Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DGyGWSLOupG9XAuCBjzbAYXaOTk.roa
File: DGyGWSLOupG9XAuCBjzbAYXaOTk.roa (raw, json)
Hash identifier: U9jx0xy9LSl784lfAZcbp04Hcqt54Vc7F+DhJAW2Xx0=
Subject key identifier: 0C:6C:86:59:22:CE:BA:91:BD:5C:0B:82:06:3C:DB:01:85:DA:39:39
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 181F
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DGyGWSLOupG9XAuCBjzbAYXaOTk.roa
Signing time: Fri 17 Jan 2025 01:24:37 +0000
ROA not before: Fri 17 Jan 2025 01:24:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6175 (0x181f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0C6C865922CEBA91BD5C0B82063CDB0185DA3939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:b2:8c:84:07:ca:20:02:88:1e:9a:82:9d:
71:21:e6:2a:c4:90:c7:e4:57:91:d9:16:81:a6:c8:
d1:e8:32:59:85:34:5e:04:e4:c8:db:1f:d3:1f:ae:
a3:90:00:58:bf:5f:17:bf:eb:dc:ea:bd:f6:e8:e1:
55:bc:7c:82:ae:01:47:16:df:25:00:46:d7:2c:01:
68:cc:79:ed:69:31:9c:5c:69:d7:3b:5e:ab:30:e5:
3d:14:45:5a:bc:1c:66:c0:a1:cc:63:28:3d:e7:a7:
1c:83:29:81:ee:00:93:01:58:1e:5c:31:45:b3:f8:
b1:b8:3f:be:b6:c5:ca:c6:8c:33:0f:2b:50:e9:c1:
3b:cd:de:7e:f1:8a:bb:53:56:55:83:c0:fc:ba:9b:
2b:46:11:29:e9:aa:75:db:f8:40:19:a1:7e:a8:54:
7f:59:2a:1b:20:c5:91:62:65:e4:28:a6:1f:0c:21:
38:2e:2b:61:06:0e:65:11:15:4c:c4:f6:a5:71:c7:
08:81:22:db:03:34:09:66:bc:15:45:af:8f:b9:03:
59:ed:63:45:7e:f5:00:00:69:af:b4:6d:55:a3:98:
b7:b8:11:61:fc:8a:29:77:58:cc:f0:05:0e:0d:18:
25:9d:3d:d1:0b:ae:63:c9:f4:db:58:fc:64:8c:94:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6C:86:59:22:CE:BA:91:BD:5C:0B:82:06:3C:DB:01:85:DA:39:39
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DGyGWSLOupG9XAuCBjzbAYXaOTk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.92.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:7d:d6:64:6a:06:56:e3:2f:08:d6:9f:7b:02:11:ee:38:a2:
bc:39:29:21:09:6e:91:28:1d:22:8d:73:c9:d8:ff:35:44:9d:
15:5d:27:77:48:b6:8f:c9:24:ae:d6:03:97:d9:fc:30:5a:89:
4a:84:91:4d:1f:2b:d3:77:27:c5:a9:2e:1a:cd:f0:66:c6:bc:
47:9c:c4:60:31:b4:17:77:5e:76:f8:df:b5:a0:fc:6d:31:49:
d2:10:20:57:61:53:55:0d:47:85:75:ef:e3:8f:78:e6:e2:fc:
c0:ef:3e:e0:ba:34:d7:8c:4b:63:f5:9c:33:a3:6e:b5:f5:d3:
1c:09:d2:52:4a:2d:b0:1f:a9:df:15:a8:97:66:82:12:36:f6:
5f:2e:0c:6f:04:f0:68:58:75:cb:e9:c5:ce:7e:1d:2b:a6:ca:
03:45:59:56:89:52:1d:ff:46:d8:04:09:1a:10:ec:4b:b9:78:
47:f4:73:d2:1e:0c:9c:16:07:dc:d6:36:90:fa:9a:a0:09:2d:
15:15:4d:b9:3d:aa:ea:80:58:66:82:5d:7c:75:70:c1:87:77:
9d:59:22:a9:a6:e7:cf:2e:8e:e7:5a:21:9b:4b:d3:97:f2:00:
22:21:e2:78:2f:32:64:bc:ae:b7:c7:c6:e1:70:a3:41:f1:63:
7f:ae:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:40 2025 by rpki-client