Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ZS3mTowuFFHyfkvZVR-xBQ6uaMs.roa
File: ZS3mTowuFFHyfkvZVR-xBQ6uaMs.roa (raw, json)
Hash identifier: Y4euGHUaLx59NWNNe0ue9RayM6jXioK7vytjsYVOuWI=
Subject key identifier: 65:2D:E6:4E:8C:2E:14:51:F2:7E:4B:D9:55:1F:B1:05:0E:AE:68:CB
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 12EF
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZS3mTowuFFHyfkvZVR-xBQ6uaMs.roa
Signing time: Sat 29 Jun 2024 19:44:17 +0000
ROA not before: Sat 29 Jun 2024 19:44:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4847 (0x12ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jun 29 19:44:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=652DE64E8C2E1451F27E4BD9551FB1050EAE68CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:65:f2:a4:41:0e:65:fb:3c:1d:66:14:81:
70:47:c6:8d:b4:c7:ce:91:fb:8d:e1:35:c5:ac:4e:
a6:6b:60:6f:36:96:3b:07:3c:ac:0a:e5:40:16:8f:
93:2a:32:62:54:fc:e2:e1:d9:95:d8:10:20:c0:26:
99:8a:46:aa:e5:f6:07:77:c1:4a:2c:48:ab:f6:04:
28:c0:04:6b:66:4e:a3:a6:7e:b0:80:dc:44:6b:20:
51:c3:ea:e0:98:9e:5d:27:be:08:79:84:57:83:2b:
f8:8b:7e:63:15:ae:f8:69:51:92:aa:a4:ce:cf:80:
55:c8:62:81:52:ee:cb:19:94:d2:e5:9f:aa:f1:0d:
a7:53:a4:aa:24:e2:79:eb:03:d0:8f:53:10:70:bf:
e0:3b:45:f3:03:e8:74:e1:b3:f8:a1:35:c0:33:a6:
e5:2e:f4:39:28:5c:4d:0b:d4:c6:d8:eb:0c:9c:92:
ee:6a:9d:58:c5:ba:b7:54:40:fd:0c:e0:33:23:76:
b6:c0:bb:86:c8:34:ba:46:89:1c:5f:81:33:19:c4:
d1:dd:04:94:79:6a:67:bb:a3:c4:22:f1:70:ca:87:
72:a3:e9:02:d1:44:69:63:f3:8a:f4:6c:8b:79:57:
cb:67:c2:1d:cc:83:75:d7:55:15:6a:f3:8b:62:bc:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:E6:4E:8C:2E:14:51:F2:7E:4B:D9:55:1F:B1:05:0E:AE:68:CB
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZS3mTowuFFHyfkvZVR-xBQ6uaMs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
72:ab:c5:72:24:b7:18:69:9c:a2:5b:f7:99:7d:71:e3:d5:ce:
55:03:72:70:24:97:96:2e:87:21:b4:f6:98:a9:ac:93:d3:f2:
d9:21:92:8b:9b:bf:92:3b:08:af:ca:ae:17:48:04:64:a5:62:
f5:9d:8b:21:a3:dd:69:7f:4d:88:ad:91:ea:4a:c4:b0:cb:7d:
97:cc:a3:bb:88:92:25:12:bd:da:33:be:d9:44:62:5b:e9:42:
de:42:da:f4:dc:f6:74:74:3f:34:e3:b3:96:a9:a8:a6:5b:47:
66:5c:a8:a5:01:9a:5f:b8:6f:6e:05:a9:d3:c7:7c:ec:6b:7c:
0d:27:16:26:5b:2b:b3:58:e0:98:6c:20:4d:71:69:1c:34:fa:
b4:98:72:49:07:f3:e3:d7:45:70:01:56:2d:b9:9d:0e:86:59:
7e:dc:0c:4e:31:d7:ec:c5:7d:65:9a:31:16:d6:d9:76:fb:56:
7f:84:97:9d:82:26:86:0e:8e:0f:8e:35:7f:95:10:dd:f4:87:
92:b1:93:09:1c:ed:f8:4b:d8:ff:db:de:e0:4c:a3:17:f9:70:
3d:46:59:ad:16:a0:07:ab:f9:83:14:3e:c5:96:b3:ca:f8:9d:
6b:2a:06:0d:5e:13:57:94:42:02:fb:92:b2:90:86:54:fb:d6:
c5:e8:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:28 2025 by rpki-client