Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YU7Co7sqID9YQPohDN9RNQ0Wgg4.roa
File: YU7Co7sqID9YQPohDN9RNQ0Wgg4.roa (raw, json)
Hash identifier: OEpMQGVnGi2Yl6RbwUeXnjcKraOUhVGzsG3FaX3gIfE=
Subject key identifier: 61:4E:C2:A3:BB:2A:20:3F:58:40:FA:21:0C:DF:51:35:0D:16:82:0E
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18EC
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YU7Co7sqID9YQPohDN9RNQ0Wgg4.roa
Signing time: Fri 17 Jan 2025 01:25:48 +0000
ROA not before: Fri 17 Jan 2025 01:25:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.220.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6380 (0x18ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=614EC2A3BB2A203F5840FA210CDF51350D16820E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:21:8b:fb:f7:56:9d:1b:0b:6e:1c:83:c8:
58:3c:e5:b9:64:9e:16:09:71:5f:ac:e9:9a:dc:32:
6e:93:3a:16:cd:b2:6c:c5:dd:cd:ec:17:da:b8:bc:
a6:54:8b:ad:2d:27:67:40:e1:22:2d:13:43:08:e5:
f8:93:9c:c2:78:06:7e:11:0c:b3:33:34:dd:a0:4e:
87:28:fb:22:4f:cb:9f:00:e2:4c:95:9a:eb:d2:fb:
eb:99:d8:dc:c9:c1:83:9f:e5:58:c1:68:92:9c:f4:
5c:51:33:3e:1c:74:80:e1:cc:70:10:e3:70:87:16:
d8:3f:a1:7b:8d:31:b1:ca:0f:58:65:aa:5b:3f:17:
6d:1a:6e:97:61:73:bb:e9:30:5f:38:d8:0d:3c:44:
66:1c:fb:6e:4f:fb:f3:5a:1e:0d:25:af:ee:01:5a:
ab:c8:b9:3f:10:9b:8f:3b:ca:35:28:4b:ca:e5:26:
74:33:6d:05:88:03:20:a1:83:ec:1b:49:9f:a6:dc:
90:7f:22:25:bc:e5:9f:fd:2d:74:1c:ad:b5:5b:38:
3d:91:a2:a1:16:79:03:23:d0:b6:1d:07:22:34:99:
d6:f0:c6:7d:51:b5:56:a3:5a:04:06:ad:75:5c:69:
98:7a:87:74:c5:91:9d:59:d0:13:c9:7a:a9:df:50:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4E:C2:A3:BB:2A:20:3F:58:40:FA:21:0C:DF:51:35:0D:16:82:0E
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YU7Co7sqID9YQPohDN9RNQ0Wgg4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:69:89:4d:ec:f1:c0:46:c5:c3:48:35:b2:96:36:f7:33:85:
99:f9:3f:7d:af:7c:e1:e6:08:6f:61:c8:a7:fa:36:f2:e9:1e:
9c:72:9a:8f:b9:4a:73:05:4f:09:25:01:97:d2:36:71:23:a1:
26:44:c2:8e:ed:ac:63:72:72:30:ea:de:3b:92:d6:42:54:c6:
dc:67:06:f0:5f:d2:9f:a2:d3:ac:4d:c3:a7:69:6f:a0:09:d9:
a2:f4:db:5b:e5:65:64:f1:cc:7e:1a:db:5d:a1:d2:0f:3b:5a:
4c:7f:dc:1a:cf:80:32:5d:62:6d:ce:66:49:1a:93:c5:f0:7c:
17:2e:c2:5a:30:90:e8:b5:4a:e1:b8:27:a5:57:2b:67:73:47:
b0:6d:a2:b3:b2:8a:df:68:25:46:1d:41:d2:53:1f:f4:f1:03:
01:36:3e:4f:ca:0d:45:34:e0:96:5d:6d:b2:6a:18:1c:e7:16:
63:9f:6a:b8:59:74:56:d7:fe:6f:38:53:ef:82:bf:a6:59:a0:
2a:da:b3:80:9b:79:b0:2f:b7:16:fe:12:49:a4:bc:81:26:54:
be:e9:64:3f:a8:3a:e0:69:38:35:15:dc:06:6c:3b:41:ea:63:
3b:75:81:2d:45:ad:39:72:c4:a1:75:1d:a4:37:73:40:4e:4c:
37:b6:43:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:16 2025 by rpki-client