Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/GJf6p-5OwJXQMwKNbxSqQRmjdXQ.roa
File: GJf6p-5OwJXQMwKNbxSqQRmjdXQ.roa (raw, json)
Hash identifier: 928dRUj1J55CfAKqNLbSCwzEROLy17GMVjfadn4TcTk=
Subject key identifier: 18:97:FA:A7:EE:4E:C0:95:D0:33:02:8D:6F:14:AA:41:19:A3:75:74
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1832
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GJf6p-5OwJXQMwKNbxSqQRmjdXQ.roa
Signing time: Fri 17 Jan 2025 01:24:43 +0000
ROA not before: Fri 17 Jan 2025 01:24:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4812
IP address blocks: 103.24.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6194 (0x1832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1897FAA7EE4EC095D033028D6F14AA4119A37574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:c6:91:d3:31:7b:8d:a0:7f:3d:60:e2:dc:
5f:f3:c4:40:d8:6a:c6:54:6b:07:88:ec:88:0a:38:
cb:d4:76:f9:c5:a6:64:92:e4:1c:75:5f:6d:92:9e:
62:84:0a:d8:26:0c:92:86:b2:96:e9:a2:d6:b9:bd:
81:58:b8:f8:fb:84:2c:d8:94:8c:71:65:ec:03:49:
99:38:a3:be:8e:61:d7:9d:e7:c3:71:ff:71:36:81:
c7:a9:23:12:b2:3b:d4:0e:b8:31:93:2f:ed:0c:e0:
32:5f:3a:37:0a:2f:93:d8:02:ad:17:14:af:19:b7:
64:04:71:14:19:af:43:ae:29:24:00:16:cc:f2:92:
5f:77:7a:15:a8:11:c0:52:ec:a9:1f:68:9d:8e:36:
d5:ec:6a:3c:b9:0a:c0:45:dc:5e:a8:a6:aa:20:7a:
9c:28:d4:91:70:a8:82:d2:96:4d:b3:0c:d4:de:85:
a3:dd:88:93:1d:12:d2:5d:e7:6b:13:7d:5d:fc:ee:
56:c5:20:7b:18:3a:76:e2:57:e9:6d:9f:11:48:98:
96:5a:86:67:2c:4f:c5:cf:0a:55:6b:2e:b9:79:a5:
fc:58:3d:a6:89:27:d0:84:ee:d6:37:82:69:14:e3:
d9:d1:af:31:4a:cb:21:98:07:b0:fc:d1:52:6e:28:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:97:FA:A7:EE:4E:C0:95:D0:33:02:8D:6F:14:AA:41:19:A3:75:74
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GJf6p-5OwJXQMwKNbxSqQRmjdXQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.118.0/23
Signature Algorithm: sha256WithRSAEncryption
40:3b:d1:a2:87:dd:55:61:99:54:67:75:6c:d6:38:e3:9a:59:
73:6d:ab:9d:03:50:93:5a:15:52:bb:6e:1d:da:47:69:8d:4e:
a6:3e:fb:fb:40:8a:46:87:4f:7e:1d:7a:7d:e2:e7:89:b7:6d:
7d:21:da:9a:50:49:af:04:44:83:75:4a:33:23:98:e5:ef:0a:
3b:d0:77:d2:36:06:ae:09:bc:97:9f:3a:68:d7:5a:28:51:0c:
79:0c:49:56:4a:b2:47:83:ad:29:61:23:a5:70:75:e6:85:d5:
68:08:ec:31:c3:29:94:e7:1a:ea:62:5f:b2:ea:3e:20:8c:70:
f1:e2:3b:38:a2:f3:b7:2f:80:ac:20:fd:87:d7:1d:ba:c7:fa:
45:b3:01:0c:0d:6a:21:0a:f8:b2:0c:e5:1b:ba:f2:fd:78:7f:
7d:80:4e:47:bd:02:e2:3d:dd:2e:98:fb:24:2d:15:00:0c:f2:
1a:ec:ff:c0:eb:27:ee:b5:60:05:f4:1e:92:3c:2d:e2:f4:e2:
5f:50:7a:05:92:de:ba:1b:b2:81:b1:c3:72:e4:e0:2e:0c:e5:
89:ad:92:3e:67:7c:53:c3:55:d0:19:3c:52:3e:d0:5d:56:50:
fa:c7:f5:ee:e0:ac:f2:cb:cb:83:76:dd:0c:14:1e:5d:b9:aa:
e1:5e:43:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:10 2025 by rpki-client