Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/EtHz09zOM4faNFbYeDef2pnC7bE.roa
File: EtHz09zOM4faNFbYeDef2pnC7bE.roa (raw, json)
Hash identifier: CoukJRU2yaBIsZq0TmfNC9BJ1IS91efu2gzHmVlKLNk=
Subject key identifier: 12:D1:F3:D3:DC:CE:33:87:DA:34:56:D8:78:37:9F:DA:99:C2:ED:B1
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0E1D
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/EtHz09zOM4faNFbYeDef2pnC7bE.roa
Signing time: Sat 27 Jul 2024 07:45:18 +0000
ROA not before: Sat 27 Jul 2024 07:45:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 146806
IP address blocks: 103.79.228.0/24 maxlen: 24
103.79.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3613 (0xe1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Jul 27 07:45:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=12D1F3D3DCCE3387DA3456D878379FDA99C2EDB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:89:db:3a:52:c3:8e:f5:ae:e4:95:ec:2a:
70:30:91:5d:5c:3f:87:53:2b:86:cc:15:33:30:3b:
ee:88:7a:32:a4:42:0d:ff:18:b4:46:ed:f5:a8:7a:
18:02:8a:59:2a:b8:1f:11:2b:83:a4:10:e7:df:f9:
7e:c2:38:4c:16:bd:b1:e9:56:db:12:c9:aa:74:a7:
35:74:2a:02:6c:87:c1:cc:70:c4:b1:b7:db:f8:7f:
d5:61:c9:4d:5c:42:12:61:47:88:b2:98:87:76:78:
a6:74:35:e0:04:a6:0f:f7:c8:bd:41:3a:c3:4a:cd:
e1:2c:d1:e3:51:13:9f:b7:5d:72:43:8e:a6:fa:c8:
a4:74:d5:63:d4:1b:1c:f6:55:5b:53:b0:41:09:69:
ca:8d:d9:d6:67:55:80:35:41:ac:c9:b9:54:9f:74:
89:36:ba:5b:13:7a:7e:41:67:fe:b7:69:c1:cb:50:
c5:33:58:7a:ee:03:e3:89:e3:29:01:4d:01:59:7c:
f5:13:b9:d5:21:b2:d0:92:55:02:72:a5:f3:69:53:
1e:54:52:63:14:b0:e4:48:c0:a2:97:dd:a4:22:f2:
31:cd:98:88:28:c2:b7:c4:9e:7a:c0:66:c9:9c:b8:
ec:97:cb:9c:59:4e:03:d6:5f:f2:e1:e4:d0:0d:24:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:F3:D3:DC:CE:33:87:DA:34:56:D8:78:37:9F:DA:99:C2:ED:B1
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/EtHz09zOM4faNFbYeDef2pnC7bE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
32:ea:e7:e0:e0:74:df:78:c5:0b:2b:8a:ee:f4:fa:9e:20:7b:
a0:78:0a:27:b0:09:ae:73:78:4d:1b:81:0b:15:f0:64:49:3d:
04:28:6b:8d:a4:11:92:ad:ee:ea:7c:5d:c9:28:a1:0f:83:56:
8e:7e:2f:ba:87:a2:c4:1d:ce:06:85:7c:89:f2:1c:c0:fc:b9:
29:fe:a4:a7:27:61:29:2f:38:c7:fe:0b:df:d6:2d:34:e2:c5:
7d:98:82:9d:6a:3c:55:fb:c1:97:7f:36:b9:48:c4:03:83:85:
fa:2e:20:52:38:8e:44:64:72:4e:9e:fc:7d:93:e6:90:60:4b:
e1:1f:e9:cc:b0:58:5d:be:31:7d:8e:d1:64:23:74:70:46:72:
2d:07:51:7c:4a:55:b6:35:3d:cc:af:39:e6:7c:bf:c1:07:8b:
a9:a2:30:c9:c1:d7:9c:ec:3f:55:ec:4b:e0:ed:1b:ea:9c:ea:
f3:6b:b7:81:3c:d0:34:b5:46:7e:5e:8a:90:c2:d6:4e:d4:7d:
01:12:b5:fd:c7:4b:ed:12:2e:4b:b4:a6:0d:77:8e:33:a3:bf:
dd:9a:71:d0:73:f0:cc:b5:f0:6e:4f:eb:06:ab:1b:15:97:9f:
ea:ae:6b:cd:99:45:3e:a7:ab:94:90:e7:5a:e4:b8:ed:ca:8d:
ed:36:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:46 2025 by rpki-client