Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2943/37YW15iLsWmoG_oPYuIHXvuuBIc.roa
File: 37YW15iLsWmoG_oPYuIHXvuuBIc.roa (raw, json)
Hash identifier: pSKQ7bWnbwbE/tXIoQ9xSOGuzx2kr+0GffJUKBbHHtY=
Subject key identifier: DF:B6:16:D7:98:8B:B1:69:A8:1B:FA:0F:62:E2:07:5E:FB:AE:04:87
Certificate issuer: /CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9
Certificate serial: 0E
Authority key identifier: D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/37YW15iLsWmoG_oPYuIHXvuuBIc.roa
Signing time: Wed 16 Oct 2024 05:47:21 +0000
ROA not before: Wed 16 Oct 2024 05:47:21 +0000
ROA not after: Tue 14 Oct 2025 04:34:08 +0000
asID: 139148
IP address blocks: 103.145.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9
Validity
Not Before: Oct 16 05:47:21 2024 GMT
Not After : Oct 14 04:34:08 2025 GMT
Subject: CN=DFB616D7988BB169A81BFA0F62E2075EFBAE0487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:af:89:de:ae:e4:e9:2d:03:91:bc:b5:2b:
66:fb:0c:66:b2:8a:3d:d3:41:2a:37:1e:0f:86:4b:
8d:b4:4d:92:1c:a5:4e:95:a0:d4:23:73:24:9e:1e:
e1:18:9c:5d:0c:ab:e3:a0:31:0c:48:6e:01:f0:92:
de:5c:43:21:3a:fd:30:2e:91:29:55:6c:1b:75:d6:
0c:07:d0:da:c1:06:ef:58:09:6b:7e:c2:b6:dc:2d:
34:10:c9:5b:e2:e8:5f:6f:ac:f7:f7:bb:7e:48:f0:
9c:a0:c9:af:57:8d:38:c4:1b:eb:1a:b4:b3:ac:ed:
02:4a:bc:e0:87:aa:f3:91:76:c9:af:fa:58:9b:25:
53:f2:f7:a9:57:d4:4d:08:9e:46:06:87:c8:83:0c:
81:51:e7:55:fd:0a:22:51:f7:c2:ee:a2:02:db:44:
2c:3f:2f:70:53:b4:91:ab:c9:67:0d:50:79:07:50:
8c:0d:f5:b8:c0:00:02:41:7f:eb:a2:b8:62:e7:4a:
49:5c:e9:65:a2:ea:29:95:80:84:75:41:8c:8a:c3:
99:c0:cb:0a:b4:ad:8e:60:f0:74:76:e3:aa:2c:45:
c8:19:6c:28:79:88:a4:6f:00:9a:11:54:49:73:0a:
73:09:63:f2:9e:9f:12:f2:97:48:95:3d:10:bf:64:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B6:16:D7:98:8B:B1:69:A8:1B:FA:0F:62:E2:07:5E:FB:AE:04:87
X509v3 Authority Key Identifier:
keyid:D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/37YW15iLsWmoG_oPYuIHXvuuBIc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.42.0/23
Signature Algorithm: sha256WithRSAEncryption
19:b9:f2:b5:89:df:5b:28:35:53:c6:e8:66:da:48:95:f1:0f:
4f:47:2c:f6:cc:5f:dd:92:fd:19:37:6e:6d:eb:26:cf:7e:a4:
7b:c0:bd:b8:59:1f:1e:af:9e:0f:27:d6:55:05:82:10:65:28:
ef:8b:df:c7:3b:84:e5:da:fd:c5:2a:36:b7:41:01:30:69:4e:
ff:5f:9a:62:ad:6e:62:31:e5:cc:cc:ca:0c:bc:ef:43:01:d8:
c9:cc:be:20:71:30:b6:2d:78:b5:b2:de:e7:7e:d7:b4:ae:02:
2a:13:de:74:4f:23:60:c9:7e:c7:47:9e:60:c9:90:0b:aa:1f:
07:75:0c:58:22:f9:65:c2:93:f2:6a:13:48:09:d4:d8:00:0b:
73:98:af:bf:1f:75:ef:70:bd:7f:a7:c4:fd:fa:0f:b7:07:e7:
1b:70:0d:50:87:fc:0e:59:12:d5:32:7f:59:2a:28:a9:58:9f:
5c:24:a5:15:4b:bd:57:dc:de:ec:47:14:ff:8f:cf:55:6c:6b:
f6:1d:6f:2e:9b:87:52:98:1e:59:36:db:34:f2:2d:96:3a:dc:
ce:32:1d:40:27:8a:58:5b:49:16:73:a5:46:4a:6a:60:b7:62:
cb:36:8f:f5:6f:a5:09:0f:46:34:a4:99:92:e7:09:5c:0c:1b:
6e:b5:59:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:42 2025 by rpki-client