Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/t6XWe8_XHJ9HIQQ4qcKuBN3jB5E.roa
File: t6XWe8_XHJ9HIQQ4qcKuBN3jB5E.roa (raw, json)
Hash identifier: GSWnSy3ca3MWXkPvxnx7z3381jXkKGp4Wvc8ab9j6Gw=
Subject key identifier: B7:A5:D6:7B:CF:D7:1C:9F:47:21:04:38:A9:C2:AE:04:DD:E3:07:91
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1531
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t6XWe8_XHJ9HIQQ4qcKuBN3jB5E.roa
Signing time: Wed 11 Sep 2024 03:57:51 +0000
ROA not before: Wed 11 Sep 2024 03:57:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139259
IP address blocks: 103.221.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5425 (0x1531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 03:57:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B7A5D67BCFD71C9F47210438A9C2AE04DDE30791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:11:20:58:a9:8f:d8:62:58:0f:69:79:03:
4e:c9:1c:18:19:a5:d0:f7:f6:93:51:49:dd:c0:77:
aa:ab:5d:df:25:01:b7:ee:41:62:74:1d:a7:c0:28:
19:77:7d:e1:65:45:03:52:41:d3:9a:0d:49:9b:fb:
46:0f:70:75:4b:d3:6f:89:80:68:cd:67:8d:cd:2b:
7c:9e:e9:d0:e9:64:03:a1:55:2e:c7:c4:65:6c:21:
ca:cd:bc:0c:5a:4d:eb:61:11:d9:b6:7e:e7:55:62:
3b:20:2d:8b:8a:0a:04:f4:c9:a7:08:af:a7:8e:30:
1f:44:a7:e9:5c:27:d3:68:e3:86:6d:2b:78:7d:8a:
cf:97:f7:fa:48:42:14:66:90:1d:89:0d:e1:ec:f2:
b3:03:5d:1d:ff:45:95:fe:ec:f3:6a:3b:84:33:b7:
fd:59:5f:01:5d:b9:50:1a:e3:a1:6d:8a:23:70:92:
f4:e0:52:34:26:fe:27:8e:fa:89:a6:26:53:8b:29:
84:6c:78:e3:86:f1:3a:00:d2:b6:95:e0:51:1b:9d:
27:38:f8:63:d3:3a:f7:a6:87:f5:18:90:e1:72:58:
7d:d5:4b:b9:95:f0:ed:f9:df:3a:cf:a7:cf:3a:46:
bd:25:bc:63:46:07:0a:5a:ef:f4:36:c8:26:8e:6b:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A5:D6:7B:CF:D7:1C:9F:47:21:04:38:A9:C2:AE:04:DD:E3:07:91
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t6XWe8_XHJ9HIQQ4qcKuBN3jB5E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.8.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:4f:56:4f:21:74:b2:39:c3:e6:00:c7:85:92:4a:6b:12:11:
94:bd:98:48:2f:77:81:59:2d:c1:3f:a1:31:b3:28:0d:ea:ef:
bc:d1:71:ad:c0:de:56:4e:a3:1f:db:ee:98:38:00:5c:36:6a:
f4:3f:d9:37:ff:0f:65:ed:52:ee:a1:ed:7f:29:99:5f:02:8c:
c8:a9:29:21:dc:89:ce:f2:8a:6b:dc:ac:4e:1a:a1:0e:82:d0:
81:1a:99:ce:33:bd:db:9d:ca:e6:eb:2d:28:a9:d1:c5:67:4e:
d8:58:19:30:e8:d3:41:8b:6f:ff:71:3e:c9:e0:d4:ef:d0:99:
07:9a:08:37:a9:b4:5a:aa:8e:97:57:6d:a4:e8:e0:cc:be:4e:
8f:58:e1:79:68:c3:36:60:5d:7d:d4:f9:17:5f:8d:3f:d1:7f:
22:9f:76:a4:79:52:89:46:0f:ae:24:4e:8b:d0:b4:63:3d:78:
9a:a9:b6:91:11:aa:0d:76:ce:b1:63:b1:44:55:f4:7d:88:f9:
fc:e5:ae:bd:34:a5:cc:49:09:29:0c:c0:ad:39:2a:bd:80:50:
2c:fd:0b:f6:37:c1:fd:e3:47:5d:ec:d8:25:03:fa:d8:08:03:
43:19:8b:3e:b9:c7:b0:24:26:52:a9:42:61:db:5c:b2:f5:bf:
43:b7:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:44 2025 by rpki-client