Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/L4Yz6bZMWgKaqqYqB4wty2a8_UA.roa
File: L4Yz6bZMWgKaqqYqB4wty2a8_UA.roa (raw, json)
Hash identifier: 3W/BxobxgZC4vP7dwk/CuOEyHKwlcWPXvgS+Vc0fJ0E=
Subject key identifier: 2F:86:33:E9:B6:4C:5A:02:9A:AA:A6:2A:07:8C:2D:CB:66:BC:FD:40
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18B4
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/L4Yz6bZMWgKaqqYqB4wty2a8_UA.roa
Signing time: Fri 17 Jan 2025 01:25:26 +0000
ROA not before: Fri 17 Jan 2025 01:25:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6324 (0x18b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2F8633E9B64C5A029AAAA62A078C2DCB66BCFD40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:05:af:4b:d6:8f:a7:75:4a:63:fc:48:95:
08:b7:40:ec:e5:3b:bd:c1:04:0a:0e:9c:84:4c:9c:
3e:de:2e:91:ee:56:7c:78:4b:84:78:ad:42:9d:2d:
6a:ee:8f:3a:c1:f8:13:88:bf:a3:e0:ea:56:f3:b8:
2f:37:60:a8:53:ee:0d:b4:22:65:46:70:5a:87:b6:
19:fc:b2:9e:0d:53:3d:4f:62:ac:81:39:7e:ad:c5:
f3:79:4d:67:68:34:00:3b:24:ec:e4:83:2b:de:d2:
38:b7:39:84:5a:b5:fb:92:d1:dd:a2:12:71:3c:82:
83:94:09:b0:e2:bb:ee:e0:31:f2:dc:78:dd:73:db:
cd:97:8e:c4:e3:5c:be:74:ce:13:68:7a:73:a8:38:
f2:09:b0:f0:61:12:6d:b3:79:d2:29:95:05:7f:7a:
48:90:c1:27:37:86:5e:5e:37:5b:bc:b3:f1:19:6a:
1b:77:4e:09:6c:f7:65:bc:5f:04:92:d0:fa:04:c2:
70:00:ad:60:be:fe:78:09:78:ed:39:a3:40:7c:b1:
2f:92:70:8e:b2:d0:21:26:98:ad:9d:87:f8:f2:3a:
e8:fa:a5:fc:56:f4:2f:da:77:6d:a2:4c:54:3b:38:
c3:f6:80:e6:cb:bd:95:ad:af:92:c0:c9:46:db:12:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:86:33:E9:B6:4C:5A:02:9A:AA:A6:2A:07:8C:2D:CB:66:BC:FD:40
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/L4Yz6bZMWgKaqqYqB4wty2a8_UA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:eb:d6:f6:f0:99:f9:d6:92:1a:2a:bd:79:fa:21:ae:c7:d6:
35:6d:5d:65:00:ea:e5:b3:20:d3:28:10:7b:b4:f0:35:aa:50:
c0:f3:2f:f7:5a:46:81:4c:21:ec:00:89:29:f0:32:84:03:d0:
fe:09:1e:d6:94:bf:bb:56:b7:51:8d:ac:6a:25:de:ae:48:da:
da:e4:b5:32:37:bb:8a:38:5d:0f:a2:39:10:c1:b2:24:55:39:
f2:f0:bd:25:8b:6a:68:e2:31:03:5b:41:db:28:26:49:15:ad:
c1:67:2d:f8:b2:a6:dd:47:0f:ee:d7:cd:4d:d3:9b:fd:75:f6:
75:96:87:75:e9:06:af:89:c3:cd:84:cf:65:c4:20:a5:13:df:
e4:ef:10:a8:a0:75:27:f2:31:1d:1b:e7:85:7f:11:ca:d0:55:
00:9a:0b:63:58:a5:df:42:e2:04:77:05:96:e9:7d:be:56:4d:
e2:65:07:1f:c1:d7:45:ff:7e:a0:a5:d0:d7:51:28:1e:4f:d3:
b6:62:2b:49:56:ce:2d:23:7e:97:ee:c1:bc:ec:f5:19:66:4d:
8b:02:fd:23:c8:e2:d0:e6:85:7c:48:c4:2b:b4:1b:8c:3c:d7:
7b:c8:b8:fa:5b:dd:90:c1:a4:1a:3a:15:bb:59:44:1b:14:15:
e7:bf:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:48 2025 by rpki-client