Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/gk_mleru9Wa_PbXNeo5mHWP6ojg.roa
File: gk_mleru9Wa_PbXNeo5mHWP6ojg.roa (raw, json)
Hash identifier: 1HLcvm6EuHkWYFcWUgONDyEhmlwxwd9Rkyu7jRQiWyc=
Subject key identifier: 82:4F:E6:95:EA:EE:F5:66:BF:3D:B5:CD:7A:8E:66:1D:63:FA:A2:38
Certificate issuer: /CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Certificate serial: 12B9
Authority key identifier: EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/gk_mleru9Wa_PbXNeo5mHWP6ojg.roa
Signing time: Fri 17 Jan 2025 01:28:42 +0000
ROA not before: Fri 17 Jan 2025 01:28:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139119
IP address blocks: 103.157.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4793 (0x12b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Validity
Not Before: Jan 17 01:28:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=824FE695EAEEF566BF3DB5CD7A8E661D63FAA238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:41:03:c3:34:1a:ef:b3:d0:95:fe:66:5b:
04:cc:89:89:d1:63:8c:8c:4a:d5:1a:f6:45:dc:c6:
c4:42:fa:be:13:42:dd:29:12:e2:5e:0e:f0:ba:2e:
68:c5:46:3e:d5:5c:0e:42:ea:e2:64:1d:6c:b8:5f:
5f:31:ac:d0:ae:05:05:13:3b:34:a7:8d:46:64:f2:
d0:95:47:b6:16:98:c2:a9:d9:12:8c:8f:65:be:ff:
f4:e9:93:67:e4:51:87:d4:87:c1:d9:d2:93:c4:89:
f4:4d:bc:fd:72:c3:83:52:68:85:60:86:4a:61:83:
9d:c9:fa:75:34:da:ee:76:7d:e9:8d:f7:06:5e:a3:
ee:34:fc:e2:94:c6:80:70:2a:45:31:1b:fa:e4:58:
55:aa:a9:6f:1b:e0:36:9e:b9:c7:c4:36:93:c8:c5:
fe:fc:a4:c1:a4:89:19:9d:7c:60:94:14:3a:12:75:
3d:99:a9:1c:f2:25:26:8d:3d:bd:0d:91:08:f2:f1:
1d:79:d6:38:38:90:85:a4:31:94:15:fc:8d:63:99:
af:d6:b4:30:30:5a:63:52:54:36:5f:9d:7e:d5:84:
9e:49:0a:41:b0:a6:f6:56:89:09:71:b5:7e:c3:73:
a7:90:d3:ca:0f:0a:6a:23:b7:f1:14:32:8d:57:40:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4F:E6:95:EA:EE:F5:66:BF:3D:B5:CD:7A:8E:66:1D:63:FA:A2:38
X509v3 Authority Key Identifier:
keyid:EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/gk_mleru9Wa_PbXNeo5mHWP6ojg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.234.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5f:9b:0e:31:fd:a9:87:9d:88:ba:97:a6:e7:36:33:38:fe:
53:06:da:f4:ea:f3:42:cf:61:13:6b:85:9a:61:3e:e2:37:29:
f4:ff:8b:83:46:1a:f0:cf:12:59:2a:a6:fd:21:e2:a7:3f:a6:
2d:9f:e4:5f:19:16:3f:8f:45:f7:f2:18:c1:1e:6e:c2:3f:03:
ec:17:6b:27:41:71:c5:26:de:2c:c3:d1:97:d0:2f:8b:48:f1:
f0:c7:ab:7e:3c:5b:7f:38:9f:40:88:fc:d6:6d:52:8d:83:f6:
76:d8:77:ee:7d:6e:1f:89:5c:61:5d:a1:1a:cd:dd:fa:6f:19:
54:37:97:08:e0:57:5e:f8:9b:da:d7:77:ce:36:2f:e0:04:17:
22:d0:9e:1f:21:45:c0:c9:7d:9c:95:75:5e:3d:fa:1b:dc:cf:
6e:c2:be:5d:96:23:c0:37:32:96:10:01:ba:f7:ae:1d:c2:aa:
bc:f5:da:3b:bc:4a:99:96:be:69:e9:1e:77:e6:0a:fa:a7:3c:
17:49:6a:43:62:60:0a:c6:6a:52:4c:38:12:30:31:96:24:55:
fc:2e:cc:a8:4e:cd:7d:d9:63:98:f7:05:e0:e5:a6:a6:ab:16:
dd:8f:39:d4:26:3e:ca:9d:6c:00:53:1f:3c:13:06:a5:ff:ed:
87:72:0b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:05 2025 by rpki-client