Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/6CGut6J3H3pJXeh7UWnH35CZz1w.roa
File: 6CGut6J3H3pJXeh7UWnH35CZz1w.roa (raw, json)
Hash identifier: x0bCVhg3X4v3CmiohNVzUEPPaPQP/LDJomoTxY+sjiA=
Subject key identifier: E8:21:AE:B7:A2:77:1F:7A:49:5D:E8:7B:51:69:C7:DF:90:99:CF:5C
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1495
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6CGut6J3H3pJXeh7UWnH35CZz1w.roa
Signing time: Wed 11 Sep 2024 02:23:31 +0000
ROA not before: Wed 11 Sep 2024 02:23:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24373
IP address blocks: 103.221.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5269 (0x1495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E821AEB7A2771F7A495DE87B5169C7DF9099CF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:a3:b2:31:91:04:44:84:88:3e:75:ca:bd:
49:06:89:fe:0f:d6:b6:45:5c:d5:d7:bb:5a:01:48:
7e:90:35:03:48:24:cd:54:c5:9d:bd:e1:5d:9e:87:
61:9f:06:87:5c:20:e7:74:70:be:3e:19:4e:0c:ba:
ff:65:22:6f:7b:a0:96:f9:66:47:fa:aa:1b:58:47:
a0:8d:6b:9a:be:9a:ba:78:c8:e4:51:b2:d2:30:c0:
84:e9:ce:03:1f:19:d8:bb:82:e1:24:32:1e:1b:c5:
1f:2c:a9:0c:61:06:22:ec:11:72:00:f3:f2:22:db:
57:f0:9f:e7:3d:6d:55:8f:da:15:78:6c:dc:b1:bd:
ab:41:7a:47:9d:73:fe:62:27:cb:1b:f2:84:08:f1:
cc:5f:ec:47:7e:86:e6:06:e5:48:2d:d2:14:4d:c0:
69:24:25:a2:91:04:ec:40:7c:7b:a5:e6:8d:f2:85:
31:a6:88:9e:5a:da:9a:41:1f:5a:82:ab:ed:16:83:
5f:8e:58:74:87:a6:7f:62:02:51:07:8e:71:4f:dd:
63:74:3b:2f:28:d6:50:0a:0f:51:c3:d2:cb:b7:6a:
4b:8c:e4:a4:ec:a9:b8:25:dc:55:b1:92:eb:0f:38:
e1:bf:3a:ba:8c:e0:4c:70:6b:8e:43:73:7a:da:e1:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:AE:B7:A2:77:1F:7A:49:5D:E8:7B:51:69:C7:DF:90:99:CF:5C
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/6CGut6J3H3pJXeh7UWnH35CZz1w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:b9:3e:02:58:2e:bc:91:1d:f9:40:31:8f:dc:98:48:f9:58:
a0:04:f6:50:e7:a7:ef:a4:46:a2:e0:fa:13:88:cd:03:d4:12:
c2:8a:77:bc:cb:b5:26:64:b2:6a:c4:72:21:6f:19:a3:27:07:
71:dd:78:11:05:1d:87:e3:16:ce:bc:5d:15:eb:40:16:06:80:
78:0d:e4:3b:49:77:6a:3b:b0:d4:ed:f6:81:80:81:7a:59:93:
b8:a9:e2:30:e7:70:73:4e:58:2e:3b:19:c7:f2:2e:80:6b:14:
83:eb:df:04:f8:9b:6c:ac:77:b7:f8:8e:78:87:17:dc:a5:af:
84:77:70:be:38:c9:35:31:3b:4e:94:81:74:c4:1f:2f:06:3d:
7f:0f:ed:b2:1a:b3:f6:e8:fe:ac:31:fd:b2:32:75:29:ab:ff:
21:8e:e7:b1:d1:86:1d:90:9a:ac:d4:7c:9e:2a:4b:f1:3a:c4:
b8:1f:86:58:d6:d0:59:d2:1b:13:24:de:d7:60:4c:19:ca:0c:
e9:44:b0:6e:20:99:32:a6:e5:9e:69:91:65:1f:59:0a:61:a5:
a6:01:70:94:59:68:18:c1:89:6a:9f:68:3c:0f:7a:87:c1:f3:
6d:d6:bc:09:35:0d:c5:50:b5:7a:a1:f4:64:4c:c1:24:29:fe:
f2:88:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:33 2025 by rpki-client