Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/LMa8Y408l_kCc0SiMEKw6aDTAP4.roa
File: LMa8Y408l_kCc0SiMEKw6aDTAP4.roa (raw, json)
Hash identifier: RtkY88vRlEqU05qZtvZ6x4i1I9hjw3vP2DomW8c9/CM=
Subject key identifier: 2C:C6:BC:63:8D:3C:97:F9:02:73:44:A2:30:42:B0:E9:A0:D3:00:FE
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1829
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/LMa8Y408l_kCc0SiMEKw6aDTAP4.roa
Signing time: Fri 17 Jan 2025 01:24:41 +0000
ROA not before: Fri 17 Jan 2025 01:24:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6185 (0x1829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2CC6BC638D3C97F9027344A23042B0E9A0D300FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:78:73:27:b6:3d:d1:ca:8b:cc:ba:db:8f:
57:82:23:16:5b:11:02:1d:74:b1:cb:6c:20:64:58:
98:ff:3c:b1:21:87:2e:62:cc:47:d1:3d:e4:65:13:
8a:88:f6:b8:f9:f8:92:9a:37:a7:30:24:be:2b:ea:
47:e5:7d:1a:66:84:13:4b:d6:7c:3b:5e:6c:37:83:
15:af:ed:db:0b:2d:54:02:59:1b:75:8d:cb:19:e8:
ad:58:32:30:c8:25:5c:8e:c0:06:d4:19:32:d2:af:
4d:93:21:12:1a:f1:3d:ee:99:d6:5f:04:d7:ab:c6:
7b:cb:c7:28:09:05:f6:e7:f1:10:69:91:2c:36:3c:
a1:ff:2b:37:33:ff:5f:bb:2c:89:5a:ac:ca:b2:db:
53:e7:7f:0f:8a:ec:20:77:3b:95:a5:58:6e:4a:1d:
87:ad:7b:5e:1d:11:5f:2f:37:f3:d2:4a:60:50:80:
a3:8c:1e:12:01:77:58:1a:d6:3c:bc:24:a3:d8:f3:
1e:4f:35:57:9f:0c:e3:4f:3f:34:e4:9d:8b:25:f6:
34:fc:43:1f:7f:9c:c9:c1:9a:09:28:e9:af:22:6d:
72:bd:00:1b:53:63:92:76:04:eb:d0:5c:29:e3:d3:
be:72:f9:fd:e9:af:c7:91:d5:80:3d:e6:88:85:a5:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:BC:63:8D:3C:97:F9:02:73:44:A2:30:42:B0:E9:A0:D3:00:FE
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/LMa8Y408l_kCc0SiMEKw6aDTAP4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:9b:44:38:1c:8d:8e:ee:2f:cd:07:58:9b:8d:f6:20:99:25:
4d:f0:1a:13:02:00:b9:61:57:3c:43:29:e7:e2:c8:b9:c8:94:
b0:45:a9:7a:58:71:15:7c:63:c4:54:ef:bd:77:fd:48:87:a2:
34:01:8c:ed:a5:74:b0:c2:a1:d3:b0:ef:0b:6a:9b:0a:47:ba:
30:0a:23:73:9e:0c:75:4f:3f:d8:c5:33:84:f4:f8:ef:77:39:
fe:3a:c2:b5:66:1f:45:6e:7e:02:30:80:c9:94:4a:41:42:3e:
7d:c2:66:16:ac:61:2b:32:9c:6d:8f:8b:96:8e:72:87:f5:68:
af:08:90:4a:21:2e:90:95:bf:34:61:32:9f:75:85:fc:8a:6b:
07:73:0d:0a:5a:ed:ed:20:6c:3c:d6:6b:6e:b2:79:b0:0f:f7:
ac:57:f1:36:08:4a:1a:1d:bc:ef:6e:02:bd:f8:73:20:4f:4a:
e1:90:fb:b8:5a:a5:05:1a:1f:4c:8c:8c:44:86:f8:9e:ee:a8:
8c:ec:a3:89:a3:da:9f:ad:44:4d:cf:1c:90:b8:c0:00:49:fc:
5f:a7:2d:b7:7a:06:71:20:01:36:75:4d:5a:a7:5b:69:01:e9:
c2:8d:55:59:ec:a1:3d:ee:fd:5e:cf:e2:8c:27:82:c1:e4:63:
dd:31:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:20 2025 by rpki-client