Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/NTdUWBUs0Ehf3nlEY47eeMRBa-o.roa
File: NTdUWBUs0Ehf3nlEY47eeMRBa-o.roa (raw, json)
Hash identifier: nkiJCd+yeol2oVUclexpULjCZMpDeMZVVrFUaMVby+Q=
Subject key identifier: 35:37:54:58:15:2C:D0:48:5F:DE:79:44:63:8E:DE:78:C4:41:6B:EA
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1865
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NTdUWBUs0Ehf3nlEY47eeMRBa-o.roa
Signing time: Fri 17 Jan 2025 01:25:01 +0000
ROA not before: Fri 17 Jan 2025 01:25:01 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6245 (0x1865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:01 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=35375458152CD0485FDE7944638EDE78C4416BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:12:b2:95:e9:61:cf:82:d9:72:67:fd:e8:
2f:3e:ce:85:e7:8c:f6:8b:08:94:77:63:04:b2:31:
a5:e1:81:8a:f2:fe:91:22:b9:75:aa:6b:0c:74:38:
f7:39:de:19:d7:52:36:29:77:71:ac:0b:cc:01:ae:
a6:da:50:a6:61:55:0c:11:d1:ed:fd:03:34:bf:e2:
df:b0:4f:26:d6:27:50:a6:42:ee:ac:80:6f:ab:8c:
f5:e4:fb:ec:3e:13:fe:fc:9e:ed:c9:d2:f5:07:81:
c6:4e:0a:d3:42:04:8a:bc:9f:d4:e8:7f:9f:cc:62:
15:c1:2f:0f:57:e0:ab:86:c0:b7:fb:a0:15:70:4a:
e1:2a:33:96:28:ab:f3:71:de:69:8a:d9:0a:7d:0f:
70:e5:61:cc:ce:e4:42:f9:d3:d7:b4:ff:66:04:6b:
ae:96:cf:01:c7:5b:c4:6f:37:54:19:81:af:c4:3e:
31:4b:3f:14:b1:e8:38:5c:16:76:ea:63:1f:28:7c:
9a:60:3b:1b:e1:f3:cc:2d:1b:46:7c:ff:c8:81:60:
3d:3d:69:a0:18:b3:88:69:e4:49:ab:26:b5:1c:cb:
05:40:77:ca:a5:ac:cd:82:1c:e3:54:6b:fd:94:74:
83:00:ae:b0:2e:ce:29:cd:e4:ae:90:c8:63:b5:ab:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:54:58:15:2C:D0:48:5F:DE:79:44:63:8E:DE:78:C4:41:6B:EA
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NTdUWBUs0Ehf3nlEY47eeMRBa-o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.51.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bf:15:c8:d7:e1:bc:7e:aa:d7:1d:8e:7b:62:97:49:d8:49:
a9:df:77:37:7c:e6:aa:15:4e:a1:d1:64:06:1f:25:6b:01:7d:
8b:0c:e1:48:79:90:dc:f2:05:fb:86:8e:bd:dd:c0:4e:c6:58:
33:20:00:87:25:a8:e4:61:40:90:5e:73:fd:a1:06:a8:ba:0f:
f3:8b:32:cd:66:7e:3c:f1:5e:c8:77:f7:f7:0c:25:69:e0:e7:
94:f1:ae:94:27:d3:27:72:92:36:ae:00:c5:19:92:d8:f3:41:
c2:25:48:f9:0f:b1:24:73:99:2a:f1:7a:1b:9c:97:6f:f2:09:
5e:3e:5d:fa:bc:11:aa:a7:1d:5f:75:90:89:b8:cb:fc:e0:02:
d8:be:84:8a:4d:c0:fd:1b:b5:c3:45:40:16:26:19:44:9f:50:
13:74:d1:f5:4d:0f:d0:72:5c:b9:43:52:9a:93:c9:6a:d9:f1:
9c:5d:d9:1b:45:71:2a:55:ee:0e:e0:5a:57:e3:26:12:4f:3b:
15:03:44:df:24:77:1f:09:1d:c3:aa:35:96:81:fd:1c:ec:68:
94:63:a4:11:3a:f3:dc:c4:81:22:d3:77:20:0e:21:ae:83:4d:
93:a6:32:eb:1d:7b:56:e8:97:90:cb:44:7f:85:9a:ee:17:46:
df:80:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:59:39 2025 by rpki-client