Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/_YC_Zdsbpiq-UTT1hFqVx8-hfm4.roa
File: _YC_Zdsbpiq-UTT1hFqVx8-hfm4.roa (raw, json)
Hash identifier: OlKriS0UgPDTDV4pnv5a+oEs9F/lQhVQQLKu/XBwzjc=
Subject key identifier: FD:80:BF:65:DB:1B:A6:2A:BE:51:34:F5:84:5A:95:C7:CF:A1:7E:6E
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 182B
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_YC_Zdsbpiq-UTT1hFqVx8-hfm4.roa
Signing time: Fri 17 Jan 2025 01:24:42 +0000
ROA not before: Fri 17 Jan 2025 01:24:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59083
IP address blocks: 103.10.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6187 (0x182b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FD80BF65DB1BA62ABE5134F5845A95C7CFA17E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:d7:ca:99:b9:6f:af:96:0a:9e:29:5d:0f:
bc:c8:6c:91:af:bc:91:99:b2:39:fb:81:a6:16:ff:
f7:bf:b8:80:38:e7:82:b6:e0:bb:e8:99:7e:13:b7:
c3:7a:83:27:55:ba:40:41:e3:03:19:22:7e:95:2a:
ed:27:46:2c:cc:3d:02:0c:21:5c:4e:04:2e:46:fa:
5c:82:92:5b:f4:4b:26:1c:2c:19:3e:d6:28:7e:ca:
e6:b6:87:9d:19:77:78:05:ec:22:42:f3:07:48:74:
c2:82:c4:c4:4a:90:3e:66:bb:20:62:63:74:15:7e:
0d:83:0a:78:60:92:db:ed:bb:27:5f:66:4c:df:8c:
f3:ba:6f:93:c7:24:5d:d7:94:87:63:1b:60:3d:89:
2f:7f:78:25:db:c9:52:d4:be:ce:b7:8c:39:59:cd:
48:c2:cd:5f:fe:0f:49:d2:56:d6:30:5f:7d:6e:0f:
9c:67:53:8d:ca:b4:0f:5b:ac:64:65:19:14:30:19:
f0:91:7a:4a:28:ce:89:07:3d:63:79:b3:61:75:f3:
94:97:87:5c:1e:12:e2:f9:b1:db:b6:03:46:53:7e:
13:aa:ec:18:c8:27:43:6e:c6:9a:5d:5a:ef:f9:7c:
b0:7b:19:a1:de:83:37:64:b2:ea:6b:58:db:67:89:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:BF:65:DB:1B:A6:2A:BE:51:34:F5:84:5A:95:C7:CF:A1:7E:6E
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_YC_Zdsbpiq-UTT1hFqVx8-hfm4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.3.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4b:03:e3:38:78:8e:fc:09:88:74:13:e9:14:1a:b3:b8:e7:
bd:6e:c1:74:49:9d:5f:ac:dd:f6:d3:21:10:7e:6a:2d:97:dd:
d6:15:8f:c8:3e:08:f1:da:4d:ab:57:21:90:bd:10:c3:a6:14:
fb:bd:3e:51:95:2d:cb:1e:fc:e8:ca:8d:41:bc:7e:95:3f:85:
fa:8e:11:4f:6c:82:6a:c2:05:f7:88:61:98:51:b7:31:2c:ac:
aa:5e:e9:4e:55:91:27:20:81:0b:45:ed:dc:4c:9c:14:28:26:
7d:ea:f1:c2:c0:b5:9f:6c:43:6f:fc:f9:d7:cb:27:e4:87:62:
d6:60:f2:b0:88:e5:88:52:91:24:1f:2b:ab:e0:40:c8:b3:69:
1d:68:88:16:76:c9:0f:af:c9:bc:ed:f4:60:65:7e:fa:c9:2a:
64:2d:2e:a1:35:5c:a1:3f:02:91:f6:37:92:15:13:d5:e7:ae:
6e:f2:b2:4a:10:69:cc:13:bf:62:f2:5f:75:bd:36:84:ea:b7:
68:a9:28:d0:22:cc:0a:b6:9d:1b:1f:6e:ca:d0:0f:a5:7b:31:
6a:a4:f7:bc:08:c4:19:3e:28:6d:72:a3:d5:8f:ab:2a:04:45:
db:da:61:31:ed:10:61:59:ad:11:a3:59:26:5a:9a:a3:5d:42:
af:57:86:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:51 2025 by rpki-client