:77:63:02:ab:65:cb:cc:87:ff:1f:
9b:da:42:65:c2:a7:37:ff:d1:54:b0:73:c3:3f:52:
c9:82:59:59:f7:3b:15:b5:6e:03:39:b1:23:f5:5c:
61:37:c0:c5:18:18:c4:66:22:b5:18:de:da:a8:51:
58:27:fd:2a:05:76:4f:84:92:3b:23:3a:fc:3b:fa:
4c:a9:5c:9e:c9:7b:49:98:af:1e:96:df:93:38:48:
a6:f6:93:43:f5:dd:c6:fc:54:b4:24:69:5c:fc:cd:
41:bb:b1:c0:ae:dd:f4:15:1b:94:6c:d2:d2:4a:00:
4b:27:d5:4c:18:54:05:cb:43:77:06:13:c8:02:44:
79:41:b0:49:26:63:08:44:9b:44:a2:f4:10:c7:1e:
61:0d:38:86:6d:62:92:7c:bb:74:18:dc:02:50:ff:
9f:7c:7b:2b:0c:88:86:6f:68:bf:2c:4b:5f:32:70:
72:6b:62:a0:11:8f:4a:e9:c7:be:aa:26:b7:f9:cb:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:25:D7:8E:97:87:5F:27:55:C1:47:CE:B8:29:40:49:92:C7:FA
X509v3 Authority Key Identifier:
keyid:63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/jhEl146Xh18nVcFHzrgpQEmSx_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:c0:33:ec:9e:2d:8c:20:af:4a:b5:aa:e4:5d:63:da:27:b2:
67:5e:55:00:e1:94:77:6a:c8:51:96:df:84:68:71:a6:3d:1a:
8d:4a:2a:a5:3e:57:71:5b:8f:dd:a5:91:05:44:e0:fa:22:b3:
8b:17:1e:c6:f5:1c:e2:62:c8:eb:79:01:77:c1:72:04:c3:17:
89:e1:b3:ad:10:fc:d5:35:16:d6:f0:40:fc:42:9a:69:2e:88:
3c:e6:a4:d4:d7:f1:0b:62:b9:a4:9f:01:b4:8b:bf:33:3c:25:
43:6d:31:1d:a1:a4:95:de:a3:51:b6:d9:ff:34:81:ac:be:43:
9b:26:ad:8f:89:55:77:06:bf:38:f3:b5:b1:e5:f2:e7:8f:be:
0f:29:63:a7:25:b9:19:e8:94:f9:db:95:f8:ef:59:08:0c:f5:
40:2f:5a:d5:86:89:10:45:b7:c3:70:8b:9b:aa:26:63:30:40:
c7:83:d0:97:40:70:d2:b2:f7:b4:b8:f3:29:bf:1b:e5:83:e1:
2a:d6:c5:3c:aa:b3:1f:e7:57:fa:0e:bd:1d:40:82:9d:2a:5c:
3d:f2:b0:15:1e:ed:40:2f:9a:ad:59:7d:26:ef:09:b6:85:65:
77:3b:5e:8d:68:fd:6b:47:05:3d:50:c4:1a:88:c3:d5:4d:a6:
07:43:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:02 2025 by rpki-client