Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YEUSUYp0TKoVJbs4QoS_2RuY5Y8.roa
File: YEUSUYp0TKoVJbs4QoS_2RuY5Y8.roa (raw, json)
Hash identifier: ZghU3ii8G07iTwu4pj3VcLVJCVURV3896gA5X4SBdzU=
Subject key identifier: 60:45:12:51:8A:74:4C:AA:15:25:BB:38:42:84:BF:D9:1B:98:E5:8F
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18D8
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YEUSUYp0TKoVJbs4QoS_2RuY5Y8.roa
Signing time: Fri 17 Jan 2025 01:25:40 +0000
ROA not before: Fri 17 Jan 2025 01:25:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6360 (0x18d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=604512518A744CAA1525BB384284BFD91B98E58F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:31:79:f3:99:f6:be:b2:91:fd:6a:c6:54:
d5:b3:45:ce:09:2d:8f:04:3d:5a:f1:d4:65:a7:00:
c9:88:ad:a2:85:20:f3:2f:03:f7:41:43:2d:19:5d:
5b:ef:99:62:0d:0b:7e:f4:51:09:22:8b:f7:31:8a:
61:a8:56:45:5c:2e:47:3a:a9:2a:b2:17:04:18:d5:
cc:cb:f3:9b:23:07:ec:71:94:f4:df:9a:82:30:0f:
0d:ba:22:6d:0f:43:f9:05:ab:53:d0:94:f8:8a:11:
81:eb:de:98:f9:18:c0:10:1e:c5:5c:ff:d6:86:56:
13:13:25:96:f5:d1:f9:db:1e:76:96:13:9a:2e:75:
0e:ac:d5:a4:b8:1b:94:73:dd:eb:c4:c9:af:fd:55:
1e:0e:4a:66:a6:f3:96:6d:60:57:1a:67:cb:b5:e2:
34:ce:1e:e9:f0:33:04:cc:b3:38:9e:ea:b4:0b:c6:
4f:43:68:d4:a4:ee:20:b2:fb:ab:48:5f:9e:a7:f5:
1e:74:7d:aa:d5:4c:26:fb:20:83:c7:cd:5b:33:cd:
5f:ad:f5:1d:1b:64:47:cb:6c:c9:23:cc:ee:8b:3c:
89:86:af:46:bd:cb:fc:a5:8f:3f:e2:71:44:c5:15:
b4:73:88:b6:4d:ac:7f:5e:2f:b2:47:71:b5:3e:ca:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:45:12:51:8A:74:4C:AA:15:25:BB:38:42:84:BF:D9:1B:98:E5:8F
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YEUSUYp0TKoVJbs4QoS_2RuY5Y8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.95.0/24
Signature Algorithm: sha256WithRSAEncryption
86:96:7e:dc:6f:66:0e:73:3a:5e:25:5f:e5:3e:30:9a:3e:7d:
87:4a:d3:e3:21:51:f3:36:51:b3:c1:63:1d:af:fc:64:1e:03:
b1:fc:68:d7:d5:9c:16:3c:7d:48:c9:30:4a:2a:50:07:1e:93:
fd:77:a3:20:67:d0:13:22:d5:b3:3b:35:fc:a0:ec:15:dd:b4:
9d:df:4d:cd:bf:05:93:a9:6e:20:1b:5c:a3:73:4a:a1:0c:b4:
39:7b:59:c1:90:63:f3:fd:ef:84:44:df:3d:a5:a3:41:4e:a0:
ec:2f:ef:ec:c6:a8:e3:e5:95:c0:be:22:e4:2a:2e:e1:45:3b:
20:d3:e9:b0:af:c7:5e:26:63:ad:49:b1:31:df:2b:5e:2b:a3:
41:97:e9:f0:35:8d:6a:cf:4d:0e:d1:4e:01:a0:92:89:a1:90:
8a:e1:c4:2c:8a:3f:11:e4:a6:d1:84:6c:e0:d5:d7:d1:1a:b6:
32:b8:90:92:62:4f:63:f4:68:99:fd:85:61:09:e4:ce:76:7e:
bf:ed:17:16:93:cb:2c:16:50:0f:03:5b:d1:0e:ba:35:ee:c7:
88:50:db:70:42:3c:ba:20:45:49:c5:1b:80:82:0a:17:ca:72:
9e:70:c7:da:ee:a3:e2:6c:b9:c6:b5:fc:e6:0e:03:59:7d:7b:
fe:71:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:17 2025 by rpki-client