Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-eUMhXMDYNtryx9wROlBgZCIpdA.roa
File: -eUMhXMDYNtryx9wROlBgZCIpdA.roa (raw, json)
Hash identifier: 80e12qXXP9T2GFhOQINZ3lPKEGp5X96gp6TsXfNT2HU=
Subject key identifier: F9:E5:0C:85:73:03:60:DB:6B:CB:1F:70:44:E9:41:81:90:88:A5:D0
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 151B
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-eUMhXMDYNtryx9wROlBgZCIpdA.roa
Signing time: Wed 11 Sep 2024 02:30:08 +0000
ROA not before: Wed 11 Sep 2024 02:30:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.221.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5403 (0x151b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:30:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F9E50C85730360DB6BCB1F7044E941819088A5D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:63:9a:42:ed:ad:c1:57:bf:02:4c:dd:96:
dd:03:a6:8b:80:1b:92:5a:bd:ee:6e:f3:ab:a4:7f:
1b:6b:6a:9c:c5:a2:fe:1c:d5:dd:8b:90:c3:fd:67:
d8:85:9a:88:fb:ad:4f:1b:da:24:44:a1:a7:71:59:
26:a1:5f:83:32:2f:c5:a5:f5:00:ea:a7:a6:55:65:
87:51:a5:6d:8a:8f:6c:4c:95:69:27:d5:fc:8a:80:
cb:13:ed:51:d4:b9:1d:ed:03:ba:bf:95:cb:41:73:
12:bc:77:ba:e5:48:99:48:c2:17:3e:0e:99:cc:8e:
51:ab:f0:62:cc:2d:48:1b:d6:e9:2a:10:3d:cb:84:
55:9f:3e:d5:de:82:ac:69:ef:33:b4:46:f5:bf:a2:
3a:b2:cd:ea:54:95:d1:07:ec:44:60:72:b2:49:5e:
09:5d:9f:3d:83:39:10:de:28:19:64:3e:f0:5e:b8:
7a:a4:58:62:5b:1e:d6:80:48:dd:28:cd:ae:b7:12:
7e:28:b3:8b:72:1d:b9:53:96:81:d2:f7:f5:f2:86:
26:61:25:66:ee:0a:9c:f7:29:61:b2:e9:9c:d1:6d:
47:89:5e:99:5e:59:1e:87:8c:fd:e4:92:48:b0:cb:
a3:97:ea:b3:eb:6c:81:d5:c7:b1:5c:33:20:37:1d:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E5:0C:85:73:03:60:DB:6B:CB:1F:70:44:E9:41:81:90:88:A5:D0
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-eUMhXMDYNtryx9wROlBgZCIpdA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.42.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c9:1d:0c:7a:fb:ce:26:13:35:b5:9f:26:66:7b:10:3e:1f:
4d:a2:70:79:ae:1e:a2:b5:43:58:25:3b:8a:75:6c:73:65:5e:
28:95:71:cf:10:e2:ae:76:3a:2e:54:f8:a3:d8:ce:41:69:f7:
d0:01:03:e1:ac:66:1d:57:ae:10:48:1b:d8:0c:c7:61:64:16:
34:8b:f8:b6:b9:89:5a:b0:08:fd:c3:c1:c9:6e:56:c5:4f:b5:
f1:13:c2:e5:55:cd:14:c1:a6:f4:50:2e:d6:dc:d5:99:b6:99:
99:6a:f1:31:a8:83:8a:1a:17:5a:81:16:bc:6a:1e:ab:60:25:
af:e8:c2:7f:7e:a8:7b:8b:05:6e:2f:f3:e8:e6:33:ee:b9:2e:
59:1e:da:24:9f:59:05:50:e6:34:68:17:af:b3:64:e0:39:e3:
33:aa:15:da:13:e3:b8:37:5f:dd:48:8c:47:19:b2:88:ed:ef:
d5:b4:76:90:ce:3a:65:10:7f:e2:7f:f6:f4:4c:2d:d0:7f:cb:
4e:d8:a3:f9:39:0e:1f:85:40:99:90:15:b9:05:ca:cd:90:d2:
b3:6e:16:44:99:84:5c:64:7f:42:71:09:96:5b:8c:b9:5a:69:
7a:bd:2f:00:8a:94:76:8e:0b:93:f5:b4:96:71:12:e3:74:f6:
a6:d5:e7:11
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw
MjMwMDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY5RTUwQzg1NzMwMzYw
REI2QkNCMUY3MDQ0RTk0MTgxOTA4OEE1RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPP2OaQu2twVe/Akzdlt0DpouAG5Jave5u86ukfxtrapzFov4c
1d2LkMP9Z9iFmoj7rU8b2iREoadxWSahX4MyL8Wl9QDqp6ZVZYdRpW2Kj2xMlWkn
1fyKgMsT7VHUuR3tA7q/lctBcxK8d7rlSJlIwhc+DpnMjlGr8GLMLUgb1ukqED3L
hFWfPtXegqxp7zO0RvW/ojqyzepUldEH7ERgcrJJXgldnz2DORDeKBlkPvBeuHqk
WGJbHtaASN0oza63En4os4tyHblTloHS9/XyhiZhJWbuCpz3KWGy6ZzRbUeJXple
WR6HjP3kkkiwy6OX6rPrbIHVx7FcMyA3HfBrAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU+eUMhXMDYNtryx9wROlBgZCIpdAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Ly1lVU1oWE1EWU50cnl4
OXdST2xCZ1pDSXBkQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3SowDQYJKoZIhvcNAQELBQADggEBADHJHQx6+84mEzW1nyZmexA+H02icHmu
HqK1Q1glO4p1bHNlXiiVcc8Q4q52Oi5U+KPYzkFp99ABA+GsZh1XrhBIG9gMx2Fk
FjSL+La5iVqwCP3DwcluVsVPtfETwuVVzRTBpvRQLtbc1Zm2mZlq8TGog4oaF1qB
FrxqHqtgJa/own9+qHuLBW4v8+jmM+65Llke2iSfWQVQ5jRoF6+zZOA54zOqFdoT
47g3X91IjEcZsojt79W0dpDOOmUQf+J/9vRMLdB/y07Yo/k5Dh+FQJmQFbkFys2Q
0rNuFkSZhFxkf0JxCZZbjLlaaXq9LwCKlHaOC5P1tJZxEuN09qbV5xE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:21 2025 by rpki-client