Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/6NUj9HpyhgHSES6s63mqA6yTP18.roa
File: 6NUj9HpyhgHSES6s63mqA6yTP18.roa (raw, json)
Hash identifier: NHiur0WBWQDDTyIPrb2gc3PXODrnScUfz+/gbcy++Zk=
Subject key identifier: E8:D5:23:F4:7A:72:86:01:D2:11:2E:AC:EB:79:AA:03:AC:93:3F:5F
Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial: 1871
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/6NUj9HpyhgHSES6s63mqA6yTP18.roa
Signing time: Sat 27 Jul 2024 07:45:30 +0000
ROA not before: Sat 27 Jul 2024 07:45:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 17621
IP address blocks: 103.140.14.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6257 (0x1871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Validity
Not Before: Jul 27 07:45:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E8D523F47A728601D2112EACEB79AA03AC933F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:b6:42:1e:fc:9e:96:9a:15:a0:d4:37:db:
06:f7:46:58:34:ab:5a:0e:c3:c1:ab:cd:3c:1f:f7:
fa:1f:bf:09:6b:4d:58:88:3c:55:05:eb:1f:c6:45:
12:11:0d:1e:0e:65:a6:02:99:57:ec:8e:40:49:be:
e9:56:10:b5:3b:91:03:97:a3:91:39:0c:a1:06:59:
27:70:27:83:b5:48:b5:b0:d7:39:19:f4:d2:9d:ce:
aa:bd:a0:78:2c:c9:70:e0:b3:d0:d0:e2:4b:4a:8f:
4d:4a:b0:89:18:91:f1:4a:d0:a0:ae:39:90:9c:e5:
df:8f:ec:ef:23:44:19:81:a0:66:a9:1e:bb:c9:65:
bd:0b:90:b7:2d:62:2f:39:58:bc:82:f7:0b:9d:db:
94:dc:05:f7:4e:0f:6f:75:c0:95:33:18:1c:9c:5a:
11:35:de:e3:d3:f2:cf:f3:29:3d:7b:5a:f6:51:93:
13:10:a5:be:e8:a8:92:5e:eb:cd:34:3c:b7:c2:a9:
ff:bf:8b:42:e2:1e:ff:e3:a8:49:7a:07:4a:59:e4:
72:12:56:91:5d:8c:d8:6a:a1:f2:32:3a:6e:a8:a0:
bf:b3:20:6d:75:02:78:d2:09:3e:6d:a1:bf:26:94:
95:42:7f:ff:ec:01:05:1b:28:a0:8a:74:f0:1e:64:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:23:F4:7A:72:86:01:D2:11:2E:AC:EB:79:AA:03:AC:93:3F:5F
X509v3 Authority Key Identifier:
keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/6NUj9HpyhgHSES6s63mqA6yTP18.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.14.0/23
Signature Algorithm: sha256WithRSAEncryption
49:da:88:63:0b:ba:bd:0b:fc:7f:5e:a3:27:48:28:b7:dd:e8:
97:88:ac:35:6d:e4:9c:ad:e3:db:7e:8a:92:92:df:6d:12:f5:
df:90:4d:9f:24:bc:df:3a:1c:f1:58:ec:16:bc:f7:ec:e2:35:
a6:fb:4b:33:e7:88:ed:ec:94:83:2c:9b:0e:b5:6e:21:c2:a8:
8b:9c:e3:e1:e7:7a:71:63:e8:74:14:a7:07:da:3b:35:bf:51:
e0:ff:b4:85:e2:25:78:e6:87:73:36:1f:66:34:4e:b9:f1:f0:
30:ea:04:64:1c:da:c6:80:02:ca:04:91:10:40:dd:0a:92:a4:
c4:57:fb:3b:36:9a:9b:d9:8e:c5:d7:a1:45:9e:bd:99:08:90:
a3:ef:e3:41:9f:22:1b:c2:ee:c8:e8:dc:af:d8:86:45:b7:97:
cb:88:c9:f7:89:98:84:fb:ce:dc:2b:df:db:b6:84:4d:60:47:
37:b1:29:83:88:7b:e5:13:d4:2e:fc:6a:66:e2:b9:a6:32:c0:
70:f3:14:da:6e:00:8b:fa:50:a5:e0:cc:85:8e:9f:83:06:3e:
96:ba:3d:33:a3:e6:a7:1a:3d:3f:bc:57:b7:52:66:22:48:a0:
f4:29:ba:e9:c2:f6:64:ab:81:a4:ee:62:eb:c4:6f:ad:0a:28:
2d:49:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:23:01 2025 by rpki-client