Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/c7QiWWHGdCFDYC7nN4W5_rLRu40.roa
File: c7QiWWHGdCFDYC7nN4W5_rLRu40.roa (raw, json)
Hash identifier: Kp/USaGBA5FEHNzQFrbjqDb0Q6N2VDLnQJFi98sKlCA=
Subject key identifier: 73:B4:22:59:61:C6:74:21:43:60:2E:E7:37:85:B9:FE:B2:D1:BB:8D
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0E1C
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/c7QiWWHGdCFDYC7nN4W5_rLRu40.roa
Signing time: Sat 27 Jul 2024 07:45:17 +0000
ROA not before: Sat 27 Jul 2024 07:45:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4134
IP address blocks: 103.79.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3612 (0xe1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Jul 27 07:45:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=73B4225961C6742143602EE73785B9FEB2D1BB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:9a:cd:eb:25:ce:72:81:94:34:5e:9a:4a:
5d:3a:9b:5c:e1:72:c1:f8:ad:00:80:d0:80:e7:61:
ce:2c:b8:8a:ec:5d:28:ee:63:96:39:46:9e:b5:1b:
13:99:30:9b:78:c9:cc:a7:94:20:bd:76:3e:32:f8:
08:cc:f3:f5:e9:e5:d5:9a:c1:0a:7c:18:6d:2a:1c:
df:8e:d4:02:d8:7b:04:88:94:d6:50:46:c5:45:a2:
25:bb:81:3a:ab:7c:fa:41:da:e9:e1:50:ba:b5:82:
3c:fd:a7:2b:90:78:02:f1:d4:de:f4:d5:bf:5b:63:
5a:25:b2:1b:72:c0:90:93:a1:a7:72:e6:6d:af:95:
eb:7e:0f:71:6c:4b:16:74:31:5d:3c:17:ba:db:35:
b7:dd:13:0c:23:7d:a2:c7:9a:91:0e:86:aa:db:60:
ce:89:d3:6f:b5:91:e2:e4:48:b1:6e:54:1b:fe:fa:
70:e2:d5:2e:7e:3d:23:77:47:18:cd:f4:bc:4d:75:
8e:be:f8:bd:8b:9c:7b:55:d8:05:55:94:8c:21:74:
b2:45:cc:68:70:27:a3:ae:a0:3b:18:7a:82:f2:64:
5f:63:45:7c:1a:b6:ad:61:39:63:94:ac:b2:88:86:
8e:60:86:6a:62:b4:58:2c:25:67:a1:b7:de:de:81:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B4:22:59:61:C6:74:21:43:60:2E:E7:37:85:B9:FE:B2:D1:BB:8D
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/c7QiWWHGdCFDYC7nN4W5_rLRu40.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
41:fc:70:ea:0c:5f:1c:82:09:2d:d8:8a:87:ab:1d:6e:92:29:
42:ac:a3:22:5d:8a:ea:72:da:fa:65:30:e2:0a:f7:b0:f2:ea:
f4:a4:59:0e:d5:bd:d7:08:d4:a4:cd:c1:60:f0:d1:a0:3d:0e:
a9:86:bf:a4:61:e5:b6:0a:61:65:95:7e:d5:32:ab:c9:6b:a6:
a7:24:fe:82:8a:55:2f:1e:6c:21:8c:b4:60:92:9d:9a:bd:02:
27:0c:ed:4c:ca:f1:e2:3a:3e:33:4b:a6:77:32:0a:47:cd:86:
14:e0:f4:ff:d9:22:7d:be:18:69:26:1c:e3:8e:39:79:83:b8:
27:63:77:77:a2:03:5f:71:d5:20:65:87:a0:30:e5:2b:a9:c3:
47:8a:20:1a:c8:f3:7b:9b:2d:b0:95:c9:8f:e9:af:36:ea:40:
30:c3:05:d4:96:40:fc:bf:0e:00:ea:1c:86:69:a0:a7:c7:77:
5c:4b:56:6e:39:43:6e:c2:b8:18:65:7f:b6:fa:56:a6:0f:72:
84:87:a8:56:8d:7a:7a:98:cc:ba:f8:2f:b4:49:d9:a1:1e:32:
fb:44:cd:25:c1:13:e7:3e:de:72:2b:08:b5:f4:3a:dc:65:41:
1a:98:b7:1f:4d:f1:2d:00:14:08:a9:3a:df:f4:c2:41:69:36:
c7:64:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:14:15 2025 by rpki-client