Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Oe1Elhm1A0fmoNqYWKGlY4DEclk.roa
File: Oe1Elhm1A0fmoNqYWKGlY4DEclk.roa (raw, json)
Hash identifier: xrjAz0cXg9Km+8Uj7QIIH8QZpIm8hFDS9819Ta3qkfg=
Subject key identifier: 39:ED:44:96:19:B5:03:47:E6:A0:DA:98:58:A1:A5:63:80:C4:72:59
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 181A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Oe1Elhm1A0fmoNqYWKGlY4DEclk.roa
Signing time: Fri 17 Jan 2025 01:24:35 +0000
ROA not before: Fri 17 Jan 2025 01:24:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6170 (0x181a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=39ED449619B50347E6A0DA9858A1A56380C47259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:44:98:4d:08:e0:46:63:91:47:24:bd:04:
39:13:b5:3d:f9:52:43:90:1a:91:e6:f3:06:a0:fd:
a8:03:d3:76:9a:7f:77:44:82:5c:f9:fb:7e:c7:04:
6d:25:39:37:40:97:cd:2f:e7:a3:77:5e:68:3f:42:
fb:b7:32:85:38:98:a1:10:a0:45:ce:b8:4f:46:2e:
5d:6f:52:8c:78:c9:39:2e:80:1e:49:55:12:5a:3f:
0b:c3:82:13:7d:20:e4:4c:63:70:0b:6a:3a:46:3a:
6f:15:57:57:01:94:e9:ef:c0:24:75:5d:e3:f6:ee:
21:fd:ff:43:32:7c:6b:f4:09:6c:23:a5:23:36:04:
21:20:ce:3b:d0:48:bc:14:ec:4a:a7:3f:b0:8e:31:
a4:81:77:6d:e6:cb:06:6d:ff:cd:d3:86:70:46:74:
c2:5e:8c:52:fd:3b:74:ec:6c:fb:45:6b:60:42:cb:
32:c9:9b:7b:4f:64:ed:83:b6:14:a8:b4:45:f0:c7:
15:df:48:e9:24:ca:d1:ec:a4:b3:2e:cf:1e:f5:d4:
d9:f4:a2:70:49:ec:89:a7:04:64:6b:a2:94:a0:22:
21:79:a4:2a:f6:85:8b:5a:d3:e8:ca:d9:77:14:81:
a3:3f:72:42:bf:f6:1b:e0:cc:aa:0e:06:4c:b7:f0:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:ED:44:96:19:B5:03:47:E6:A0:DA:98:58:A1:A5:63:80:C4:72:59
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Oe1Elhm1A0fmoNqYWKGlY4DEclk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.45.0/24
Signature Algorithm: sha256WithRSAEncryption
60:66:ee:d6:a3:4d:df:fe:30:00:57:21:eb:fd:ed:f4:ba:c5:
3c:66:e9:68:ca:a4:ff:ac:f3:bc:0d:e9:21:48:f5:3f:28:21:
cd:1c:49:ec:63:17:da:05:26:5c:1d:ba:87:7d:26:c2:82:61:
c5:0f:2c:67:3e:18:7d:85:38:37:0e:47:bb:e6:90:9d:e0:29:
3b:6d:71:a5:1d:aa:77:ac:50:3c:2a:d7:a7:74:3a:e7:da:81:
8c:d8:9c:27:ae:9a:5e:fb:35:c4:af:c1:8d:b3:70:b3:b3:c1:
23:f5:9c:dc:78:2a:02:1f:53:a3:32:3c:db:47:64:44:95:a8:
69:1a:7a:68:e0:f6:53:1b:40:0f:c0:9f:8d:ad:1d:b2:f6:3d:
12:fa:03:3c:81:c0:6f:65:86:b8:c4:70:4e:4a:49:db:a8:d7:
1b:2e:be:da:a5:da:f7:18:de:66:4e:c6:97:44:18:15:64:70:
64:72:97:67:7a:22:f0:a6:e5:b7:f0:89:d6:eb:2d:fa:ee:ce:
db:ec:ab:22:90:ee:29:36:7b:73:41:d0:3d:46:41:04:c3:7d:
f2:e0:07:11:04:71:85:0b:b1:eb:7b:46:d9:36:d6:b8:fe:e1:
02:ad:53:4b:9e:a3:03:a3:a0:cb:07:8e:3a:62:a4:e4:02:78:
87:32:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:12 2025 by rpki-client