Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/oGVNYraFzoy23d28dMWFOXR7bQ4.roa
File: oGVNYraFzoy23d28dMWFOXR7bQ4.roa (raw, json)
Hash identifier: gxig9kWgKm7yjMUYJRwX7ylRUrHYzX6b/8/0eoj+2TE=
Subject key identifier: A0:65:4D:62:B6:85:CE:8C:B6:DD:DD:BC:74:C5:85:39:74:7B:6D:0E
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 0F5E
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/oGVNYraFzoy23d28dMWFOXR7bQ4.roa
Signing time: Tue 15 Oct 2024 09:41:08 +0000
ROA not before: Tue 15 Oct 2024 09:41:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137443
IP address blocks: 103.218.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3934 (0xf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Oct 15 09:41:08 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A0654D62B685CE8CB6DDDDBC74C58539747B6D0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:09:63:9b:d4:a8:77:bb:39:f9:c6:ca:0d:
55:c1:56:c6:a4:3e:94:30:1a:37:fc:96:35:fe:d6:
19:1d:59:98:30:c3:22:b4:fc:ed:c7:44:8a:05:53:
e2:fa:a3:20:3f:f4:9d:03:97:9e:b6:ff:1b:8e:c4:
1d:43:5e:44:3a:48:fa:c6:a7:8d:69:88:35:d6:46:
7a:63:2e:d1:ec:81:38:80:73:dd:bf:11:13:81:02:
db:aa:fd:ae:d1:45:ae:6e:ca:c3:e1:1e:70:26:db:
59:e0:8d:c6:58:da:74:50:df:84:f9:b7:7f:1c:7f:
33:22:f2:26:f6:33:7f:ce:68:93:da:1f:e7:31:6b:
c2:79:a0:4a:0b:db:db:34:55:2f:69:d8:80:a0:ee:
90:4d:c9:cf:05:92:cc:59:9b:78:78:27:36:5f:99:
8d:fd:af:6e:0b:8e:90:9f:04:fc:5d:e8:36:54:ba:
5d:70:ed:3d:c8:60:29:ea:4d:08:d5:c6:df:4f:cf:
48:e2:27:07:3a:37:96:04:7f:1b:49:81:7d:cd:d2:
03:34:4d:8c:4e:61:78:47:78:09:76:90:3c:f1:68:
bd:19:69:57:20:4d:34:ad:dd:b1:43:9d:ab:72:d1:
05:e9:62:f4:83:61:5e:f5:fe:c3:c7:b5:02:96:0b:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:4D:62:B6:85:CE:8C:B6:DD:DD:BC:74:C5:85:39:74:7B:6D:0E
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/oGVNYraFzoy23d28dMWFOXR7bQ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.218.95.0/24
Signature Algorithm: sha256WithRSAEncryption
22:99:4c:00:0a:95:13:ae:b3:03:b9:2a:34:db:4e:33:37:4f:
74:24:f4:32:08:0b:94:2f:3c:0c:63:f7:3e:84:27:c6:d4:63:
ea:b9:4b:ac:d1:f8:cd:63:14:27:d5:52:1c:14:96:90:11:db:
63:61:d8:26:ef:77:2d:4a:73:19:a5:86:bf:8a:bf:40:46:4b:
93:b9:64:1b:c8:0d:7a:ed:4d:8e:6b:37:04:d1:23:ac:8b:aa:
ca:41:65:05:9f:d8:e9:9d:2c:49:20:c9:4a:c3:91:d8:76:61:
89:7c:68:f5:d5:59:4a:ac:59:53:b3:3b:c0:e7:f6:da:fe:cb:
b9:cc:4c:a9:b1:47:f7:2a:63:b4:7e:53:f3:a2:0b:2d:de:d0:
4f:d4:d8:94:28:04:a3:9f:2b:b8:53:57:40:35:3b:ee:f5:39:
15:20:06:28:e1:a8:b0:46:3c:2f:07:c9:bc:2a:17:d9:68:93:
6f:0b:79:be:c2:16:f3:e5:cc:8a:06:a6:c4:b8:1a:0d:7b:c7:
36:e6:19:e7:72:e3:50:b7:3b:14:b7:23:14:f3:2c:8a:9b:10:
04:60:07:f8:cb:89:c0:8e:b1:78:9b:99:e3:c7:94:be:d1:f4:
6c:3f:a8:51:c5:92:13:f4:2b:dd:32:73:fc:01:a1:88:81:4b:
40:92:0d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:58 2025 by rpki-client