Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/WkAyDeYEfZL8dAUa83_ssgZySSY.roa
File: WkAyDeYEfZL8dAUa83_ssgZySSY.roa (raw, json)
Hash identifier: MSUM6de18iyiDbCqouwTIcnybYVGZSn21budl/NNiwI=
Subject key identifier: 5A:40:32:0D:E6:04:7D:92:FC:74:05:1A:F3:7F:EC:B2:06:72:49:26
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 187E
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WkAyDeYEfZL8dAUa83_ssgZySSY.roa
Signing time: Fri 17 Jan 2025 01:25:08 +0000
ROA not before: Fri 17 Jan 2025 01:25:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 17621
IP address blocks: 103.5.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6270 (0x187e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5A40320DE6047D92FC74051AF37FECB206724926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:2a:62:77:b9:da:50:98:36:83:a6:8f:db:
40:e2:55:d8:54:4f:04:29:df:62:bf:49:52:d4:d4:
ff:19:5b:fc:b2:de:f9:8a:8d:31:0f:45:ce:ea:cb:
cc:12:ff:6b:14:61:22:1c:dc:0b:49:47:a0:84:c1:
06:8a:05:af:38:ab:d7:18:f7:18:22:f7:b7:a6:23:
0d:e0:0d:7b:e3:55:01:53:d1:c8:d9:2b:86:73:db:
bb:c1:ac:be:0f:21:3c:4d:a2:18:86:99:29:e6:36:
25:71:30:47:10:b8:6d:0d:0d:cb:72:b6:7c:89:27:
fc:4a:8d:25:f7:b9:3b:91:15:c9:7c:ad:47:ab:4b:
c5:a0:fd:0e:28:a1:ca:7d:41:58:ef:46:75:c7:b7:
94:38:db:61:64:b4:23:bf:cd:95:ae:63:98:67:ff:
fb:07:70:a0:53:8c:64:8e:07:9d:32:05:28:bb:e2:
1b:5c:68:6c:bd:91:f9:5f:02:2d:19:8a:76:26:c7:
4e:03:23:0b:46:a2:51:ee:d6:ee:61:22:dc:58:a2:
8a:e7:e6:bc:1c:9f:be:ed:dc:1f:3c:85:9c:d6:12:
f2:9f:a6:f5:6b:33:b4:da:d3:08:4f:8f:a7:22:03:
7e:d3:21:b1:d5:cd:70:2d:6c:25:3e:61:bc:3e:4e:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:40:32:0D:E6:04:7D:92:FC:74:05:1A:F3:7F:EC:B2:06:72:49:26
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WkAyDeYEfZL8dAUa83_ssgZySSY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:ce:0c:ef:7b:8d:d0:e1:09:02:5a:1b:c1:15:5d:64:1a:9a:
12:77:08:63:c9:62:f6:05:9c:f2:1d:5c:e4:d3:48:08:e7:05:
71:9b:f1:92:9f:a5:9d:25:7d:0a:94:a8:bd:db:9a:dd:25:61:
4a:02:e4:a4:16:e8:79:6b:75:aa:52:ab:f6:8a:c1:78:61:43:
fc:a0:a5:68:c1:89:3a:c4:16:72:d3:6c:93:c0:00:c7:ae:aa:
0a:93:31:80:4c:aa:d6:32:b0:ec:ba:f9:fe:8e:52:62:30:85:
b5:11:36:d4:7a:b5:2c:bc:07:1b:11:a4:eb:f6:54:90:2e:b9:
da:2c:24:4c:af:ff:d8:b0:a0:a2:ce:b7:61:1a:3e:fb:65:43:
d2:d3:06:43:fb:aa:dd:ce:26:aa:40:8e:d7:cc:a0:46:1d:4f:
a6:63:8b:47:d5:13:23:f3:59:b8:17:20:ad:fe:58:7b:54:f2:
23:fa:79:56:af:3c:ad:e7:c1:84:b3:6b:e9:9b:3d:73:79:48:
f7:c1:d7:a0:f7:1b:7c:e0:39:0a:80:6f:a4:db:70:bd:c9:e0:
31:b6:e6:0b:97:2a:c8:61:39:6d:c2:6d:92:45:fe:04:ad:ec:
41:d5:16:f7:eb:e4:ef:95:84:0f:0d:f9:23:85:1a:15:49:25:
06:54:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:36 2025 by rpki-client