Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/RfvNYXuWVYIkkTwsGLPN4gzEeds.roa
File: RfvNYXuWVYIkkTwsGLPN4gzEeds.roa (raw, json)
Hash identifier: 3USGiLpyRUzr1oL+EtL1TJpXrtlPV/gpV2ZM+YVKvK0=
Subject key identifier: 45:FB:CD:61:7B:96:55:82:24:91:3C:2C:18:B3:CD:E2:0C:C4:79:DB
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14BF
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RfvNYXuWVYIkkTwsGLPN4gzEeds.roa
Signing time: Wed 11 Sep 2024 02:23:46 +0000
ROA not before: Wed 11 Sep 2024 02:23:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.220.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5311 (0x14bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=45FBCD617B96558224913C2C18B3CDE20CC479DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:0d:d2:79:ea:e0:3a:d3:e3:e3:ce:bf:23:
62:23:b9:37:c5:49:71:a7:6e:ec:72:00:84:06:c9:
05:c9:17:a5:e0:df:ff:1b:3f:fa:b3:c0:27:b0:29:
32:81:bc:fe:75:2f:ec:7b:87:95:d5:2e:1a:9a:c6:
df:c6:59:95:93:d5:99:94:dc:24:25:8b:0a:1a:63:
7d:65:97:18:8d:1d:0e:6f:8e:bf:6f:1d:36:33:c8:
db:01:ae:ff:46:19:bb:0b:95:27:7f:45:29:1b:f6:
f3:04:fb:20:ab:57:44:35:8a:40:2a:e8:a6:4f:e9:
a9:a2:c6:bf:8e:f2:2c:94:38:59:3f:f4:34:8d:88:
9b:c1:13:65:e5:2c:25:9b:0e:68:dd:e3:32:bd:2a:
7d:43:ce:6c:59:66:3d:f1:ce:a7:0a:6d:85:83:53:
b4:a8:c8:0e:3a:b1:54:35:dc:fa:05:2c:4d:f1:4c:
ed:37:00:ec:54:5e:2c:42:c9:4b:e9:2f:2b:12:c4:
39:98:c7:4a:eb:08:de:23:f7:50:bd:9c:bd:0f:61:
c9:6f:69:42:be:18:4b:62:55:05:07:af:3c:54:1a:
8f:39:7c:21:85:8d:61:ec:09:45:cd:3e:d7:6d:ea:
3b:7b:df:b5:7a:3d:de:62:f0:82:9c:4b:eb:06:42:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FB:CD:61:7B:96:55:82:24:91:3C:2C:18:B3:CD:E2:0C:C4:79:DB
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RfvNYXuWVYIkkTwsGLPN4gzEeds.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.254.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e2:bc:fb:63:88:ba:94:b1:74:60:55:63:8c:76:09:66:70:
96:cd:06:c7:37:08:c1:97:61:32:fc:95:64:7f:d8:c0:6b:7a:
19:0a:af:d0:5c:80:4a:aa:27:78:37:c8:e4:77:56:77:7f:95:
88:61:55:9f:84:27:c4:80:8d:bd:96:0f:6c:7d:e3:1a:56:90:
f3:26:47:bf:af:4c:6d:e0:c0:f6:d4:45:e4:34:64:65:31:9d:
4c:14:9f:74:00:68:01:dc:e6:d7:82:2b:f2:c1:e1:cb:21:1f:
51:49:46:19:ee:fe:99:c2:54:07:d3:76:0c:5b:d3:e0:9b:3d:
c5:7a:88:5b:ef:73:a6:dc:3b:d9:5e:9f:f8:a3:6a:90:44:73:
23:e6:67:9a:16:53:e1:bb:53:a8:64:8a:47:10:8f:c8:6f:96:
32:eb:ca:e9:0a:21:60:fa:be:ae:a9:3e:c4:2e:31:2d:5b:34:
e5:c4:eb:13:7e:b5:1f:52:cd:0d:d9:1c:ff:e6:7b:8e:cf:f0:
c1:f5:48:a6:f6:4b:cc:53:3b:f0:4a:8a:4d:03:51:c3:94:dd:
c8:6a:cd:a9:e8:8f:26:b9:f4:08:6d:8e:a8:28:c9:ba:46:41:
e7:df:5c:84:60:4c:b4:b3:8d:b3:72:a1:16:7a:00:cb:b8:95:
d1:c8:e6:1e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw
MjIzNDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ1RkJDRDYxN0I5NjU1
ODIyNDkxM0MyQzE4QjNDREUyMENDNDc5REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDifg3SeergOtPj486/I2IjuTfFSXGnbuxyAIQGyQXJF6Xg3/8b
P/qzwCewKTKBvP51L+x7h5XVLhqaxt/GWZWT1ZmU3CQliwoaY31llxiNHQ5vjr9v
HTYzyNsBrv9GGbsLlSd/RSkb9vME+yCrV0Q1ikAq6KZP6amixr+O8iyUOFk/9DSN
iJvBE2XlLCWbDmjd4zK9Kn1DzmxZZj3xzqcKbYWDU7SoyA46sVQ13PoFLE3xTO03
AOxUXixCyUvpLysSxDmYx0rrCN4j91C9nL0PYclvaUK+GEtiVQUHrzxUGo85fCGF
jWHsCUXNPtdt6jt737V6Pd5i8IKcS+sGQuVtAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQURfvNYXuWVYIkkTwsGLPN4gzEedswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1Jmdk5ZWHVXVllJa2tU
d3NHTFBONGd6RWVkcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3P4wDQYJKoZIhvcNAQELBQADggEBACbivPtjiLqUsXRgVWOMdglmcJbNBsc3
CMGXYTL8lWR/2MBrehkKr9BcgEqqJ3g3yOR3Vnd/lYhhVZ+EJ8SAjb2WD2x94xpW
kPMmR7+vTG3gwPbUReQ0ZGUxnUwUn3QAaAHc5teCK/LB4cshH1FJRhnu/pnCVAfT
dgxb0+CbPcV6iFvvc6bcO9len/ijapBEcyPmZ5oWU+G7U6hkikcQj8hvljLryukK
IWD6vq6pPsQuMS1bNOXE6xN+tR9SzQ3ZHP/me47P8MH1SKb2S8xTO/BKik0DUcOU
3chqzanojya59AhtjqgoybpGQeffXIRgTLSzjbNyoRZ6AMu4ldHI5h4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:36 2025 by rpki-client