Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/MkOluc5Do2XupdR5x_ftZ2Vp7pE.roa
File: MkOluc5Do2XupdR5x_ftZ2Vp7pE.roa (raw, json)
Hash identifier: 1x5FsHgXt/0pMShZaO9pss43AwvoBCNo70dLja2P32I=
Subject key identifier: 32:43:A5:B9:CE:43:A3:65:EE:A5:D4:79:C7:F7:ED:67:65:69:EE:91
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14DB
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/MkOluc5Do2XupdR5x_ftZ2Vp7pE.roa
Signing time: Wed 11 Sep 2024 02:23:55 +0000
ROA not before: Wed 11 Sep 2024 02:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24373
IP address blocks: 103.220.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5339 (0x14db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3243A5B9CE43A365EEA5D479C7F7ED676569EE91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:69:0f:19:06:9a:3c:2f:35:ea:7d:66:73:
7c:18:95:3b:48:25:b7:d4:08:f4:fd:5f:4a:77:3c:
a6:ad:bc:9d:c6:49:ff:b1:08:b6:34:13:ba:f2:a2:
03:99:b9:dd:93:90:61:d3:00:b6:c2:eb:13:0f:1a:
e2:28:36:42:dc:42:c1:86:c8:f4:b1:64:49:b1:12:
81:14:8e:ea:f8:29:45:ed:73:fc:30:4e:3b:4e:d1:
62:06:4b:92:ad:75:dd:e6:bc:0d:37:75:cc:94:68:
58:37:b6:ed:b3:a7:04:9c:69:e7:4d:f0:04:2f:07:
cd:d4:cb:95:67:e9:d6:1b:e9:e4:9e:b0:76:fb:18:
28:e5:e7:7f:8d:26:8a:7c:77:17:04:f9:32:98:19:
96:a3:5d:ba:48:c5:25:09:3f:69:47:5d:8c:d4:09:
c8:b8:11:79:1f:be:33:b1:04:d1:a8:fe:16:81:bf:
d9:26:d9:d8:2d:c2:a4:1a:cd:35:8b:a5:d9:c7:a8:
75:2e:b7:c0:b1:d3:8a:c7:52:c7:01:4d:c8:1c:07:
54:a9:c4:37:26:92:e0:f2:53:ca:82:b2:bb:07:52:
0f:e8:e1:60:68:1f:09:5b:ac:94:66:ad:3b:7e:92:
07:3e:3b:3d:7c:1a:bc:bb:bd:af:87:a5:b4:10:f2:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:43:A5:B9:CE:43:A3:65:EE:A5:D4:79:C7:F7:ED:67:65:69:EE:91
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/MkOluc5Do2XupdR5x_ftZ2Vp7pE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.252.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:d7:ed:28:88:70:af:db:f6:8f:38:94:40:a7:f4:58:65:98:
de:53:e0:87:c7:d0:e6:25:33:b5:e7:2b:3f:1d:64:a9:e6:d3:
74:28:7c:b7:7a:e3:7f:9c:6a:0c:70:96:cb:02:6f:2e:06:9d:
52:26:74:d2:5e:a5:2f:48:6a:e7:b0:b0:95:df:eb:3b:65:e6:
cd:5f:4a:4c:b6:41:74:e9:e7:98:ba:c5:b2:d7:e7:a0:73:b1:
dd:29:84:ad:cb:d1:85:95:7a:95:bb:4d:de:fb:95:89:5a:9a:
e9:d8:41:31:aa:bd:9a:52:7e:c7:45:b3:c0:ec:4c:d2:35:25:
32:da:fa:a7:ea:4c:79:25:41:a5:1b:92:fe:af:07:41:38:14:
ed:15:85:f8:59:0f:af:09:86:b6:9c:ae:b2:51:54:fc:02:92:
3f:fd:22:de:7d:70:1b:86:16:68:97:e2:de:a1:46:25:09:9f:
6c:4f:e7:b7:d7:95:0f:d9:f2:a0:7c:2d:fa:ea:84:3b:88:8d:
a8:aa:f1:d2:1c:f8:9a:32:f9:42:d3:7b:71:0d:8b:9f:d1:48:
a6:f0:00:31:9f:cb:ce:da:5f:31:97:35:2a:f4:82:96:ca:f3:
d8:63:04:c6:8d:b8:d2:66:5c:ad:b3:19:40:27:5a:5a:2a:ef:
2e:fb:ef:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:47 2025 by rpki-client