Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Ghs1-9EalSMYN8wfdW_qE_1B1mk.roa
File: Ghs1-9EalSMYN8wfdW_qE_1B1mk.roa (raw, json)
Hash identifier: 4QNq8d0VtB6oG2QwO/L+5ZkvkjUbj2rQQZaPMRUqq1U=
Subject key identifier: 1A:1B:35:FB:D1:1A:95:23:18:37:CC:1F:75:6F:EA:13:FD:41:D6:69
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 184E
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Ghs1-9EalSMYN8wfdW_qE_1B1mk.roa
Signing time: Fri 17 Jan 2025 01:24:53 +0000
ROA not before: Fri 17 Jan 2025 01:24:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6222 (0x184e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1A1B35FBD11A95231837CC1F756FEA13FD41D669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:44:fc:ca:8d:68:1e:96:fa:bf:44:e5:1f:
85:e7:bc:7c:04:5c:9d:28:51:34:43:cd:49:21:a0:
64:5a:be:8b:d4:be:a5:f4:64:2a:2c:a0:26:f7:ab:
1d:ed:f9:c7:1d:da:72:ee:07:c2:f7:5b:a3:2b:1e:
1a:65:f9:61:95:1b:a0:95:e6:fc:1e:29:c1:99:7c:
6d:c7:d2:c1:1c:38:cd:99:09:14:76:01:d8:05:8b:
ff:ac:25:b9:43:b8:3c:81:6f:ca:80:03:25:3b:00:
b9:12:cb:08:3f:27:ca:10:ff:3a:6a:24:e4:a6:ce:
43:e5:5e:eb:d3:95:d4:9d:90:ad:3f:e4:9b:32:55:
8f:9d:59:8c:4e:be:9b:a6:68:55:b1:35:e0:51:ea:
8a:5f:9d:3c:09:df:f7:c3:a2:d0:17:54:51:17:1d:
c3:e7:1f:cd:bd:ac:3b:f8:04:8b:15:56:bc:05:26:
2d:9f:d8:00:cc:93:01:da:11:25:d4:ff:02:58:07:
b5:0a:35:50:5f:41:8f:1c:51:e3:0d:13:b9:44:16:
ca:88:1c:8b:fb:52:e0:89:32:bd:e8:1d:84:9e:f9:
f1:5f:b8:89:87:86:f5:01:f8:fc:fb:05:76:9b:22:
f5:f5:28:9a:a2:ce:30:47:7d:9d:05:34:49:39:24:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1B:35:FB:D1:1A:95:23:18:37:CC:1F:75:6F:EA:13:FD:41:D6:69
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Ghs1-9EalSMYN8wfdW_qE_1B1mk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4a:ba:c8:a7:72:d7:00:4c:12:0a:bd:8b:1b:1b:a7:8f:ea:
37:53:72:24:ad:06:f9:02:cd:aa:1a:33:11:f0:38:eb:34:60:
8a:96:c7:b7:47:fa:a3:f5:bc:4f:ec:28:1d:af:c4:2a:fe:bd:
dc:17:07:b7:c6:e0:eb:2c:6e:a3:74:01:86:80:da:71:90:58:
1e:7b:a7:b6:26:fe:92:a2:2d:51:c6:0a:4f:bb:f9:b0:82:b2:
95:ee:6c:7b:82:26:7a:f2:56:73:60:5a:c1:22:0b:6d:e2:0b:
96:d0:51:13:3a:42:e1:6d:ea:47:ba:b2:81:39:d6:bc:1d:52:
52:ba:40:0d:2a:20:90:11:43:ac:81:ca:b6:35:3d:77:db:9a:
8c:ea:51:2f:06:ef:28:31:22:54:90:4d:66:65:b1:c7:79:a9:
0a:77:1d:bc:8b:76:97:ca:7c:d3:de:34:4f:76:06:b1:70:6f:
3a:33:93:9d:7f:1f:4b:54:4e:4f:c9:cf:48:cf:d9:9f:b6:4b:
76:95:5c:a2:21:c3:57:10:a5:ac:35:e0:3b:27:ef:f1:ed:51:
9f:92:b4:05:c4:fb:d6:88:d7:0b:b0:97:51:2b:0c:75:e0:bf:
d2:cc:c7:60:b5:6d:f0:ae:32:8c:a8:06:d7:b7:ae:cc:1c:3f:
fc:8d:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:02 2025 by rpki-client