Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/m3RXfNEYF0WniAEpXcldpqhOREM.roa
File: m3RXfNEYF0WniAEpXcldpqhOREM.roa (raw, json)
Hash identifier: V3IVp+tih+ZGn/ZoH37n+2NQSOTtlAhzJIvjSbJ5ZGI=
Subject key identifier: 9B:74:57:7C:D1:18:17:45:A7:88:01:29:5D:C9:5D:A6:A8:4E:44:43
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 146A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/m3RXfNEYF0WniAEpXcldpqhOREM.roa
Signing time: Wed 11 Sep 2024 02:23:16 +0000
ROA not before: Wed 11 Sep 2024 02:23:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24373
IP address blocks: 103.221.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5226 (0x146a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9B74577CD1181745A78801295DC95DA6A84E4443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:a3:53:48:75:87:b5:e4:c0:96:ad:22:66:
26:f7:31:e8:92:fd:fb:56:ad:92:3f:b8:23:a5:ae:
98:31:2e:05:3d:ea:70:b7:6d:4e:e1:80:f1:8b:20:
a5:cc:e6:9a:a5:41:1f:ce:37:f7:17:ad:3d:66:98:
b3:a6:4e:c9:24:07:fb:2d:ff:7f:69:61:ff:60:af:
5c:d4:8a:8a:b9:9c:74:e6:10:84:24:f2:7d:33:eb:
0e:aa:cc:6e:d5:85:90:4f:77:35:67:7c:fd:a9:d1:
28:77:32:34:75:6b:8e:2b:c6:b4:6d:25:a6:8d:57:
66:ce:90:23:27:17:b3:32:d9:a5:98:53:12:2c:42:
ea:a5:8b:ea:b0:3e:eb:94:11:2c:33:91:e8:5d:58:
ce:4d:d1:bb:00:25:49:dd:27:c6:f7:f7:84:fa:2c:
11:de:70:89:77:7e:f7:7f:96:57:14:70:a3:e7:14:
37:14:02:5f:60:91:b5:13:f7:85:7c:01:e5:20:14:
ed:14:56:d0:12:2b:f0:75:ca:51:39:68:26:7b:8c:
ad:78:53:4a:1d:ae:e9:aa:c4:65:9f:a4:12:ad:fd:
81:3c:e9:73:bf:16:31:ff:e2:21:f4:e6:c6:06:8b:
5d:38:ab:43:b9:29:cc:4e:ac:10:ed:b7:0e:87:be:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:57:7C:D1:18:17:45:A7:88:01:29:5D:C9:5D:A6:A8:4E:44:43
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/m3RXfNEYF0WniAEpXcldpqhOREM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.0.0/22
Signature Algorithm: sha256WithRSAEncryption
40:5e:ce:7b:ba:d6:48:be:13:ab:a7:ae:5e:36:d8:de:19:36:
fa:12:34:cc:5c:5e:df:33:78:bb:64:70:93:5a:79:07:aa:e3:
e7:2d:77:75:62:86:56:a9:c4:9c:25:7e:8f:73:de:d4:b6:39:
71:c3:e5:48:5a:c0:30:36:29:91:56:0a:cc:e0:3e:5f:4b:90:
39:fc:56:35:a9:d0:a7:79:40:c8:08:f2:32:86:c6:89:49:bd:
99:e3:55:2d:45:65:26:5a:bf:f3:a9:ed:1a:d9:53:c0:fa:26:
65:c6:6e:e0:72:bc:b6:ce:a7:44:80:71:15:2b:da:f1:f7:e9:
38:f8:cd:25:fb:60:f3:26:a0:e7:00:90:cb:f3:9a:41:5b:ba:
e0:01:62:81:fb:05:c9:f0:17:72:1f:57:cc:36:1b:a8:65:bd:
8f:72:70:c2:36:68:ba:26:44:35:18:14:e0:1c:e7:82:b1:d5:
c0:73:9b:5b:d9:79:13:0c:ee:8c:32:c7:9e:67:12:49:52:02:
06:90:16:65:f7:93:09:2e:ed:dc:11:a9:74:e9:f2:fe:8b:b7:
f6:21:73:45:ef:e1:6a:51:99:a6:0d:6a:d4:70:b0:0e:03:6b:
25:71:1f:21:c9:3a:54:62:4d:b4:c5:ae:e7:cc:ff:e8:4b:c2:
9a:06:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:21:50 2025 by rpki-client