Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/RFFl6m-GbsjBvHf6TRQRizlkS7s.roa
File: RFFl6m-GbsjBvHf6TRQRizlkS7s.roa (raw, json)
Hash identifier: duSL4PUCLrmqPFzCUU3T0Huw1DiHvSkzeO9cV+t5+wI=
Subject key identifier: 44:51:65:EA:6F:86:6E:C8:C1:BC:77:FA:4D:14:11:8B:39:64:4B:BB
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1899
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RFFl6m-GbsjBvHf6TRQRizlkS7s.roa
Signing time: Fri 17 Jan 2025 01:25:18 +0000
ROA not before: Fri 17 Jan 2025 01:25:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6297 (0x1899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=445165EA6F866EC8C1BC77FA4D14118B39644BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:69:64:b5:af:4d:d4:6d:9a:35:eb:8e:ff:
16:7a:ce:69:ba:1d:b2:68:aa:7b:09:04:4e:0a:1b:
e6:dd:d3:d7:74:3d:ff:f4:cc:34:f5:5f:53:4f:f9:
00:69:a4:e5:d2:60:b0:ed:f9:3d:3a:09:e4:59:5d:
a8:51:0e:bd:f0:6d:1f:5e:d2:1d:07:5b:e3:d0:3b:
35:c3:d5:b3:81:7e:04:79:00:5d:b7:2e:0c:45:93:
98:6d:a7:ae:84:9b:c2:a3:46:e9:32:46:06:be:9b:
24:65:3f:d0:07:71:62:bc:17:9f:ce:1f:4c:01:9d:
10:32:3e:0a:2a:b2:c8:63:57:31:cf:a3:5f:68:27:
7e:27:09:1d:c4:bb:61:28:56:6b:bb:49:7a:23:3f:
46:ff:31:65:fb:bb:dc:05:4f:18:d8:b0:b5:5c:7b:
a3:56:d2:1d:93:48:78:0e:e8:1b:1b:4c:b2:4a:c1:
e1:eb:18:4b:8a:b3:8f:df:43:19:d7:80:6f:fc:87:
ee:c1:d4:f8:b2:07:c4:18:e7:52:b9:a3:e4:26:d1:
72:c4:23:53:80:15:4c:72:56:b6:6b:e4:d7:b1:08:
bc:83:01:c8:2c:06:66:0d:21:13:43:28:b3:f5:8e:
6b:81:b9:98:11:31:e6:dd:24:f6:88:d0:fd:bb:f3:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:65:EA:6F:86:6E:C8:C1:BC:77:FA:4D:14:11:8B:39:64:4B:BB
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RFFl6m-GbsjBvHf6TRQRizlkS7s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.2.0/24
Signature Algorithm: sha256WithRSAEncryption
16:db:31:cd:27:f4:af:c3:1c:83:b5:d1:3f:42:a7:4a:75:5d:
87:c8:25:6c:19:9c:2f:1d:fb:73:8c:1c:51:2b:c5:1c:af:b1:
25:15:1d:81:51:d4:c2:03:8e:df:b5:db:1e:72:80:07:80:05:
e9:8b:86:35:4b:6b:f8:e0:90:64:1a:89:29:9b:f9:9f:a0:d7:
7a:87:30:8c:5c:86:2a:55:b4:37:b8:ed:7d:0b:c3:47:ca:ca:
94:05:0e:ed:83:da:f3:06:7d:c1:62:ea:35:5d:a4:7f:1e:72:
8c:bd:7f:4b:df:00:43:4c:7b:49:60:a5:be:2f:86:9d:c3:c9:
84:7c:c6:e1:6b:55:52:2e:59:b0:d7:b1:61:d6:54:57:17:2a:
82:ad:b3:47:e6:37:a9:aa:f5:70:02:e1:02:26:39:2a:70:98:
54:24:4c:a0:0d:d4:52:03:83:de:10:ed:be:74:0e:60:b0:b9:
43:b4:82:63:1c:a1:a8:3f:7e:41:a1:6e:68:6e:e2:19:bb:33:
3b:66:12:fb:0d:ae:f1:4d:64:55:b8:c5:cd:3f:07:6a:4d:60:
b6:57:92:10:f8:45:f3:29:8c:c8:58:c7:d7:bb:6b:9b:7e:83:
75:e9:d7:d1:ad:5e:91:fe:d5:29:79:63:b5:a9:f4:1e:8a:b0:
bf:fa:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:49 2025 by rpki-client