Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/XtrNbuaLu57HDt_1kYWbmxreOhI.roa
File: XtrNbuaLu57HDt_1kYWbmxreOhI.roa (raw, json)
Hash identifier: 3XHQdme6YsqMopG8w9UO3r4WEwT4zKArdAHI7OKXZ4w=
Subject key identifier: 5E:DA:CD:6E:E6:8B:BB:9E:C7:0E:DF:F5:91:85:9B:9B:1A:DE:3A:12
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18C1
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XtrNbuaLu57HDt_1kYWbmxreOhI.roa
Signing time: Fri 17 Jan 2025 01:25:31 +0000
ROA not before: Fri 17 Jan 2025 01:25:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.220.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6337 (0x18c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5EDACD6EE68BBB9EC70EDFF591859B9B1ADE3A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:33:de:22:b6:7a:5f:0e:58:27:6c:e0:e7:
a4:01:da:25:55:77:7e:aa:04:66:86:0b:c4:72:ba:
7e:65:b8:1b:60:34:42:de:2b:fd:4c:af:f1:7f:71:
2d:6a:19:69:75:58:86:ec:4d:5e:74:f8:c9:e0:65:
ec:44:02:4d:32:2f:57:55:42:85:3a:6b:b1:26:c4:
b0:eb:15:1d:6d:75:92:db:f8:f8:12:0f:81:a8:61:
15:ab:cf:92:d2:9e:4f:b5:fc:41:a9:c1:1b:2d:ae:
60:fd:92:a4:e7:5c:21:20:b5:8e:4f:b1:ba:10:53:
85:b2:79:46:76:f9:0a:af:21:52:c0:7a:c7:fc:fd:
bf:3f:26:96:76:ae:40:8d:34:1b:eb:d9:bb:74:5a:
5c:b3:6b:16:15:7b:f0:d3:bb:c2:d0:63:59:4c:35:
52:9e:ce:82:69:cc:e8:54:9a:71:62:fa:1a:8f:d7:
d0:97:23:83:c0:a1:39:43:23:af:2e:78:01:d0:05:
a0:80:d5:69:81:07:9c:03:d3:15:e3:9a:26:06:6d:
46:67:ac:d1:04:36:d4:c1:1d:f1:40:71:ff:f0:59:
18:88:f3:da:73:41:95:b6:07:ae:17:e3:6a:3c:b6:
91:fd:8c:2a:5c:16:32:5b:3f:34:12:28:a6:ae:ad:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DA:CD:6E:E6:8B:BB:9E:C7:0E:DF:F5:91:85:9B:9B:1A:DE:3A:12
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XtrNbuaLu57HDt_1kYWbmxreOhI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.250.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2d:3a:ee:d2:10:08:e5:d9:b1:92:fb:23:6a:8f:cb:65:76:
49:e6:fc:71:86:d7:65:f4:09:85:8d:e3:84:49:3f:5d:93:1f:
87:f8:3a:ab:7d:e5:8c:1c:94:85:06:73:19:bb:13:31:e0:bb:
18:0b:95:cf:86:b0:8d:07:c9:19:3d:4f:3e:0c:37:a0:b3:61:
2a:75:bf:e5:bb:1a:ad:89:3b:2e:64:f3:64:37:c4:7e:b6:84:
57:32:6e:41:86:ea:11:94:7b:2a:50:19:eb:2a:3e:57:fd:42:
1e:08:1c:a9:90:49:1a:5a:62:a9:47:3b:d5:5a:ea:87:f2:be:
c8:3e:12:42:d8:8c:b8:88:4c:15:2a:1a:6d:6b:37:aa:b7:1a:
52:ee:2b:72:f7:0b:20:87:5b:41:3d:91:f8:db:5c:e3:0d:cb:
b0:de:84:e4:29:13:00:18:98:cd:13:94:f8:a1:4c:b4:7c:18:
9a:fd:ce:3c:ce:c4:6f:67:44:22:e6:f2:d8:88:3a:7a:ed:f3:
aa:af:fa:12:15:4a:f7:9a:ba:09:e7:74:b7:1b:6d:59:15:24:
68:2c:a5:62:46:cf:e4:9e:c1:7b:1d:d4:d6:14:3f:6b:3a:a5:
b3:f3:23:f3:7e:9e:df:1d:05:19:dd:64:44:e7:05:d7:b9:ab:
76:19:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:58 2025 by rpki-client