Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/1n4mryIyZhcvXV-NrmJOznRg1l0.roa
File: 1n4mryIyZhcvXV-NrmJOznRg1l0.roa (raw, json)
Hash identifier: l9F8xZ6IbrXD3iGrqKLWiy3Xl+uE0kzMVrEYmwrdDiU=
Subject key identifier: D6:7E:26:AF:22:32:66:17:2F:5D:5F:8D:AE:62:4E:CE:74:60:D6:5D
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0CD9
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/1n4mryIyZhcvXV-NrmJOznRg1l0.roa
Signing time: Fri 24 May 2024 02:24:41 +0000
ROA not before: Fri 24 May 2024 02:24:41 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 211392
IP address blocks: 103.79.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3289 (0xcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: May 24 02:24:41 2024 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=D67E26AF223266172F5D5F8DAE624ECE7460D65D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:ba:03:ff:c0:9d:2c:e1:39:fc:f9:2e:30:
fb:a6:6a:3b:23:d9:2e:d1:8e:71:a7:55:69:dd:ce:
a7:2e:de:60:1e:ec:99:ee:80:2c:97:4a:10:1a:c6:
ac:d8:0d:2c:2a:d3:5c:c2:9d:a8:e5:11:a1:d7:b0:
64:2f:31:00:5f:c9:2c:45:66:df:b1:db:66:56:c0:
08:ef:55:21:07:52:4f:4c:32:99:05:8e:0d:47:5f:
a2:ec:f6:b2:25:6f:c8:9c:f9:28:87:ef:72:60:28:
e4:9b:9c:42:39:de:6a:67:59:1a:dc:91:18:22:90:
f8:d6:e5:83:15:2f:cf:b9:e2:75:1a:66:0f:69:bb:
11:44:f5:2d:e2:c5:35:45:10:cb:9e:06:64:d3:54:
2f:6d:d1:6d:e7:ea:ff:4d:f6:67:35:3c:e0:ca:23:
91:d8:0f:cc:be:89:79:2a:43:dd:9a:e4:9d:69:cc:
58:94:58:d9:3c:fe:c0:5c:42:4d:91:ee:03:eb:ac:
ec:06:b8:a2:60:9c:c7:85:16:e6:d9:72:3e:77:3b:
a6:6c:cd:6d:33:e2:5e:34:66:fc:f9:82:57:af:93:
3b:5e:02:22:f9:16:c6:66:ba:4d:cd:00:50:aa:04:
a9:09:55:9b:2e:40:df:96:14:f9:0d:67:0d:16:ad:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:26:AF:22:32:66:17:2F:5D:5F:8D:AE:62:4E:CE:74:60:D6:5D
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/1n4mryIyZhcvXV-NrmJOznRg1l0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:1c:b2:3b:e8:26:07:bd:45:c9:d1:64:16:de:94:93:23:14:
ca:8a:e1:f3:b2:14:9d:26:c4:04:3a:df:aa:b5:98:2a:3a:db:
64:87:70:a7:ec:04:f3:32:11:f0:04:86:8a:28:16:28:32:1e:
a0:e2:4e:b9:6d:c9:a5:1f:d1:36:2a:fe:d3:0d:ef:9c:ca:f1:
bc:06:81:26:46:67:ed:e9:41:ca:fb:74:2a:68:de:f1:00:dd:
bd:34:e5:2b:59:7c:54:38:94:a8:4f:c2:c5:5b:b1:18:96:4a:
2c:8d:1d:ab:d2:57:f3:8b:83:a6:76:a1:76:c4:16:3c:91:12:
be:b5:3b:ad:a1:c1:2e:4e:40:1e:8f:aa:6d:dd:d4:eb:37:d1:
2f:ca:94:ea:e4:6b:4c:e7:a6:9a:37:c1:05:c4:15:0b:c4:fa:
74:98:56:b1:3f:25:85:a3:14:6c:83:41:bb:02:01:af:a2:9a:
26:92:67:05:0e:6a:40:95:95:4d:6b:6a:92:e6:dc:1a:b2:85:
66:48:27:a3:5c:57:e7:ca:0e:54:0c:33:4f:11:c8:04:cb:5d:
6e:ef:36:d6:cb:59:34:bf:09:df:48:1c:46:82:1d:63:3b:b4:
d9:34:00:79:bd:05:46:b8:14:e0:dd:42:c1:d8:d1:fd:11:eb:
70:16:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:51 2025 by rpki-client