Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/oRKg_OduHw2_Jxkr767JYYGJJPE.roa
File: oRKg_OduHw2_Jxkr767JYYGJJPE.roa (raw, json)
Hash identifier: 4OIxDrcxPcBvCB2kJgZZNz+RPGHHpAjaZdKo/tpAisc=
Subject key identifier: A1:12:A0:FC:E7:6E:1F:0D:BF:27:19:2B:EF:AE:C9:61:81:89:24:F1
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 184A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oRKg_OduHw2_Jxkr767JYYGJJPE.roa
Signing time: Fri 17 Jan 2025 01:24:51 +0000
ROA not before: Fri 17 Jan 2025 01:24:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6218 (0x184a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A112A0FCE76E1F0DBF27192BEFAEC961818924F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:a8:72:00:5a:07:46:d2:f0:b8:09:46:6a:
68:13:90:18:fc:f8:13:a9:c6:4a:1d:25:de:30:53:
a6:fc:37:bd:2a:b6:af:b6:87:82:bd:c9:8b:57:87:
c0:cc:31:73:93:7e:76:0c:7f:c8:6b:44:08:8f:af:
e7:5d:2c:4a:f6:21:0f:77:bb:d1:8b:a5:75:6c:95:
f7:13:fe:c6:e3:e0:58:c5:b5:5b:83:92:1e:b6:f7:
d1:00:3d:43:f1:31:6b:31:97:99:1f:01:05:1f:c5:
27:90:5c:cd:f9:e1:a3:12:ef:a4:a3:ce:ab:3c:9c:
a2:ed:ad:ef:8a:76:0f:a5:43:6e:c4:7d:e4:16:91:
d8:52:23:58:18:d8:f7:f9:d2:5e:9b:94:4e:31:03:
3e:cc:e4:ad:dc:44:ba:87:81:82:d5:fc:bc:5d:d9:
84:3e:e3:56:89:4f:e1:cb:5b:19:c4:51:fa:ec:d8:
c2:f7:a3:54:a7:08:6f:e2:16:7b:e1:92:ce:de:aa:
6c:a4:1f:5f:57:ee:3d:a2:95:81:2b:3d:df:43:a7:
40:fb:51:4c:bd:52:ea:7f:7d:d7:ae:81:68:99:95:
7e:1a:6f:36:60:05:8c:d8:23:1c:c7:74:08:72:c2:
e4:71:0c:c3:5c:77:b0:91:1f:8f:fc:31:e4:58:4b:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:12:A0:FC:E7:6E:1F:0D:BF:27:19:2B:EF:AE:C9:61:81:89:24:F1
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oRKg_OduHw2_Jxkr767JYYGJJPE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.16.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2e:59:97:fa:cf:61:a1:6a:39:13:2c:c1:0c:82:92:b3:0f:
22:35:1e:bb:39:dd:41:d8:02:04:5c:2d:e5:38:7f:18:97:f3:
97:8f:70:9a:08:a2:d2:7c:b6:a1:80:db:5f:51:0d:36:1a:bf:
55:45:18:3c:a6:c2:11:fe:04:86:bd:14:1c:14:de:c5:2e:7c:
c2:7d:8e:ee:43:64:a0:66:45:f9:e5:c5:67:a2:cf:0e:55:f4:
61:e3:03:fc:cd:16:81:ca:74:ce:0a:8f:9e:dd:33:61:36:3f:
2b:e6:b9:da:44:71:cf:9f:98:2e:ed:c5:bb:8a:1d:1e:a7:9a:
d9:7a:2d:df:ea:45:f2:3c:94:63:62:60:a1:f6:8f:67:a3:81:
4c:da:4a:98:8e:87:8b:f7:b1:ad:68:99:19:33:1a:92:6a:50:
4a:51:2f:bb:ea:09:22:d7:66:30:c0:53:9d:15:52:2e:ad:f8:
80:4a:c1:cd:e9:e1:6a:f0:f6:ea:67:0c:9d:17:49:53:ea:4a:
b0:5f:9b:57:09:c4:4f:52:0e:76:3f:b0:15:b0:4d:da:5a:07:
92:c2:16:70:c2:66:bb:22:4c:cd:06:91:8a:94:7b:93:0b:b5:
10:70:51:50:c6:ca:4c:72:94:80:96:62:43:15:17:75:84:c8:
42:cf:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:07 2025 by rpki-client