Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/4oNs-NuuzkKINbxsUjtxakOnAig.roa
File: 4oNs-NuuzkKINbxsUjtxakOnAig.roa (raw, json)
Hash identifier: +7W0/Dz0jG3oFEE9mjJJlwPgevhfguxO9sh3wbeIuT0=
Subject key identifier: E2:83:6C:F8:DB:AE:CE:42:88:35:BC:6C:52:3B:71:6A:43:A7:02:28
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14F0
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4oNs-NuuzkKINbxsUjtxakOnAig.roa
Signing time: Wed 11 Sep 2024 02:26:10 +0000
ROA not before: Wed 11 Sep 2024 02:26:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.221.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5360 (0x14f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:26:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E2836CF8DBAECE428835BC6C523B716A43A70228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:6a:35:f1:dd:67:cb:f1:ca:16:e1:08:9f:
23:8f:05:23:e2:6a:b2:b1:e2:ac:cc:28:79:b3:47:
36:05:ae:f4:d2:0e:91:b2:2b:d6:5a:26:68:f2:73:
6b:bf:df:f8:30:28:37:25:81:62:6f:4d:f0:e8:a4:
78:8f:a5:2e:eb:42:79:70:f7:eb:fe:eb:da:7e:b8:
a1:74:10:b1:49:b4:fb:7d:cf:9f:ca:9d:b0:3e:c3:
48:00:ec:27:cb:73:e4:e0:37:57:98:cb:f4:6c:7f:
b5:d1:81:18:e1:1e:1f:34:24:a2:39:62:13:e9:a7:
93:18:9a:c6:2e:d6:53:2d:cc:72:1e:cd:a5:49:c7:
b3:63:12:00:d0:53:26:9a:45:24:a8:ac:e1:1a:90:
9b:0c:40:e3:24:d1:5b:b4:96:dd:85:a8:c1:b2:bd:
89:46:3a:d0:b7:7c:53:a8:16:b7:93:90:92:1d:f9:
f6:02:91:5c:5a:ba:85:be:20:08:d9:20:49:41:a7:
bd:d5:ef:00:b4:d6:bd:90:16:a3:da:dc:fd:b7:5b:
13:d4:52:a5:a4:52:6a:10:28:77:7a:5e:81:20:f3:
46:ae:b8:51:4b:d9:c8:4d:30:9e:fd:dc:c2:82:28:
26:41:68:93:45:99:7a:b7:e8:b5:54:b9:f1:32:6b:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:6C:F8:DB:AE:CE:42:88:35:BC:6C:52:3B:71:6A:43:A7:02:28
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4oNs-NuuzkKINbxsUjtxakOnAig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3a:e9:67:b1:ed:04:46:9b:22:1a:ce:03:59:fc:5b:34:55:
41:a9:de:ca:4b:86:40:d2:d9:af:ba:7a:ca:9d:cd:7e:b7:ab:
dd:98:ea:50:ef:46:7c:49:c1:86:d3:4c:56:dd:56:42:7d:a8:
13:c4:3b:12:69:0d:a0:2a:63:e4:43:ef:0f:e4:ff:e9:e8:28:
48:41:b8:9b:93:02:ee:e3:01:e4:50:88:cd:3c:89:f0:1b:17:
21:62:27:1e:56:d4:cf:b7:a2:7d:3b:77:4c:01:b3:29:69:0b:
51:be:a5:b1:8e:12:7f:18:3a:03:32:3c:78:6b:9b:94:3e:57:
1e:22:20:9e:ad:82:63:11:d7:99:f6:de:13:2b:b9:e9:45:72:
26:74:3a:3b:b8:cd:91:08:c5:e0:d1:8e:f7:8d:03:3d:fc:72:
f3:5e:48:5b:43:61:21:6d:bd:64:d0:a5:80:60:cf:c2:c3:19:
00:8c:da:96:89:8a:22:f4:81:a7:b0:65:df:4f:9d:26:b9:ea:
40:e4:a9:df:ab:ff:e3:a9:26:63:ce:59:26:7c:c0:1b:34:09:
85:58:b8:eb:c7:24:d2:32:ca:3a:97:f7:d2:df:a8:89:f6:fc:
88:f6:20:01:58:0f:ae:f4:67:1a:c9:77:49:04:fb:0e:24:31:
d1:52:cb:60
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw
MjI2MTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUyODM2Q0Y4REJBRUNF
NDI4ODM1QkM2QzUyM0I3MTZBNDNBNzAyMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCFGo18d1ny/HKFuEInyOPBSPiarKx4qzMKHmzRzYFrvTSDpGy
K9ZaJmjyc2u/3/gwKDclgWJvTfDopHiPpS7rQnlw9+v+69p+uKF0ELFJtPt9z5/K
nbA+w0gA7CfLc+TgN1eYy/Rsf7XRgRjhHh80JKI5YhPpp5MYmsYu1lMtzHIezaVJ
x7NjEgDQUyaaRSSorOEakJsMQOMk0Vu0lt2FqMGyvYlGOtC3fFOoFreTkJId+fYC
kVxauoW+IAjZIElBp73V7wC01r2QFqPa3P23WxPUUqWkUmoQKHd6XoEg80auuFFL
2chNMJ793MKCKCZBaJNFmXq36LVUufEyay2RAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU4oNs+NuuzkKINbxsUjtxakOnAigwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzRvTnMtTnV1emtLSU5i
eHNVanR4YWtPbkFpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3REwDQYJKoZIhvcNAQELBQADggEBAKM66Wex7QRGmyIazgNZ/Fs0VUGp3spL
hkDS2a+6esqdzX63q92Y6lDvRnxJwYbTTFbdVkJ9qBPEOxJpDaAqY+RD7w/k/+no
KEhBuJuTAu7jAeRQiM08ifAbFyFiJx5W1M+3on07d0wBsylpC1G+pbGOEn8YOgMy
PHhrm5Q+Vx4iIJ6tgmMR15n23hMruelFciZ0Oju4zZEIxeDRjveNAz38cvNeSFtD
YSFtvWTQpYBgz8LDGQCM2paJiiL0gaewZd9PnSa56kDkqd+r/+OpJmPOWSZ8wBs0
CYVYuOvHJNIyyjqX99LfqIn2/Ij2IAFYD670ZxrJd0kE+w4kMdFSy2A=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:35 2025 by rpki-client