Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/JN-orGmo4EUJ1IXLHWlEmGgSqQw.roa
File: JN-orGmo4EUJ1IXLHWlEmGgSqQw.roa (raw, json)
Hash identifier: xipJcpVSlnpeHteK7tGV1IKhb4Wx/LG6+nhoJGKQuIE=
Subject key identifier: 24:DF:A8:AC:69:A8:E0:45:09:D4:85:CB:1D:69:44:98:68:12:A9:0C
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CCC
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/JN-orGmo4EUJ1IXLHWlEmGgSqQw.roa
Signing time: Thu 02 Jan 2025 13:58:28 +0000
ROA not before: Thu 02 Jan 2025 13:58:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 14.103.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7372 (0x1ccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=24DFA8AC69A8E04509D485CB1D6944986812A90C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:4b:6a:b7:aa:a6:bc:49:57:b1:2c:3d:07:
b8:0e:d8:11:28:b5:d0:c2:63:bf:f0:57:97:ef:85:
c2:fa:63:a5:28:55:52:a3:95:d9:56:5e:b4:63:65:
c0:2c:d7:0f:8a:f3:1d:21:37:de:75:02:a9:f0:99:
78:7c:08:2c:ae:cc:8d:43:9c:30:e0:5b:51:6e:18:
35:f6:2c:7e:1d:b7:66:6c:1f:62:cb:03:a9:04:dd:
ce:e2:5b:fa:4c:59:2f:bc:fb:e7:42:29:26:6e:65:
85:63:2d:c1:22:fb:60:46:bc:82:96:58:c7:ea:91:
0c:40:ae:98:ac:94:fd:b6:ee:48:f4:f1:a8:da:fb:
f0:37:67:d5:a2:eb:5b:46:9c:de:a4:9a:5a:ba:ec:
96:df:23:38:78:5e:b8:e3:d7:d0:ca:bd:64:9d:b2:
7a:42:d8:57:10:34:5d:70:44:6e:75:ae:84:95:b9:
31:4a:b2:13:4f:eb:db:87:a1:89:5f:95:02:f6:81:
13:4e:6b:e2:aa:9e:e9:17:29:3e:dd:21:7a:5e:3f:
26:0b:57:03:89:d7:34:b7:d3:5c:03:24:65:f0:d5:
fd:b2:1e:95:5a:12:61:34:9c:93:0e:2e:04:bd:18:
4d:46:9e:c5:22:9c:0a:12:f3:eb:65:48:86:eb:a4:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DF:A8:AC:69:A8:E0:45:09:D4:85:CB:1D:69:44:98:68:12:A9:0C
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/JN-orGmo4EUJ1IXLHWlEmGgSqQw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:02:87:39:6e:e6:79:48:b7:fe:74:2d:93:dc:c8:85:60:b2:
1a:a6:66:5a:95:9d:ec:1a:90:75:56:23:04:9f:da:90:cb:b7:
be:70:cb:25:15:f9:71:a7:e3:a7:2c:9f:d8:c3:a4:6d:31:6e:
09:88:3d:28:b6:e3:d1:a2:83:85:35:ba:e6:a5:80:77:36:4f:
73:01:16:a2:67:35:88:f6:69:c3:b8:34:51:ea:3c:a7:62:df:
de:73:e9:cc:65:38:65:37:73:98:e1:e1:bb:aa:49:58:3f:eb:
45:15:a2:ed:94:c2:19:63:39:b7:65:73:06:7d:b1:54:82:d8:
a6:56:85:d7:5c:ed:35:15:98:b2:de:5c:a4:2a:b3:59:d2:fa:
3e:10:6a:87:61:2a:f1:85:88:83:fe:e7:60:0d:27:1c:63:f5:
f0:dc:d3:d7:69:11:f8:e7:51:60:70:b6:5d:00:00:53:0f:e0:
7f:69:00:bd:7a:b6:04:ac:9d:1b:8e:f3:80:2d:c2:fb:91:69:
18:7d:c0:07:2d:62:2f:af:fa:03:e2:16:9e:66:d5:44:cb:d2:
51:03:96:ce:e2:ec:75:11:da:81:c3:3f:af:07:24:7f:49:d7:
16:53:ea:09:b9:fe:09:3e:06:3e:77:e6:a2:6a:c1:2a:e9:36:
47:2e:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:43 2025 by rpki-client