Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/qaBvvsxDIPeB0c9gwUi-6yNKk84.roa
File: qaBvvsxDIPeB0c9gwUi-6yNKk84.roa (raw, json)
Hash identifier: G0oiCKs+Q3Psu8ipBxtDZS55vrg7ksXmudQZoktEK0k=
Subject key identifier: A9:A0:6F:BE:CC:43:20:F7:81:D1:CF:60:C1:48:BE:EB:23:4A:93:CE
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0D
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/qaBvvsxDIPeB0c9gwUi-6yNKk84.roa
Signing time: Wed 03 Aug 2022 12:02:41 +0000
ROA not before: Wed 03 Aug 2022 12:02:41 +0000
ROA not after: Thu 03 Aug 2023 05:46:02 +0000
asID: 209242
IP address blocks: 103.79.228.0/24 maxlen: 24
103.79.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Aug 3 12:02:41 2022 GMT
Not After : Aug 3 05:46:02 2023 GMT
Subject: CN=A9A06FBECC4320F781D1CF60C148BEEB234A93CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:b2:f9:fd:fe:33:d6:d3:f4:cc:38:f0:b4:
90:83:dc:89:dc:6e:6d:b8:7c:94:bb:f0:ec:f1:98:
d3:05:47:d9:04:df:1a:d1:19:f7:ed:0e:4a:43:30:
2a:da:b0:bd:8d:10:7c:14:7a:ae:cf:d6:a2:51:40:
ac:9c:a3:f2:38:19:d3:dc:49:22:e7:be:bc:d5:e4:
13:fd:e3:dd:24:fd:5c:d9:f4:5e:19:c5:ed:28:c2:
7e:f7:9d:3d:4b:48:0f:07:1e:3b:de:16:2d:e7:93:
96:94:aa:5f:87:77:a8:51:86:e4:2f:7f:bf:f4:de:
3b:60:48:82:ce:06:62:c5:3a:73:ae:c2:c6:85:5f:
3b:f6:6f:3f:48:10:90:b3:35:7a:a0:86:2a:4c:9a:
94:d4:3b:1b:ce:c8:03:fc:02:97:b8:ac:ac:ac:38:
b8:c3:44:79:82:bf:4d:4d:9e:54:78:c8:63:bd:c6:
dc:50:4b:78:19:d2:4e:7d:cb:d6:02:93:67:18:b8:
a4:d5:b8:1a:33:a3:4f:b6:9b:b7:75:d5:78:04:90:
e4:42:32:fb:f0:bb:89:b8:50:76:f0:1c:9b:8a:44:
b3:c6:a3:24:61:c3:f9:b5:e3:86:d5:dc:7f:8c:82:
b1:b5:41:37:8c:73:86:86:2f:d8:72:38:63:59:6b:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:6F:BE:CC:43:20:F7:81:D1:CF:60:C1:48:BE:EB:23:4A:93:CE
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/qaBvvsxDIPeB0c9gwUi-6yNKk84.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
81:d5:47:ae:3a:fd:44:13:f7:6d:b4:56:58:83:9d:18:ae:53:
93:2c:2c:06:98:cf:b9:fd:92:70:63:13:52:5a:f0:27:65:92:
21:38:aa:ed:9f:8b:bf:b4:ac:dd:d2:28:3b:5a:5a:92:75:19:
6f:3c:2a:e8:3d:fd:57:bd:50:09:5b:0a:02:ef:38:c2:74:9d:
11:e4:f2:d5:72:db:10:47:4b:da:66:cc:53:c5:c2:a9:03:6d:
95:e7:02:2d:ed:fb:c8:f4:4a:46:a2:54:be:ea:71:b9:39:d5:
66:63:61:cc:0d:60:83:be:e9:20:f2:83:5d:47:f0:26:ce:1f:
0f:a5:7b:73:cc:93:20:29:0f:2c:ad:73:1b:28:83:42:e1:e8:
9f:66:46:28:0f:8a:dd:54:de:5e:77:28:04:26:1b:d9:32:c1:
66:67:53:08:f8:ca:0d:61:ab:d6:74:bc:ec:0f:ea:1b:2c:a5:
59:1a:e7:36:83:aa:fb:d9:14:3e:1f:f0:6b:98:9e:f7:d1:cd:
c0:9f:2d:7a:86:9f:ba:f2:d6:9b:e7:2d:c5:ab:d6:57:3e:86:
a5:c5:36:5c:8f:78:50:a7:58:bf:0c:8c:b8:a3:4c:31:85:a1:
3a:95:b0:f7:18:28:f2:3e:ee:53:72:0b:aa:cc:f4:cc:b3:1c:
dc:ac:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:59 2025 by rpki-client