Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/XFjLpfbZhziw9qMrguCi2jQt3gc.roa
File: XFjLpfbZhziw9qMrguCi2jQt3gc.roa (raw, json)
Hash identifier: WM1z4+hOZV4wlbAzkT5BhDoe0muD02gmdI2g10e45yw=
Subject key identifier: 5C:58:CB:A5:F6:D9:87:38:B0:F6:A3:2B:82:E0:A2:DA:34:2D:DE:07
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1507
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XFjLpfbZhziw9qMrguCi2jQt3gc.roa
Signing time: Wed 11 Sep 2024 02:27:33 +0000
ROA not before: Wed 11 Sep 2024 02:27:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.221.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5383 (0x1507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:27:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5C58CBA5F6D98738B0F6A32B82E0A2DA342DDE07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:09:c3:b5:a6:b8:9b:9d:06:29:95:39:95:
5d:05:4f:cd:2e:46:50:1d:37:17:1e:ec:3f:a5:f4:
99:13:8f:43:2f:3e:3a:51:90:63:98:41:73:c3:0c:
c0:80:3d:9a:44:9f:ad:36:7d:8e:63:1c:12:27:26:
21:6c:e7:71:6f:d3:21:36:a5:34:0a:32:14:68:ed:
7e:f3:e8:2b:61:5a:d0:cc:09:af:6c:92:18:4b:0a:
cc:62:41:dd:89:13:17:17:d7:a1:81:d2:0c:33:ac:
05:d3:35:6e:70:f0:a8:3c:6e:d4:8e:ce:12:ac:6d:
6f:24:6e:b7:55:cf:1d:36:3d:f4:3b:31:61:31:0e:
f6:ff:f3:69:42:f0:23:91:de:63:33:01:ab:23:d9:
07:6e:1c:f9:cf:e7:d5:8d:da:d7:c5:ca:fc:4a:e5:
c2:49:68:cf:dc:92:c9:10:41:df:d8:61:7b:5c:b2:
4e:f8:e9:35:79:96:51:4e:d7:87:ab:66:53:05:cf:
c9:a7:eb:b6:32:6b:68:7c:ad:87:7a:2b:c4:c2:52:
f3:65:be:b6:84:f5:68:97:83:5b:06:71:2c:39:8d:
db:bc:c9:fb:14:36:fa:47:03:2c:d9:86:bc:84:9f:
a8:22:e2:da:ab:c0:82:8a:6a:71:b0:05:3d:e4:18:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:58:CB:A5:F6:D9:87:38:B0:F6:A3:2B:82:E0:A2:DA:34:2D:DE:07
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XFjLpfbZhziw9qMrguCi2jQt3gc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.33.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f7:5a:7f:e9:a6:4a:4d:dc:5b:a0:73:35:ef:eb:8f:33:0d:
1e:5e:13:75:0c:62:9e:c5:9b:9c:d8:d7:b4:4c:32:43:fb:2d:
14:a4:62:ca:29:20:a1:33:e8:b2:f1:3d:8e:f0:01:45:6f:56:
5d:c0:f9:6d:dd:72:cc:88:26:33:d6:ef:8b:2f:bf:84:21:24:
fb:32:8b:2d:e8:e9:ec:81:d0:6e:40:dd:75:7c:8d:0d:6a:a2:
6d:b0:6e:cf:0d:7f:f6:db:1e:06:a3:ae:18:71:cc:96:40:8a:
f7:90:f0:83:6e:e7:5a:ba:84:50:50:b9:43:f3:0b:65:80:99:
aa:9f:8b:b1:69:9c:c1:5e:b9:bf:36:a2:42:c9:57:d1:16:8b:
8a:09:fb:db:1e:64:a2:b0:6d:cc:e2:13:b0:c4:e1:70:30:6d:
3c:28:69:a1:55:52:27:ec:1a:ef:76:b2:1c:dd:85:5d:c3:15:
1e:68:f4:e7:6e:bf:b3:2d:03:49:49:83:61:5b:92:fe:a6:da:
68:77:3f:46:b6:14:d8:d6:d8:a7:05:41:7e:b1:44:c3:eb:2d:
82:bd:ad:5f:09:4d:00:1e:fc:e8:80:cf:c0:28:34:bc:60:3e:
20:fd:c2:ab:bf:41:ee:d8:c5:4d:20:96:a4:8b:78:4c:91:27:
d4:01:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:35 2025 by rpki-client