Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/t1gF-fZJRi0AIN2vQhBdf3jSHqg.roa
File: t1gF-fZJRi0AIN2vQhBdf3jSHqg.roa (raw, json)
Hash identifier: liS/NDMrWlis5/LsO9ST1R2+GAgWOczM9yPzoVokzM4=
Subject key identifier: B7:58:05:F9:F6:49:46:2D:00:20:DD:AF:42:10:5D:7F:78:D2:1E:A8
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18D4
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t1gF-fZJRi0AIN2vQhBdf3jSHqg.roa
Signing time: Fri 17 Jan 2025 01:25:38 +0000
ROA not before: Fri 17 Jan 2025 01:25:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6356 (0x18d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B75805F9F649462D0020DDAF42105D7F78D21EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:04:3a:d2:aa:4f:8c:08:98:32:fa:a3:39:
e7:d8:5f:28:c1:dd:95:47:34:c5:fc:f1:e8:d2:fa:
b5:ae:bd:f2:06:97:ae:e9:66:35:19:26:77:24:cc:
99:2c:9f:9b:2a:27:ff:af:dc:5f:0f:a0:bb:60:25:
74:d5:83:3c:51:b9:42:74:68:0b:08:fc:42:9e:62:
d6:e6:f2:14:15:0b:53:f5:a7:a2:9a:f0:5c:f6:da:
38:6c:90:d2:08:0e:79:aa:1a:29:e4:63:79:ca:69:
4e:3a:81:be:eb:cc:c7:5d:eb:9d:c3:bc:2f:5a:70:
a5:95:55:1e:b0:36:c5:79:7d:b1:20:22:3a:14:00:
27:0a:9b:67:a8:35:12:da:8a:5b:6d:39:71:16:d1:
59:43:63:6a:22:ce:26:97:6e:82:85:75:75:9f:ce:
00:1c:f9:58:ba:f2:87:b0:90:21:3a:39:03:90:53:
b4:70:59:53:d9:da:1c:8a:f8:a2:56:79:85:2a:d8:
c1:9a:c3:51:fd:60:4c:df:68:79:26:7e:e5:47:f1:
36:0c:df:46:f7:66:4c:96:8d:22:3e:82:b8:63:99:
bb:53:18:95:71:0b:47:00:cf:04:0d:cf:97:b7:49:
6f:5b:3a:c2:85:41:1f:d1:59:e9:58:c8:69:8a:d9:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:58:05:F9:F6:49:46:2D:00:20:DD:AF:42:10:5D:7F:78:D2:1E:A8
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t1gF-fZJRi0AIN2vQhBdf3jSHqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ff:20:12:01:b0:d8:8f:8f:98:4f:b1:da:7d:9a:43:3f:c8:
fc:53:e3:04:ff:65:e2:c3:25:eb:fe:53:3e:dc:df:b5:5d:9c:
47:3b:22:8b:ea:cd:0c:01:91:d5:dc:b7:90:9e:0b:3d:d9:31:
93:38:7c:e8:23:1a:43:a9:8a:b8:96:a7:24:61:ef:f9:c1:3c:
91:8e:b1:ce:04:99:c4:00:f4:52:36:44:e6:59:2c:2f:61:3a:
ae:1c:2a:a4:22:87:10:8f:c2:e9:b7:93:08:79:e7:e1:87:81:
7e:ae:34:15:da:c2:16:49:a3:7b:3c:92:7b:33:bc:7d:eb:7f:
61:b4:7b:b5:66:16:7e:46:58:0a:45:38:65:31:70:89:07:6d:
37:cb:fb:c0:88:35:e1:0d:60:4c:4c:59:f9:23:8d:a1:1e:f7:
e9:38:56:c7:2a:39:e6:15:93:78:11:48:b2:3d:5e:ff:d3:c7:
0b:c5:2a:13:4f:1c:02:04:13:5c:62:7e:42:55:62:c0:75:89:
6f:9a:9d:3c:73:e5:3f:c5:ee:9d:76:f6:0b:50:8b:ec:dc:c8:
15:d3:11:77:ef:58:e7:f1:17:b0:3e:5e:ce:38:f2:95:50:6b:
e8:ec:1a:55:21:51:ad:82:15:dd:7f:66:48:2f:ba:78:e3:3f:
e6:4d:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:48 2025 by rpki-client