Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/QybdY1dd6JbH-28_teE00AUIZdc.roa
File: QybdY1dd6JbH-28_teE00AUIZdc.roa (raw, json)
Hash identifier: zCf7oL6Gqc5Pxyo2+pEDmryRvRl2qRyx/0bO/UWTZWg=
Subject key identifier: 43:26:DD:63:57:5D:E8:96:C7:FB:6F:3F:B5:E1:34:D0:05:08:65:D7
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1565
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QybdY1dd6JbH-28_teE00AUIZdc.roa
Signing time: Wed 11 Sep 2024 04:01:47 +0000
ROA not before: Wed 11 Sep 2024 04:01:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139259
IP address blocks: 103.221.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5477 (0x1565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 04:01:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4326DD63575DE896C7FB6F3FB5E134D0050865D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:0f:c2:a4:10:84:f3:ab:04:ed:78:4c:eb:
fc:d4:b0:14:8a:51:75:a3:7f:c0:e4:b6:01:f7:39:
17:65:84:ab:8e:40:c7:56:ba:86:c3:e4:5f:aa:2c:
41:16:02:88:de:83:66:9f:1c:0d:84:e7:1b:b4:45:
16:b2:34:d7:02:49:02:52:9c:e9:aa:c5:f1:30:cd:
e5:05:2c:95:a7:85:48:7e:3a:da:45:fd:8a:46:b9:
20:4b:1d:6c:0c:b5:cb:37:8d:1b:a8:6a:19:75:4a:
01:27:56:56:70:0a:3d:f2:ee:2c:4c:6b:4a:e7:c9:
69:b5:f3:82:7b:6a:02:87:54:5c:7e:6d:f1:9e:6d:
93:55:e8:e8:04:73:e6:2e:c1:33:cb:f9:fe:68:17:
4a:40:98:48:5e:66:7c:d3:76:ee:7c:2a:62:84:a9:
59:23:ab:71:04:7c:c6:21:c5:fe:d6:ee:70:28:bd:
34:7f:f7:39:ef:fd:66:92:ff:32:b0:b3:7c:18:d5:
32:28:36:78:9d:33:ef:74:2b:c5:0b:ec:91:81:2b:
84:11:a3:0d:f3:da:c5:d7:2a:cd:73:27:17:2d:15:
d5:b4:d4:b8:db:86:ed:68:0c:df:35:cf:e2:5a:2b:
6d:8c:56:22:71:d9:0a:d3:50:bf:93:93:d0:fc:5a:
ee:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:DD:63:57:5D:E8:96:C7:FB:6F:3F:B5:E1:34:D0:05:08:65:D7
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QybdY1dd6JbH-28_teE00AUIZdc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.50.0/24
Signature Algorithm: sha256WithRSAEncryption
97:98:e6:c1:5e:dd:a4:7f:9a:6f:df:ef:f8:76:63:c9:0e:44:
fd:8b:81:ae:3d:0c:9b:5a:b8:db:25:75:36:b6:a2:0f:d3:53:
e8:08:d0:6e:91:a3:f1:46:5c:59:af:a7:79:ed:17:ff:4b:78:
4d:cd:97:eb:57:71:5a:8b:58:28:66:17:db:17:72:8c:f0:d1:
b9:49:a9:f5:9f:2b:46:e6:ba:b4:39:01:c2:35:5b:4a:82:37:
1d:6c:75:33:62:f6:66:d8:dd:df:d7:4e:75:ad:db:d7:4e:33:
7d:e8:81:d8:9c:e3:aa:24:07:4d:ca:54:02:c0:a3:6f:ae:23:
39:31:65:1d:88:ab:f6:9c:ba:3a:ea:df:8a:7d:03:b1:28:82:
40:fe:3b:73:e4:58:e7:f9:da:98:51:a6:49:71:df:d5:52:7d:
9e:04:5a:85:c0:56:50:a4:74:f8:ee:0d:95:dc:c2:5b:f4:ac:
7e:45:10:bb:27:7c:99:d7:8b:c3:66:91:ff:26:50:f1:50:85:
8a:1e:22:65:a1:89:1c:b7:f1:bc:54:3d:28:b7:e0:07:98:14:
b8:32:24:b8:58:9f:86:42:16:da:bc:58:11:c2:21:00:68:52:
84:27:97:ea:d7:b7:e2:be:46:4a:5d:ec:b1:0d:f8:6a:9e:14:
5f:12:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:06 2025 by rpki-client