Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/JxF3rW_ID96NvGlrr_GDjW0GMok.roa
File: JxF3rW_ID96NvGlrr_GDjW0GMok.roa (raw, json)
Hash identifier: CIZ3Y92GtxkMqjLGLvxL8lfdVbEf8efUIUT5sBVUNNw=
Subject key identifier: 27:11:77:AD:6F:C8:0F:DE:8D:BC:69:6B:AF:F1:83:8D:6D:06:32:89
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 186E
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JxF3rW_ID96NvGlrr_GDjW0GMok.roa
Signing time: Fri 17 Jan 2025 01:25:03 +0000
ROA not before: Fri 17 Jan 2025 01:25:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6254 (0x186e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=271177AD6FC80FDE8DBC696BAFF1838D6D063289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:f7:6c:22:68:48:6f:a3:68:24:d2:bf:35:
58:75:f6:3e:c2:94:95:b1:d4:b8:8c:84:0e:b4:6d:
a7:af:f5:02:a1:91:08:ba:c9:da:bb:93:31:ff:4d:
5f:4c:c2:e4:e3:70:99:1d:6c:83:aa:60:89:c7:68:
9d:dc:3d:03:79:f0:77:21:23:2f:72:27:28:fc:31:
f5:39:91:06:a0:23:b5:33:5b:db:0a:05:21:2f:fe:
28:de:0f:eb:c6:fb:0a:45:e3:49:c5:45:a9:df:da:
fb:8e:15:81:34:31:cd:4d:af:33:99:59:01:7f:2b:
8b:99:2c:8f:7c:c3:be:44:2f:5d:60:b0:71:c1:f1:
84:7d:eb:fe:54:5a:85:37:90:c2:81:f9:28:90:3f:
70:fd:44:79:cb:bd:04:06:11:16:05:38:7f:d0:0a:
f5:f2:85:40:59:24:7a:4a:0f:7e:26:c0:c1:31:9e:
26:0f:ac:24:06:24:d9:dc:cb:29:4f:7c:2b:43:d2:
90:37:7c:4c:f6:68:4e:23:6e:7a:1b:35:65:3f:e7:
b4:63:e8:3b:c2:fa:dc:c4:3c:bd:7d:1c:69:6d:18:
3b:15:12:d0:7b:d1:ac:ec:54:a7:5e:35:e4:0e:68:
ea:ab:f9:7a:e3:cc:67:c1:48:1c:60:40:0b:f4:52:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:77:AD:6F:C8:0F:DE:8D:BC:69:6B:AF:F1:83:8D:6D:06:32:89
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JxF3rW_ID96NvGlrr_GDjW0GMok.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d7:67:4f:98:f4:94:9c:e0:4f:98:eb:02:4b:8d:c6:89:ab:
2d:8c:d7:d1:f7:6b:84:e8:dd:ba:b1:a4:04:29:74:e9:42:db:
34:07:8d:de:de:af:54:07:8b:2e:8f:e6:9b:0a:8d:58:5c:f9:
41:59:bc:67:11:3c:8f:55:99:99:99:38:d1:e4:ab:1b:32:cb:
bc:0c:9c:80:7b:4a:b1:3b:6c:10:a3:72:ad:d9:8e:b8:9a:53:
c6:c7:d0:6d:2c:04:dc:df:12:69:b1:94:80:c4:24:84:54:24:
a6:d9:d7:04:86:15:35:24:ae:7b:f9:c2:cf:97:03:13:58:b0:
46:56:79:74:4c:1a:73:8c:9a:c5:9c:2f:fd:96:a4:b2:77:25:
5d:0d:19:52:bf:2d:34:c1:9f:09:1e:b0:e6:77:dd:a7:85:45:
36:8d:03:15:3c:4a:be:b3:8b:ba:98:79:14:fd:df:ba:43:85:
96:f2:26:7f:e4:d8:9f:33:ea:1b:1d:87:e4:2e:52:5c:79:cb:
96:a0:29:a9:71:7f:ad:cd:15:50:d7:90:8e:6e:04:41:97:9b:
fc:51:b4:0a:e4:4a:e4:52:70:af:30:fa:ef:a6:f0:b8:d4:91:
78:ce:cb:ea:d0:54:c7:52:2f:a7:08:ce:55:05:67:8f:c9:ed:
b2:b8:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:36 2025 by rpki-client