Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Tt6TqIGSy-sn9eoXs8R5xN9tBes.roa
File: Tt6TqIGSy-sn9eoXs8R5xN9tBes.roa (raw, json)
Hash identifier: V8Hg16fUpRzSliHJtySREgc77zm+zvwlnT5P4X7pkZ8=
Subject key identifier: 4E:DE:93:A8:81:92:CB:EB:27:F5:EA:17:B3:C4:79:C4:DF:6D:05:EB
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18B6
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Tt6TqIGSy-sn9eoXs8R5xN9tBes.roa
Signing time: Fri 17 Jan 2025 01:25:27 +0000
ROA not before: Fri 17 Jan 2025 01:25:27 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6326 (0x18b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4EDE93A88192CBEB27F5EA17B3C479C4DF6D05EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:5e:a5:e4:ff:5f:44:53:76:67:64:1d:59:
9f:f1:84:3b:6a:2d:9f:6c:0d:30:3b:34:47:ce:2e:
6f:34:b1:09:39:df:ed:28:2f:6f:20:5e:03:08:4f:
2d:8d:0d:4f:ce:10:51:fd:cf:0f:f4:19:bd:96:93:
2e:97:11:af:28:d1:4c:19:73:0f:29:f6:a8:df:1b:
41:5e:ed:b9:17:e6:14:74:9c:0b:20:d4:f8:a8:05:
57:62:b1:68:0a:be:49:7f:bc:2a:ea:c8:58:14:b2:
6e:f5:89:a0:dd:9c:90:b0:c6:c2:ad:f2:20:0b:1e:
0c:b4:6a:a8:9c:3f:bd:c3:38:8c:b0:d8:77:4e:69:
4b:02:e0:c4:5a:51:47:81:00:d6:f5:6e:57:47:b7:
1b:d9:08:44:ef:0a:8f:e8:11:93:d2:08:88:e2:b8:
2b:9a:46:4d:99:a4:5d:29:33:2d:4e:58:72:ea:dd:
8e:fa:94:97:20:96:c7:0c:96:00:e0:b1:e9:e9:82:
b6:43:9f:aa:17:c1:e8:4e:ae:2a:5f:fa:a6:be:8e:
b5:22:1d:ff:e3:b8:93:c7:b1:69:1b:53:67:a2:83:
1d:53:8e:32:aa:ad:8a:3c:d1:47:e3:a6:34:63:65:
9d:9b:65:e3:8a:86:0d:23:51:b9:25:98:23:48:24:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:93:A8:81:92:CB:EB:27:F5:EA:17:B3:C4:79:C4:DF:6D:05:EB
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Tt6TqIGSy-sn9eoXs8R5xN9tBes.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:73:45:a6:e5:ce:45:ba:b6:21:e6:73:fb:b5:3d:4e:02:af:
0f:de:04:30:fb:bf:60:d4:c4:bd:32:9c:9d:ff:1e:96:cd:31:
37:04:aa:9e:0a:f8:7a:f0:23:b0:ec:ee:6e:da:16:75:3f:17:
76:39:a0:d2:05:64:21:cb:21:f0:96:04:80:d7:f0:00:44:2d:
cf:ed:e8:52:c6:75:e5:2b:db:eb:be:5f:c3:75:b5:5b:55:b0:
a4:00:bb:ff:b1:a5:f0:40:00:fe:63:65:a0:a2:f7:11:64:7b:
2c:e5:32:66:5e:ec:65:7d:42:f3:07:57:58:86:d7:94:ba:68:
ed:ac:93:1d:0b:4c:11:79:9b:9b:47:a0:76:c5:3e:be:9d:3d:
fe:cf:22:b4:34:f7:70:3e:a2:ea:25:cc:a7:50:95:a2:1f:e2:
6f:df:23:44:b3:c1:77:c7:87:ee:67:69:48:7c:e4:77:40:57:
76:2d:50:71:c2:69:8c:c2:fe:7c:35:32:81:1f:45:47:74:5b:
83:72:03:e3:de:21:05:b0:f1:28:31:38:6a:58:33:3c:81:74:
fb:57:d0:f7:cb:cc:f5:cf:b4:29:65:55:97:a8:47:ad:bd:9c:
f5:10:d5:42:9d:c6:95:d8:ee:d9:54:4c:fa:a7:cb:ca:b9:8b:
4e:cd:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:54 2025 by rpki-client