Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/fFGwjYqD6VcwXqAV8bCAY32SAQo.roa
File: fFGwjYqD6VcwXqAV8bCAY32SAQo.roa (raw, json)
Hash identifier: SVW/H4gOxjsvbelF3LgJNaWGVfevFEDI8zYLwmFeoR8=
Subject key identifier: 7C:51:B0:8D:8A:83:E9:57:30:5E:A0:15:F1:B0:80:63:7D:92:01:0A
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14DD
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fFGwjYqD6VcwXqAV8bCAY32SAQo.roa
Signing time: Wed 11 Sep 2024 02:23:56 +0000
ROA not before: Wed 11 Sep 2024 02:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 138527
IP address blocks: 103.221.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5341 (0x14dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7C51B08D8A83E957305EA015F1B080637D92010A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:c8:42:7e:1a:bb:df:80:43:bf:1e:34:14:
7d:ab:e8:19:25:19:6a:e0:05:78:2e:7e:d3:fb:25:
bd:7f:c1:c2:e3:6e:b5:4f:3c:0b:17:c0:e3:af:1f:
27:97:7c:15:5c:62:76:a0:81:58:ad:f4:8f:98:05:
33:78:f7:4a:98:e7:ac:f7:bd:6d:ea:b0:f2:02:1b:
17:30:0f:38:6d:6d:8d:cd:69:0f:d4:2f:85:43:27:
a2:cc:3a:8c:fb:35:80:27:39:56:83:78:bc:ce:52:
c2:48:b8:2f:64:44:26:a4:9d:a0:99:f0:dd:3f:5b:
6e:42:a3:41:32:5c:90:21:bc:db:db:3b:5b:37:ab:
b5:a8:9e:fa:e9:8c:f5:59:90:dd:15:42:89:6a:c1:
bd:22:fb:f4:96:e4:0c:8d:76:b6:74:5f:f1:da:3c:
95:f5:43:e9:1e:2d:02:d8:41:f8:fd:a5:84:1f:0e:
8a:9e:63:92:44:0b:6e:9a:a3:fa:c2:51:ff:36:a3:
93:03:59:be:20:b5:91:d9:66:a4:a2:04:03:ef:fe:
db:f4:8d:be:4e:28:5b:92:39:b0:b9:8d:da:cd:e7:
7d:36:26:a3:3b:75:c3:09:11:52:f1:d8:a8:bf:d4:
ad:0e:81:69:25:0c:bc:9e:da:47:42:d6:b5:b4:15:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:B0:8D:8A:83:E9:57:30:5E:A0:15:F1:B0:80:63:7D:92:01:0A
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fFGwjYqD6VcwXqAV8bCAY32SAQo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:86:dd:a5:31:c1:c1:e3:99:86:4a:8c:00:f1:75:62:2e:bf:
97:fc:f7:3d:da:b9:ba:cb:f4:a6:fa:db:9c:31:7a:93:2e:0f:
30:1e:10:7a:5f:02:ed:f5:44:bd:36:c8:b0:3e:92:2d:4d:a8:
6b:ce:04:8b:ca:00:8c:2b:10:87:7c:06:55:40:69:96:24:65:
3a:75:98:74:05:f2:64:41:e7:f1:d6:42:46:7b:a6:a6:9e:73:
59:ff:67:ce:9c:26:76:6f:46:a5:38:45:e0:4a:ab:53:95:f6:
ae:d9:40:3e:23:0c:29:c6:ca:e8:78:eb:7b:be:dc:61:22:21:
5c:ae:d7:7a:cf:46:e2:9b:54:f4:06:b8:20:f7:9d:84:98:1f:
86:17:ba:9a:44:65:41:4a:e8:e2:12:28:1e:4f:77:ae:53:b5:
1c:41:54:e1:2e:95:02:0a:a9:a4:02:76:c8:cd:8f:fc:cd:6a:
98:05:19:d5:8c:75:2c:f6:9c:1a:50:6f:63:cb:06:39:7e:af:
e4:72:52:46:18:64:2c:b7:64:a9:49:1e:a8:d3:4f:f7:77:88:
24:8f:82:0e:8f:2a:06:86:33:b4:61:6f:8c:d7:83:8a:47:0f:
f4:1f:2a:f1:4d:5c:45:65:6b:2c:41:e4:51:d2:c7:38:7a:4c:
26:71:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:20 2025 by rpki-client