Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/V459FdrX88gah57bMf2CsiiX6H0.roa
File: V459FdrX88gah57bMf2CsiiX6H0.roa (raw, json)
Hash identifier: 2ZxD0WJjT0Mdpxof4+PRTxZ0epGJbVMCHeSG+eSti0k=
Subject key identifier: 57:8E:7D:15:DA:D7:F3:C8:1A:87:9E:DB:31:FD:82:B2:28:97:E8:7D
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0B
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/V459FdrX88gah57bMf2CsiiX6H0.roa
Signing time: Wed 03 Aug 2022 12:02:29 +0000
ROA not before: Wed 03 Aug 2022 12:02:29 +0000
ROA not after: Thu 03 Aug 2023 05:46:02 +0000
asID: 211392
IP address blocks: 103.79.228.0/24 maxlen: 24
103.79.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Aug 3 12:02:29 2022 GMT
Not After : Aug 3 05:46:02 2023 GMT
Subject: CN=578E7D15DAD7F3C81A879EDB31FD82B22897E87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:b1:31:1e:92:1c:95:bc:3e:78:d1:fb:11:
30:a4:29:1e:6f:bb:74:8e:fa:78:d1:fa:5e:51:89:
6b:3e:a2:12:50:0a:f9:13:eb:22:4c:7d:0f:16:ee:
65:7b:61:79:2f:d9:48:bb:69:b5:a7:99:d0:27:f9:
fd:39:ea:a7:6c:65:e8:d6:19:46:a8:45:e1:bf:c2:
2e:60:cf:e6:fd:84:9a:e9:50:64:fc:94:c2:53:66:
1d:47:bb:42:8d:79:57:5e:66:55:26:a7:2f:26:e7:
17:7e:03:a4:12:cb:fe:d0:00:e6:2a:6a:e1:42:b4:
ee:ff:79:60:90:5e:17:2d:b8:57:d8:bc:78:06:c2:
f0:cc:b2:a0:66:78:cb:4c:f3:b3:90:a2:6b:ac:a0:
b8:2a:c1:16:bd:3b:ca:2f:67:1b:d0:fd:3d:30:c1:
72:ba:aa:6e:3c:50:b2:40:03:69:87:0a:52:aa:73:
09:d1:1b:aa:6a:0c:03:eb:1f:a7:18:51:90:a2:cb:
0b:2e:c1:9b:13:46:38:5b:1c:7a:aa:75:53:69:5f:
84:30:23:3b:bb:1f:87:2f:ad:56:ef:17:1b:f1:0d:
ed:9e:17:b0:f3:3c:bb:d2:79:b1:4f:9b:a5:5c:03:
95:86:14:df:d0:e6:08:df:28:cc:9e:47:d0:9c:6d:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:7D:15:DA:D7:F3:C8:1A:87:9E:DB:31:FD:82:B2:28:97:E8:7D
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/V459FdrX88gah57bMf2CsiiX6H0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:f4:2a:7e:d2:7e:82:76:fa:27:49:50:3c:86:8a:0e:6c:3b:
99:a4:5d:5e:b3:9b:cd:51:aa:4e:b7:4f:da:5f:8f:55:d8:5e:
1f:4e:51:80:16:9e:aa:41:47:ad:ee:19:50:8f:18:ac:a1:85:
1d:3b:a4:02:59:7a:d1:8a:da:34:08:34:9b:a8:64:7d:d7:fe:
81:27:3c:0c:45:cd:fa:32:b0:1c:62:39:7b:59:63:f9:c8:0f:
24:b5:09:f8:57:0c:37:10:84:1f:04:8d:7f:e8:ec:ae:cc:d0:
a5:0f:8b:56:db:dc:8f:3c:5c:6d:bd:9f:62:f0:d6:ce:3f:5d:
b0:18:65:ec:bb:ca:d9:7b:98:3a:ed:3b:78:68:d5:09:28:a7:
27:63:db:67:80:b2:6a:85:5a:cf:4e:ba:1a:f5:12:1c:3c:11:
4b:4f:9d:79:0d:a1:41:5d:9e:2d:c7:03:62:19:27:43:6e:ae:
a4:1b:37:7c:f1:67:07:8f:32:15:73:bd:28:d5:d4:bd:be:d6:
86:dd:41:7d:ab:56:87:37:f8:8a:03:94:06:3b:08:58:69:1e:
b9:fa:c6:a0:c8:76:f7:b6:be:70:9a:54:21:62:bf:7a:fb:d1:
d6:94:e8:50:90:84:bd:b6:5b:0e:8f:31:70:c2:5e:32:d7:52:
a9:59:cf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:22 2025 by rpki-client