Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/BM949r9rNNFmiE2hZJ2CsNvFnyE.roa
File: BM949r9rNNFmiE2hZJ2CsNvFnyE.roa (raw, json)
Hash identifier: 1QomDKiRwegkAUt2SGXKWdg8w4qkMFj2xF9UiJfg0Bw=
Subject key identifier: 04:CF:78:F6:BF:6B:34:D1:66:88:4D:A1:64:9D:82:B0:DB:C5:9F:21
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0962
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/BM949r9rNNFmiE2hZJ2CsNvFnyE.roa
Signing time: Mon 20 Jan 2025 01:30:16 +0000
ROA not before: Mon 20 Jan 2025 01:30:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 37968
IP address blocks: 103.168.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2402 (0x962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jan 20 01:30:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=04CF78F6BF6B34D166884DA1649D82B0DBC59F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:3d:92:d3:16:5b:9a:c1:a1:1b:6f:8d:12:
42:5d:62:8c:3b:68:4b:cd:e8:7f:13:aa:2c:b7:f1:
5a:38:0b:75:79:b4:5f:3a:d0:04:0b:08:8b:95:28:
c3:ae:4c:c5:1d:6d:78:0f:3c:50:e8:c1:b8:2f:89:
17:e5:57:09:82:ac:4c:28:a4:db:2c:41:f7:ec:16:
54:b7:cb:d7:1e:29:9a:7e:11:9f:9a:b5:ee:82:39:
11:47:c2:61:15:ad:0c:da:a3:f8:42:ec:47:9d:7e:
02:9c:80:a8:2a:27:0d:3b:95:c5:82:6a:52:fb:65:
c3:9f:e2:45:73:23:79:fb:ce:65:00:4e:cb:b4:b1:
4a:c6:39:75:53:47:f5:a7:18:03:62:c6:f4:cc:0d:
22:18:02:15:52:e2:93:35:00:2b:94:7d:53:3c:85:
49:a3:57:1b:fa:19:64:a7:ce:5e:7f:e4:d5:1b:a1:
2b:42:be:b3:a1:cf:d9:1b:a1:fe:13:cf:a8:74:43:
bc:25:4f:3a:a1:b3:30:35:c0:d1:67:dc:e4:74:6c:
fe:bd:21:c6:1e:8d:c7:2f:e8:51:a3:72:9e:0a:4e:
90:ec:a9:36:87:ba:67:aa:3e:00:81:ad:c8:4e:0d:
7c:9d:4d:0b:da:1f:e0:d3:1a:b7:f7:ea:c1:24:f5:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:78:F6:BF:6B:34:D1:66:88:4D:A1:64:9D:82:B0:DB:C5:9F:21
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/BM949r9rNNFmiE2hZJ2CsNvFnyE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.98.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:47:73:27:cb:6d:f9:d0:02:4f:22:1c:85:f5:da:46:9b:1b:
12:5d:b9:eb:a5:43:27:9b:ad:88:5b:e3:c9:a5:b2:8a:d2:d9:
7c:95:59:e0:74:b8:91:8d:bf:a2:bd:60:96:d5:f2:92:c9:b4:
5e:23:13:c6:1d:1d:db:4e:b7:7d:af:9a:7e:31:f8:8a:ea:51:
e3:97:dd:5d:af:5c:03:83:c5:85:d3:23:99:e0:cb:05:41:41:
8f:df:6b:c6:9d:7a:52:8c:5e:f0:82:81:0f:52:24:0e:81:74:
6f:68:bd:18:7c:ed:e6:7e:a9:07:cd:52:46:62:4e:28:90:d3:
14:fd:c7:ab:4f:b6:2a:5e:3c:3b:6b:a1:06:9a:78:9b:0f:ab:
4d:a5:4c:23:1e:4a:56:a2:93:02:a3:6f:b7:89:13:c7:5f:70:
c7:9b:16:d2:a1:6e:7a:ef:87:9e:9f:3b:fa:14:58:fc:31:3d:
b5:04:80:2a:c9:4c:ad:7f:eb:15:31:a7:bf:af:6e:d0:b5:44:
f8:ac:fa:2a:96:5e:66:6d:52:6e:47:03:1e:31:dd:91:05:27:
50:2c:3c:9c:bf:d7:ce:a8:08:a8:be:15:a2:38:94:6d:2a:47:
e5:66:8c:f8:ec:0b:6f:f6:02:56:17:da:49:06:1b:fe:cb:0c:
3d:6b:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:55 2025 by rpki-client