Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/SlIWSBwyIoggz5eFKGSvAEb1-fQ.roa
File: SlIWSBwyIoggz5eFKGSvAEb1-fQ.roa (raw, json)
Hash identifier: K9edSS3XHx44yCrIrvBhizmo2dCjXePvsAYNaEjOov8=
Subject key identifier: 4A:52:16:48:1C:32:22:88:20:CF:97:85:28:64:AF:00:46:F5:F9:F4
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18CA
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/SlIWSBwyIoggz5eFKGSvAEb1-fQ.roa
Signing time: Fri 17 Jan 2025 01:25:35 +0000
ROA not before: Fri 17 Jan 2025 01:25:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6346 (0x18ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4A5216481C32228820CF97852864AF0046F5F9F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9c:ff:94:80:02:97:32:7a:72:26:0c:b0:75:
ba:e5:8f:b6:9e:d5:bd:f3:91:a6:e2:31:23:93:95:
24:f2:21:00:62:39:e4:96:1a:d3:fe:49:d0:4f:1f:
a4:b1:ac:74:ea:28:af:5a:2e:ee:d5:df:5e:20:f6:
3a:83:af:a7:65:b3:e9:44:ea:e6:fc:4d:f5:77:76:
7d:60:5a:a4:5a:a1:53:e8:8f:2c:99:a3:f0:ac:35:
d0:61:c0:3d:5e:c2:25:fa:b9:3b:ff:48:7b:ab:2e:
5d:43:5d:8b:3e:ff:c4:c4:26:b6:75:22:95:63:23:
3a:77:56:bb:60:84:e0:1a:e5:e5:bd:a9:7a:5d:b2:
86:a8:a8:ae:65:7f:10:59:df:3a:80:75:90:5c:6f:
d6:a2:80:01:bb:c8:3f:dc:d3:e9:d5:cb:03:f2:55:
a9:4b:89:f0:aa:52:ed:78:a8:56:06:3c:99:f6:07:
dd:46:ef:c9:74:c6:33:e8:57:4b:01:8a:05:de:86:
e1:bb:f2:d8:4c:ed:08:82:6f:4d:78:37:18:05:5e:
be:4e:ea:6f:08:14:d5:66:60:b5:26:05:e3:22:bb:
fc:7a:bc:b2:5f:9a:c0:67:a7:d1:ba:66:84:41:33:
38:49:f9:a4:58:a5:6b:e3:bb:a8:08:66:41:d9:7a:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:16:48:1C:32:22:88:20:CF:97:85:28:64:AF:00:46:F5:F9:F4
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/SlIWSBwyIoggz5eFKGSvAEb1-fQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6c:b0:85:95:b0:fb:5b:dc:55:7b:4b:c2:a6:71:55:1f:10:
ef:2a:1a:91:ee:82:d9:a9:b6:9b:2c:d1:35:7f:67:c7:4a:4f:
92:38:74:c3:e9:52:eb:bb:52:32:60:4f:e1:91:ff:9a:5a:16:
d9:9b:f6:47:b9:b4:19:c8:a3:7d:2a:9b:8f:87:5b:24:3b:99:
28:ab:8d:f3:9b:f3:32:36:32:0a:7c:9d:18:c3:f3:50:42:73:
85:68:5e:18:9d:47:a2:35:42:43:01:44:38:ed:20:bd:ce:f2:
26:a9:0c:d2:d8:6f:bd:36:33:f3:8e:31:2e:b6:cd:20:24:15:
93:11:e2:f9:fa:72:f5:41:70:e7:e2:b4:5c:be:8d:51:a4:fc:
05:5a:24:6e:49:70:0f:0f:a4:f3:1b:77:87:b3:d9:5f:07:df:
b2:93:b4:37:f0:85:80:d3:1c:f9:c5:b0:22:2b:b5:95:70:97:
05:90:24:f6:48:8f:a0:39:d6:62:84:e9:47:b4:3d:0b:dc:b5:
cb:a1:e1:18:16:42:59:ab:7b:1d:53:bb:8e:b8:2d:57:26:c1:
8e:8c:ac:bf:50:b5:44:42:f7:ba:84:9b:a1:c0:e5:7a:3f:58:
69:4d:25:1c:29:70:10:1e:b2:9e:47:86:fd:9d:2e:51:f2:86:
7d:f2:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:21 2025 by rpki-client