Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/ierKU4Xn8nhdr_trK9WuyEbyDag.roa
File: ierKU4Xn8nhdr_trK9WuyEbyDag.roa (raw, json)
Hash identifier: TbUHklGoZRpFwofYNbZx/ZxS2+ELxSv2EKBS157dfVI=
Subject key identifier: 89:EA:CA:53:85:E7:F2:78:5D:AF:FB:6B:2B:D5:AE:C8:46:F2:0D:A8
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0CDC
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/ierKU4Xn8nhdr_trK9WuyEbyDag.roa
Signing time: Fri 24 May 2024 02:24:42 +0000
ROA not before: Fri 24 May 2024 02:24:42 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 211392
IP address blocks: 103.79.228.0/24 maxlen: 24
103.79.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: May 24 02:24:42 2024 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=89EACA5385E7F2785DAFFB6B2BD5AEC846F20DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:0e:76:b4:ca:54:33:54:3f:6e:89:b4:3a:
fc:c1:6d:b1:c1:06:ca:03:5a:b7:66:54:70:5b:91:
f1:e8:d8:8e:f1:c7:6c:92:99:05:90:55:50:93:2e:
03:f5:1f:e9:19:43:06:8f:96:37:04:5a:b2:b9:b6:
3f:79:fe:09:74:29:af:3c:9d:34:84:f6:52:6d:c6:
81:63:14:e6:08:89:05:3a:42:6c:46:18:00:c0:28:
1f:6e:84:f4:30:db:3b:19:96:cb:d7:17:b9:9f:49:
d2:75:35:96:07:00:9e:7a:cf:66:72:3f:0a:64:59:
dd:e2:3d:9a:8a:5f:1f:1c:3e:99:73:31:52:af:26:
05:17:d8:e8:22:14:ed:2b:b4:c2:89:f2:61:f1:4e:
4d:1a:3b:74:83:7d:ff:8e:89:eb:f8:e3:5b:d6:43:
71:86:6a:37:6e:93:c1:51:07:ba:bb:cf:32:84:f3:
e7:4b:9e:61:30:37:bb:98:8f:e6:a6:63:93:77:6c:
e5:84:05:ed:d7:90:cf:dc:9a:bb:86:2b:3f:f7:aa:
a9:3e:de:ee:0f:12:ae:e2:8b:6a:84:bf:5e:e2:5e:
ee:2e:18:63:c1:90:34:7a:5e:e2:4a:f8:75:d9:f0:
7d:d8:10:81:14:56:f9:a8:05:62:de:c8:84:27:45:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:CA:53:85:E7:F2:78:5D:AF:FB:6B:2B:D5:AE:C8:46:F2:0D:A8
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/ierKU4Xn8nhdr_trK9WuyEbyDag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
db:c8:b6:a5:46:9f:14:74:de:75:5d:2e:d9:d2:26:71:12:b1:
b8:1d:1c:ce:da:b2:00:83:48:56:88:2c:87:20:f9:99:40:97:
bd:c9:7e:5c:39:cb:d3:67:fe:89:11:91:21:d1:07:57:81:d8:
b7:35:ed:e1:15:38:d7:62:16:0b:f3:b1:2b:59:cf:49:93:b5:
09:21:03:a9:9e:1f:81:7e:a4:54:b6:dd:c4:ed:c5:8d:8e:d4:
df:b8:73:28:3d:03:4f:c7:71:a9:0c:98:a8:39:96:4c:fd:23:
3f:49:68:2b:ab:13:9a:f4:16:1c:14:a0:99:99:df:f0:8f:2e:
33:6d:9d:35:13:92:e2:75:57:d5:37:25:8e:30:db:7d:91:a5:
d3:1f:53:41:25:b6:7a:69:fc:fd:6b:ec:c7:f2:29:57:ad:3b:
48:d4:23:8b:2d:a7:5e:53:3f:63:8e:cb:7c:28:69:1b:81:3a:
aa:a6:98:2b:3a:61:24:a2:4a:8b:2a:5e:09:83:3e:f9:4b:77:
28:c8:17:10:3f:2f:ad:c8:39:6f:34:e8:c4:4c:c1:ac:e6:46:
16:25:df:3b:46:0e:81:88:96:b5:fb:a2:bb:24:b6:aa:0f:36:
10:e4:ba:e6:eb:ed:0b:4e:68:59:7c:bd:58:21:e5:e3:ff:45:
46:cd:c7:e4
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw
OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNDA1MjQw
MjI0NDJaFw0yNDA4MTAwNzQxMTNaMDMxMTAvBgNVBAMTKDg5RUFDQTUzODVFN0Yy
Nzg1REFGRkI2QjJCRDVBRUM4NDZGMjBEQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt1w52tMpUM1Q/bom0OvzBbbHBBsoDWrdmVHBbkfHo2I7xx2yS
mQWQVVCTLgP1H+kZQwaPljcEWrK5tj95/gl0Ka88nTSE9lJtxoFjFOYIiQU6QmxG
GADAKB9uhPQw2zsZlsvXF7mfSdJ1NZYHAJ56z2ZyPwpkWd3iPZqKXx8cPplzMVKv
JgUX2OgiFO0rtMKJ8mHxTk0aO3SDff+Oiev441vWQ3GGajduk8FRB7q7zzKE8+dL
nmEwN7uYj+amY5N3bOWEBe3XkM/cmruGKz/3qqk+3u4PEq7ii2qEv17iXu4uGGPB
kDR6XuJK+HXZ8H3YEIEUVvmoBWLeyIQnRehRAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUierKU4Xn8nhdr/trK9WuyEbyDagwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R
7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2
OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvaWVyS1U0WG44bmhk
cl90cks5V3V5RWJ5RGFnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEA28i2pUafFHTedV0u2dImcRKxuB0c
ztqyAINIVogshyD5mUCXvcl+XDnL02f+iRGRIdEHV4HYtzXt4RU412IWC/OxK1nP
SZO1CSEDqZ4fgX6kVLbdxO3FjY7U37hzKD0DT8dxqQyYqDmWTP0jP0loK6sTmvQW
HBSgmZnf8I8uM22dNROS4nVX1TcljjDbfZGl0x9TQSW2emn8/Wvsx/IpV607SNQj
iy2nXlM/Y47LfChpG4E6qqaYKzphJKJKiypeCYM++Ut3KMgXED8vrcg5bzToxEzB
rOZGFiXfO0YOgYiWtfuiuyS2qg82EOS65uvtC05oWXy9WCHl4/9FRs3H5A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:36 2025 by rpki-client