Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Xml9HuFeJBKwLKAdCWjb897Bfm8.roa
File: Xml9HuFeJBKwLKAdCWjb897Bfm8.roa (raw, json)
Hash identifier: pEJa0IXsqRx7owg9FDw/UULbeiJUMuRl9YSKWzdgO94=
Subject key identifier: 5E:69:7D:1E:E1:5E:24:12:B0:2C:A0:1D:09:68:DB:F3:DE:C1:7E:6F
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 189A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Xml9HuFeJBKwLKAdCWjb897Bfm8.roa
Signing time: Fri 17 Jan 2025 01:25:18 +0000
ROA not before: Fri 17 Jan 2025 01:25:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6298 (0x189a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5E697D1EE15E2412B02CA01D0968DBF3DEC17E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:ba:db:c4:c0:25:3e:0d:c1:d1:9b:0f:59:
9a:c9:e7:ec:5f:0a:38:c4:0a:f3:9e:b2:39:43:42:
35:b2:9e:81:c8:77:3b:3c:dd:89:a3:e1:94:1c:15:
bf:e6:eb:b1:38:de:6b:59:65:b9:f5:7f:13:c2:b2:
55:ef:01:a6:1f:ad:ed:60:48:a5:36:89:c8:1c:32:
78:6b:fa:35:63:39:f2:53:d1:98:e6:a2:27:0d:32:
7f:54:3a:e4:fc:be:44:3c:65:f2:68:6b:82:de:02:
7f:5d:8e:96:9a:1c:d4:da:f1:a5:66:36:32:3e:00:
81:cb:b0:d2:b3:78:58:69:b1:9e:e2:3c:e1:af:3a:
9c:e7:ef:55:2f:01:a6:16:e9:6c:3a:a0:2f:db:13:
3c:d3:eb:ec:22:2f:50:6e:10:f0:ce:8a:6d:05:20:
d3:00:eb:2f:fb:8f:26:3c:76:20:ce:17:86:ec:96:
0b:4c:05:74:f0:d4:5a:a1:5d:80:ad:df:1c:ef:6f:
18:27:67:71:4c:74:88:42:56:0c:30:3d:bc:5a:19:
28:b8:fb:83:05:64:a4:10:23:df:10:1b:f0:49:ab:
2f:9f:6d:34:aa:c7:40:a2:5d:ba:50:67:fe:6a:0d:
73:53:65:e5:53:9d:4c:39:97:3e:60:15:1f:ac:73:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:7D:1E:E1:5E:24:12:B0:2C:A0:1D:09:68:DB:F3:DE:C1:7E:6F
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Xml9HuFeJBKwLKAdCWjb897Bfm8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:48:05:4f:59:dc:1d:57:7e:bd:14:62:78:b3:8b:8e:7a:f6:
04:a0:c6:41:fc:08:c7:29:9b:5f:70:2b:6a:f7:7e:de:5b:b3:
a0:52:41:32:9f:81:2f:3d:2a:f5:f1:f3:ef:e7:39:ef:7d:ac:
32:ab:8f:24:92:33:ba:ea:a4:92:cc:5a:a1:88:e6:50:69:0f:
70:52:4d:16:17:7c:5e:d3:19:54:2b:d5:d9:38:66:fd:0b:cf:
2c:1e:ff:7d:e1:c5:4a:8f:07:1a:b0:94:50:5d:9a:01:b6:44:
da:0e:3f:d0:91:7c:b1:fe:eb:b4:fd:32:2c:94:04:4c:b1:37:
ed:ec:c4:bf:bf:36:b5:ec:b7:f8:69:7f:0d:4c:ee:bd:61:d3:
6b:71:bc:1e:a9:01:a0:3d:49:d1:9f:23:6a:23:ad:13:c1:b6:
30:22:25:46:f9:15:22:cd:d2:d4:38:a3:04:ee:5b:24:4d:eb:
4c:26:a1:7a:84:fa:4b:23:07:01:45:71:a7:42:18:0b:6e:07:
39:9e:a6:2a:be:55:fc:90:97:96:1c:8a:14:2e:1c:8b:64:5d:
b3:02:71:f2:f5:34:c6:a8:e6:ad:1f:ed:17:7b:ad:b7:b3:33:
c8:29:4e:24:54:07:21:77:a2:dd:7d:8b:e3:04:78:22:40:7b:
f6:dc:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:35 2025 by rpki-client