Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/BiQ4I_jmViCKiWuYN8cQ3NuIuII.roa
File: BiQ4I_jmViCKiWuYN8cQ3NuIuII.roa (raw, json)
Hash identifier: gVx+t2UHghTHo9v+qRlT3FZOAChZszBjNK/Zf42snDY=
Subject key identifier: 06:24:38:23:F8:E6:56:20:8A:89:6B:98:37:C7:10:DC:DB:88:B8:82
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 154C
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/BiQ4I_jmViCKiWuYN8cQ3NuIuII.roa
Signing time: Wed 11 Sep 2024 03:59:21 +0000
ROA not before: Wed 11 Sep 2024 03:59:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139259
IP address blocks: 103.221.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5452 (0x154c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 03:59:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=06243823F8E656208A896B9837C710DCDB88B882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:be:ec:14:a3:72:d5:91:11:23:52:e5:77:
bd:5b:90:fa:71:9f:fc:a6:22:19:dd:e1:10:6b:b4:
bd:b7:f9:7b:7f:e1:fe:53:57:24:87:6f:af:d2:7d:
7d:e1:7d:db:40:c9:69:7e:70:48:c6:d3:2e:bb:17:
09:ad:df:f8:eb:79:2f:fe:b3:5f:d7:95:20:4c:93:
0e:28:63:99:3e:5a:e4:14:07:98:db:5d:49:ac:85:
1f:2a:5d:94:63:2b:79:6f:6e:f3:40:fe:20:fe:c4:
57:5b:cc:f3:9e:59:00:54:96:ce:f6:27:99:38:2b:
c4:0c:ed:7c:00:a5:47:f8:1c:08:c2:7e:5e:4a:74:
d6:c7:d2:36:88:02:5c:c5:b4:96:ce:23:ed:37:f6:
90:ea:02:d0:4b:33:e9:c3:f8:1f:ac:f2:bb:0b:35:
54:17:01:ab:40:35:3f:b7:d5:e9:87:fe:36:8c:9c:
98:6d:7e:80:21:0c:1e:41:88:08:b6:c6:55:96:e3:
2b:63:e5:34:df:5d:41:39:d2:a8:2d:23:dd:be:c0:
07:14:e7:92:92:fc:72:7c:84:67:49:71:41:dc:c6:
e9:c4:d8:3f:3a:34:4a:ed:7a:66:92:c8:91:75:f9:
f7:cf:8a:5c:72:bc:0b:5d:3c:9c:9c:ba:8d:81:48:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:24:38:23:F8:E6:56:20:8A:89:6B:98:37:C7:10:DC:DB:88:B8:82
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/BiQ4I_jmViCKiWuYN8cQ3NuIuII.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.23.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1f:19:c0:2d:1e:4c:63:95:c5:fd:43:1a:b3:ca:83:83:c4:
92:95:6e:c5:ba:79:1d:5a:8f:c9:41:ca:f8:86:65:dc:84:69:
1b:d6:16:47:0a:e4:e9:a5:f7:4e:3a:f2:32:4e:30:bd:9f:37:
91:ea:9a:16:e3:31:48:38:71:28:ff:49:43:08:20:05:6c:4f:
5e:df:d1:b1:ac:e4:9f:a8:1e:df:0b:77:01:da:b3:0a:d6:09:
e4:c1:3f:66:df:d7:e6:6a:92:22:b9:65:07:92:d3:a9:9b:72:
a2:1c:31:62:81:91:01:d5:c6:ab:99:3f:c4:7f:58:6f:cf:8d:
20:35:cf:d7:ea:09:78:bb:23:94:78:82:a0:f7:07:9a:fb:52:
2a:72:cb:00:69:d9:de:33:36:7d:4b:82:b6:98:bf:2e:90:ba:
42:06:d0:8e:b8:19:4e:59:85:54:de:6a:40:bc:2f:a5:c2:36:
f5:af:8b:33:d4:f7:9c:bc:b8:fe:cb:7d:e8:92:73:e2:c8:a6:
98:9a:b5:a3:00:e3:5f:88:df:d8:df:e7:94:80:c1:88:e1:ee:
6b:45:6e:c2:57:aa:96:61:af:c4:50:19:58:dd:45:47:e8:ce:
4d:50:29:b3:86:67:55:11:7a:99:f1:fc:08:cc:0b:eb:0e:40:
d3:e3:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:23 2025 by rpki-client