Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3072/iyzGru5j0S-DPoUGKm4wsZKe8_Y.roa
File: iyzGru5j0S-DPoUGKm4wsZKe8_Y.roa (raw, json)
Hash identifier: VFlZwps23vOfszl/xI666p5cIFMApotbCUDEqAgSDdk=
Subject key identifier: 8B:2C:C6:AE:EE:63:D1:2F:83:3E:85:06:2A:6E:30:B1:92:9E:F3:F6
Certificate issuer: /CN=C2BFB235F570652A8BCB0416F6FCC4443F658CA1
Certificate serial: 1BD6
Authority key identifier: C2:BF:B2:35:F5:70:65:2A:8B:CB:04:16:F6:FC:C4:44:3F:65:8C:A1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wr-yNfVwZSqLywQW9vzERD9ljKE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/iyzGru5j0S-DPoUGKm4wsZKe8_Y.roa
Signing time: Fri 20 Dec 2024 01:55:06 +0000
ROA not before: Fri 20 Dec 2024 01:55:06 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4837
IP address blocks: 103.163.180.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7126 (0x1bd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2BFB235F570652A8BCB0416F6FCC4443F658CA1
Validity
Not Before: Dec 20 01:55:06 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8B2CC6AEEE63D12F833E85062A6E30B1929EF3F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:f5:82:47:3b:65:4f:56:44:cb:93:8a:35:
f9:6b:4e:88:85:51:ab:1a:04:2d:70:61:0e:fc:0b:
8b:f3:84:89:d0:de:5a:f5:2c:5b:f4:ed:96:24:61:
e4:37:29:b8:91:fd:29:f8:64:ed:6c:57:c3:15:b8:
cf:1b:7d:f8:a9:b1:28:52:6a:9b:71:3e:63:96:3d:
e0:03:6f:d8:a6:15:cf:13:97:09:1e:f8:b2:e1:35:
e2:48:55:29:40:b1:2a:b7:5b:27:70:61:19:b5:3f:
39:fe:94:2f:6e:07:91:a8:fb:88:f3:d0:f9:61:49:
1e:21:39:5a:a6:7d:6a:a6:cd:91:71:f3:f5:1e:61:
15:85:4b:f7:d8:75:2e:74:c2:fc:1d:bc:33:cd:79:
fb:00:06:2c:dd:6f:fd:3e:7f:b0:bc:51:a7:08:65:
dc:b3:18:0d:7f:53:13:4a:e3:7c:58:32:64:66:5a:
03:1a:15:38:41:43:74:ac:4c:9d:b2:c1:59:88:61:
60:74:f6:35:42:9c:94:13:20:9c:8d:9b:4a:9b:82:
4b:b4:36:95:87:88:33:76:e7:c8:5c:53:fe:ee:66:
2c:c0:48:67:c0:5e:ab:3d:ac:70:79:fd:fd:0f:4c:
21:ac:33:ad:a8:57:db:fc:ed:dd:18:ac:cb:23:00:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:C6:AE:EE:63:D1:2F:83:3E:85:06:2A:6E:30:B1:92:9E:F3:F6
X509v3 Authority Key Identifier:
keyid:C2:BF:B2:35:F5:70:65:2A:8B:CB:04:16:F6:FC:C4:44:3F:65:8C:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/wr-yNfVwZSqLywQW9vzERD9ljKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wr-yNfVwZSqLywQW9vzERD9ljKE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/iyzGru5j0S-DPoUGKm4wsZKe8_Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.180.0/24
Signature Algorithm: sha256WithRSAEncryption
69:90:a0:6b:84:64:14:a7:70:39:8a:25:1f:a5:77:83:58:84:
bf:8a:cb:9f:7a:dd:0a:ba:41:cf:3e:4e:5f:e2:3b:c8:94:fe:
8a:b5:33:af:ad:e0:cf:78:86:5a:02:c1:7e:ca:03:6f:af:a1:
ca:6e:ca:3f:8a:da:15:d9:06:d5:f7:42:c3:f2:0e:79:b1:a8:
51:96:b2:c3:ef:14:a2:19:91:ce:ec:a7:02:42:80:d7:5c:3c:
3d:e0:3c:e8:5e:66:9d:4c:f3:b0:53:1d:76:c4:19:b7:da:a5:
2b:77:f7:c1:5b:4f:4d:63:74:1d:9a:a5:4b:4f:3e:ab:09:55:
bf:75:5e:88:bf:31:f2:d0:8e:34:f5:84:96:77:a1:27:d7:cf:
98:3c:36:13:17:1d:80:ee:d4:21:f3:9c:90:ff:cc:fb:87:b9:
be:f8:b7:b3:10:69:5f:92:77:a1:13:20:22:da:e3:33:b6:04:
29:19:5d:76:82:08:83:db:09:a7:d8:7b:35:ec:1d:6b:5c:c4:
d3:b0:66:a0:34:e1:42:d5:1f:1b:f2:e0:5a:88:4b:14:f3:af:
f5:73:a8:77:a5:ab:c1:dd:b5:a8:0b:91:34:7e:e2:29:e6:f2:
5b:8d:7c:4a:37:fa:32:bc:33:51:b1:ff:2b:4d:17:a9:fd:ed:
a7:3a:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:55 2025 by rpki-client