Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/6-xlf6xO8awTyKHoFMtKhVE52Sk.roa
File: 6-xlf6xO8awTyKHoFMtKhVE52Sk.roa (raw, json)
Hash identifier: bhR9N5yg2g44NvdQbo6z6UZJHDLBNGmMnE9oAUh7/DE=
Subject key identifier: EB:EC:65:7F:AC:4E:F1:AC:13:C8:A1:E8:14:CB:4A:85:51:39:D9:29
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18C4
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6-xlf6xO8awTyKHoFMtKhVE52Sk.roa
Signing time: Fri 17 Jan 2025 01:25:32 +0000
ROA not before: Fri 17 Jan 2025 01:25:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6340 (0x18c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EBEC657FAC4EF1AC13C8A1E814CB4A855139D929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:c8:2d:40:9b:5d:75:7d:f4:38:9b:e4:b6:
0b:55:5a:8f:e9:3d:16:1d:31:bc:1b:70:aa:83:64:
80:36:95:10:0e:36:70:de:1f:85:05:d7:77:17:a0:
d5:19:2e:a0:9a:5b:d3:85:a9:f2:ac:25:da:4a:6b:
ad:e8:72:c2:ef:28:a6:37:86:04:e3:51:b7:d0:0e:
15:ab:80:c8:12:bf:0d:18:f6:2c:d3:7d:0e:c1:4e:
1b:e2:ca:69:d3:1a:fe:e8:d6:2b:ce:bf:65:dd:a8:
64:11:8f:bf:e3:c1:9f:d8:84:96:f4:4a:84:b9:31:
ac:0e:ac:8c:80:57:19:f3:a3:a0:28:ec:d6:c4:2e:
1f:d6:2c:9e:26:66:fe:33:f4:ea:80:9b:ee:ac:f5:
77:98:84:8b:d3:0d:a4:1c:7d:83:ed:b2:e5:c3:c0:
23:10:58:2c:27:f4:57:7d:1f:6a:b9:c4:16:63:b1:
73:e1:37:d0:f0:f7:c2:3e:64:5e:3c:8e:bf:ed:d7:
d6:e1:07:98:71:e1:1c:ab:48:ec:ec:3d:d7:70:dd:
d4:e9:9a:11:37:ba:51:10:8a:34:e0:74:76:62:21:
35:0a:fd:6c:6d:3e:11:94:7d:30:63:54:2c:5c:2f:
eb:0b:02:59:38:00:24:9b:f2:6d:66:ce:cb:a6:50:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EC:65:7F:AC:4E:F1:AC:13:C8:A1:E8:14:CB:4A:85:51:39:D9:29
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6-xlf6xO8awTyKHoFMtKhVE52Sk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.12.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:ab:c0:6a:19:63:4d:3e:7b:21:48:08:01:0e:f8:f9:2b:28:
37:8f:59:15:ac:b4:de:08:17:19:9e:37:2c:b6:73:d2:60:f3:
09:40:50:79:05:ec:f4:89:2d:39:71:d4:22:85:3b:15:25:03:
ff:a3:b7:fc:cb:42:81:ba:9c:de:df:ee:db:82:58:db:16:40:
e2:9c:26:22:b3:66:fc:49:7c:68:86:4c:90:34:6c:a3:69:00:
03:e6:7f:ff:bd:10:31:d3:0b:26:b0:6d:ee:ac:29:b8:ae:70:
3b:94:32:b5:ae:d8:b6:a5:20:c8:64:a3:1e:d4:69:52:02:7f:
7f:29:8a:5d:c1:00:04:3e:d3:56:c9:bd:ac:42:50:4a:36:0b:
35:1f:03:ae:df:a8:31:22:26:fa:67:59:b4:42:ac:0b:ee:39:
0f:c9:5d:eb:71:89:6f:ea:9f:ae:83:be:ad:21:bb:cd:89:44:
54:23:11:09:18:c2:ef:60:b1:57:b9:75:2e:16:78:40:43:d0:
97:4b:0b:2e:b1:20:60:23:73:0e:7a:e1:8d:d9:15:c1:c5:27:
8d:cb:5f:47:9b:9e:60:8b:94:90:dc:f4:8c:10:09:83:bf:16:
67:c2:df:4b:86:08:88:c2:e7:89:b7:15:dc:78:61:70:86:f7:
9e:f8:35:30
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVCRUM2NTdGQUM0RUYx
QUMxM0M4QTFFODE0Q0I0QTg1NTEzOUQ5MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpB8gtQJtddX30OJvktgtVWo/pPRYdMbwbcKqDZIA2lRAONnDe
H4UF13cXoNUZLqCaW9OFqfKsJdpKa63ocsLvKKY3hgTjUbfQDhWrgMgSvw0Y9izT
fQ7BThviymnTGv7o1ivOv2XdqGQRj7/jwZ/YhJb0SoS5MawOrIyAVxnzo6Ao7NbE
Lh/WLJ4mZv4z9OqAm+6s9XeYhIvTDaQcfYPtsuXDwCMQWCwn9Fd9H2q5xBZjsXPh
N9Dw98I+ZF48jr/t19bhB5hx4RyrSOzsPddw3dTpmhE3ulEQijTgdHZiITUK/Wxt
PhGUfTBjVCxcL+sLAlk4ACSb8m1mzsumUF+FAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU6+xlf6xO8awTyKHoFMtKhVE52SkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzYteGxmNnhPOGF3VHlL
SG9GTXRLaFZFNTJTay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3QwwDQYJKoZIhvcNAQELBQADggEBAN2rwGoZY00+eyFICAEO+PkrKDePWRWs
tN4IFxmeNyy2c9Jg8wlAUHkF7PSJLTlx1CKFOxUlA/+jt/zLQoG6nN7f7tuCWNsW
QOKcJiKzZvxJfGiGTJA0bKNpAAPmf/+9EDHTCyawbe6sKbiucDuUMrWu2LalIMhk
ox7UaVICf38pil3BAAQ+01bJvaxCUEo2CzUfA67fqDEiJvpnWbRCrAvuOQ/JXetx
iW/qn66Dvq0hu82JRFQjEQkYwu9gsVe5dS4WeEBD0JdLCy6xIGAjcw564Y3ZFcHF
J43LX0ebnmCLlJDc9IwQCYO/FmfC30uGCIjC54m3Fdx4YXCG9574NTA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:33 2025 by rpki-client