Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ijywlSeI3H-uLkWSHi4Iu6srNYY.roa
File: ijywlSeI3H-uLkWSHi4Iu6srNYY.roa (raw, json)
Hash identifier: PE97OsHE9PjFKFdQavyJfZ2i9GG20d7CJzRkxU9sEzY=
Subject key identifier: 8A:3C:B0:95:27:88:DC:7F:AE:2E:45:92:1E:2E:08:BB:AB:2B:35:86
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18BC
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ijywlSeI3H-uLkWSHi4Iu6srNYY.roa
Signing time: Fri 17 Jan 2025 01:25:30 +0000
ROA not before: Fri 17 Jan 2025 01:25:30 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6332 (0x18bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8A3CB0952788DC7FAE2E45921E2E08BBAB2B3586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:7f:c2:19:f6:d1:70:a9:8a:3e:a0:70:0d:
25:44:da:41:39:b9:33:61:e2:ce:d2:12:93:2b:ff:
3c:4a:06:18:9e:7e:d9:a2:af:d5:1f:e1:9a:29:b3:
ff:56:72:55:04:09:7e:b2:b1:10:fd:8c:f2:54:84:
d1:9c:1c:06:30:04:d0:8f:a0:2e:47:69:ec:cc:05:
02:c3:1a:e9:ac:af:51:44:ed:27:39:2d:9b:05:27:
80:d6:69:e3:f0:7a:1f:e9:9b:41:45:31:9f:e8:85:
8d:bc:d7:05:33:ea:43:d2:62:4c:99:a7:85:a6:ff:
53:86:60:c1:d8:e6:d9:90:b7:e9:9b:e8:93:17:71:
84:e6:d7:04:ee:49:ca:8a:9b:d0:ce:99:93:d4:05:
2d:7f:00:44:ac:4f:ab:7e:46:6e:0d:9a:fd:5e:20:
c6:1f:0c:c8:48:f0:8b:f3:fe:28:12:46:d4:9f:88:
23:b1:74:d6:7d:a0:63:9f:b7:03:f3:e9:de:f2:10:
e0:26:d5:31:5f:52:53:86:13:70:3c:5a:09:5d:84:
9a:0f:e8:f1:b1:1a:6f:42:80:e7:0e:0d:31:52:15:
1b:18:20:ef:69:a3:d7:cb:fd:4b:8f:8b:5e:fa:80:
2e:93:88:95:b7:31:9c:20:74:4b:8f:37:64:9f:ec:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:B0:95:27:88:DC:7F:AE:2E:45:92:1E:2E:08:BB:AB:2B:35:86
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ijywlSeI3H-uLkWSHi4Iu6srNYY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.35.0/24
Signature Algorithm: sha256WithRSAEncryption
95:49:4c:20:e6:84:8f:73:f2:6a:4b:00:b3:5f:bc:11:00:bd:
15:04:00:a4:65:a0:b5:7e:4a:ec:db:b8:93:c3:cc:49:cc:bf:
8e:7a:8d:aa:71:14:a3:6b:c0:f0:7e:e5:4d:c9:79:56:1d:b5:
2e:1e:eb:39:9f:68:22:4c:eb:43:65:69:ec:45:d6:ba:7b:94:
79:f5:88:ea:e3:a7:51:20:2a:3c:48:53:ea:80:45:db:fb:61:
5b:54:4a:b2:40:66:73:a4:70:9c:36:37:ae:c0:2d:79:c9:a0:
b4:04:f9:d3:12:32:6d:ac:b6:0c:0e:69:8f:fa:ba:d6:76:a9:
a5:56:34:ae:c3:4f:e3:85:0d:6b:b7:dc:cb:c8:57:1f:cc:84:
39:22:05:a3:38:a8:21:0a:d4:aa:8a:c7:1e:27:9c:dd:37:96:
e5:ad:6b:bc:3e:9c:4e:7c:3b:b9:82:36:4b:6a:93:b5:55:46:
ee:cf:32:95:c2:9b:e6:93:e1:cb:a3:21:0d:a2:b1:a7:8f:74:
db:29:f0:75:33:69:c6:ee:e8:85:a9:ec:50:52:29:a6:18:d2:
a0:16:c5:f8:49:4b:de:dc:3e:b2:63:c3:7c:90:56:6a:5d:0d:
c8:68:b9:4f:de:a6:9c:05:83:67:76:28:75:80:1c:99:d8:27:
40:76:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:29 2025 by rpki-client