Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/CsQzENarX6C71ZR62Vh621fzo6I.roa
File: CsQzENarX6C71ZR62Vh621fzo6I.roa (raw, json)
Hash identifier: 3ENFvSpir6wFNg8P8I9Db1vVc7CEQ3hRmIMwUh51EDI=
Subject key identifier: 0A:C4:33:10:D6:AB:5F:A0:BB:D5:94:7A:D9:58:7A:DB:57:F3:A3:A2
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 155D
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CsQzENarX6C71ZR62Vh621fzo6I.roa
Signing time: Wed 11 Sep 2024 04:01:45 +0000
ROA not before: Wed 11 Sep 2024 04:01:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139259
IP address blocks: 103.221.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5469 (0x155d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 04:01:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0AC43310D6AB5FA0BBD5947AD9587ADB57F3A3A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:5c:bc:92:01:e6:a4:58:db:de:62:08:41:
c0:27:10:30:f2:26:b7:1a:42:3b:6d:8e:6c:12:35:
5f:be:db:c3:b8:ff:96:82:7d:2e:9b:3b:bf:52:de:
a9:cd:52:e0:8a:36:b3:72:ec:bb:6b:d9:34:1c:a5:
71:fb:09:8e:24:69:31:8d:62:da:62:8d:27:3b:86:
2b:c6:5b:e1:65:04:9b:db:01:28:3a:fd:86:a9:5e:
05:71:84:07:04:3f:bb:40:c7:d3:39:1b:c9:34:f7:
7c:2b:b0:b2:3f:de:84:b9:d5:1a:10:0c:16:a7:b0:
db:70:ad:f7:bb:55:de:86:65:2f:45:da:56:e8:e2:
7d:67:36:3c:2e:11:25:10:01:60:15:cc:c7:7e:f0:
54:b2:21:e4:dc:77:e4:6f:3e:ef:b0:ca:ed:b2:e0:
dc:d4:ed:d6:32:c4:8b:c4:55:5f:2a:56:0a:1e:5b:
e0:5d:d9:bf:e0:cd:5d:82:83:c9:9c:7c:69:f0:c0:
5b:ef:2d:09:ba:8f:9d:9b:6a:51:24:0c:01:b3:4e:
e9:f5:26:41:3e:d2:52:3c:cb:db:cf:95:1a:66:72:
e3:8a:1c:a6:01:f7:43:5d:78:26:05:87:8c:3e:93:
4c:97:0b:65:2d:cb:0d:24:03:6a:f4:8c:9f:29:2f:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:33:10:D6:AB:5F:A0:BB:D5:94:7A:D9:58:7A:DB:57:F3:A3:A2
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CsQzENarX6C71ZR62Vh621fzo6I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.46.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:1d:88:d9:db:4a:75:9a:c9:4c:c8:aa:61:86:ca:99:76:29:
6a:10:d2:5c:33:53:fe:95:08:3d:99:de:ae:d0:4c:20:ff:af:
19:18:83:6d:ea:a6:6f:42:0d:b1:27:e3:46:c6:b8:8c:6d:fb:
95:f9:4e:ed:7a:d8:5d:58:ca:56:b7:86:c2:86:e3:5c:c6:22:
7d:51:29:94:ae:36:cf:c2:1c:05:0c:f4:0f:65:54:e8:4b:b3:
e5:8d:18:b4:87:cf:9c:ca:72:c1:84:d3:e7:1b:b0:04:5f:85:
30:9b:3d:7e:b4:25:31:52:2e:20:e2:99:a5:3f:8a:b2:f2:35:
7a:f5:1f:24:ab:28:63:3a:e7:b7:4a:f2:74:69:27:96:8c:7e:
e4:0c:0b:be:f7:ac:88:a5:0c:e4:49:0e:f8:2c:f7:5e:dc:4e:
fe:4a:35:76:70:86:14:e8:2b:6e:61:fd:20:12:26:98:8e:db:
32:4d:33:a1:ca:32:62:dc:f6:06:2b:5d:56:f6:5c:63:f2:0f:
d8:b1:fb:7b:f7:75:1e:78:f7:02:d2:48:08:d3:2d:35:df:4c:
ab:67:90:c1:cf:1b:35:22:28:71:fd:ad:99:5d:c2:e1:7d:2b:
a0:a2:ee:a5:82:cc:ba:07:51:c9:63:93:fc:b2:dc:59:8b:76:
10:67:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:26 2025 by rpki-client