Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/tFeNvNkNCkl7bAADcOwzXAS9NUg.roa
File: tFeNvNkNCkl7bAADcOwzXAS9NUg.roa (raw, json)
Hash identifier: 4kqyBsgeFZBoW06fyrQum/1N1vTM+ZkIoLx6qwCPpYs=
Subject key identifier: B4:57:8D:BC:D9:0D:0A:49:7B:6C:00:03:70:EC:33:5C:04:BD:35:48
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1523
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tFeNvNkNCkl7bAADcOwzXAS9NUg.roa
Signing time: Wed 11 Sep 2024 02:30:12 +0000
ROA not before: Wed 11 Sep 2024 02:30:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.221.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5411 (0x1523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:30:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B4578DBCD90D0A497B6C000370EC335C04BD3548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:67:d9:ba:8b:22:53:73:56:be:58:5c:aa:
75:8d:24:18:1c:a7:a7:84:fc:41:02:e0:e7:7f:85:
63:b0:a2:40:69:ef:42:f3:ad:81:f6:3a:2d:7f:9a:
59:b8:79:cf:16:ae:ed:62:f9:c6:66:f9:48:73:4a:
b1:88:d2:8b:5a:32:fe:68:20:97:b7:55:39:a4:d9:
10:f1:a3:08:d3:f4:d1:8a:e5:91:02:b7:d0:23:f7:
18:18:22:61:e5:a1:ae:62:43:62:3c:c1:c8:8c:2a:
4f:a4:1d:96:a9:29:85:50:ee:b8:4a:5a:7f:1f:1c:
61:54:98:e9:3f:3e:f0:9d:50:e9:35:95:67:55:e1:
05:15:bb:d3:95:fd:6e:d9:1e:3d:35:7d:53:b6:91:
b8:21:05:ac:bd:bc:aa:7b:29:76:78:0b:a2:3e:01:
c7:20:a9:6d:8b:e4:e3:66:9d:bf:70:05:cf:82:32:
7d:3e:8c:52:e1:1c:10:f6:13:3e:4f:a0:32:c4:03:
ee:cc:cc:d8:4e:cb:39:6c:e0:ca:c4:e7:4e:b3:db:
82:2e:84:6c:bb:c3:44:df:5d:fa:33:6a:85:ea:2f:
8d:57:e9:52:ca:f3:60:69:5e:d1:8e:51:95:b0:23:
e3:33:05:17:92:00:be:15:99:c0:11:50:43:ff:8a:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:57:8D:BC:D9:0D:0A:49:7B:6C:00:03:70:EC:33:5C:04:BD:35:48
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tFeNvNkNCkl7bAADcOwzXAS9NUg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.50.0/24
Signature Algorithm: sha256WithRSAEncryption
96:59:03:b9:07:80:af:a1:d2:a6:8d:72:14:0e:80:09:91:ec:
0b:89:4d:be:83:62:ea:d8:47:08:60:05:c4:36:62:56:29:94:
ca:73:eb:5c:67:13:dd:bc:fe:f8:34:40:c0:96:cb:c8:ff:5f:
96:b9:9d:12:39:58:b9:f6:72:94:2a:60:c7:6b:89:c5:f6:12:
b0:0d:77:53:da:14:81:08:1b:0d:8c:0a:65:09:80:62:b3:b4:
41:c0:ce:18:18:c0:14:12:54:80:db:f0:ce:f0:0b:20:dc:0b:
cb:15:cd:69:0d:a1:3e:97:5b:c4:27:cc:bf:e7:33:e8:d6:20:
3d:a4:00:c5:fa:ea:7c:df:36:11:a7:18:c6:ab:71:31:e2:f4:
a4:d5:24:f6:52:d9:84:be:82:0b:1c:1f:48:57:73:fd:4c:c9:
8f:bd:e7:21:99:9d:46:20:dc:73:73:5a:d3:74:30:cc:8e:44:
2f:21:08:4c:b1:3f:f5:0e:af:8b:3d:ff:0a:e9:db:7d:d1:53:
99:43:5d:45:be:3d:54:0d:d9:1d:c8:3c:51:62:1c:d7:6f:f7:
44:68:2e:b3:df:31:02:f6:f5:69:e0:e7:0a:ec:d3:01:e6:51:
c4:86:d1:d4:99:68:b4:2e:99:95:78:6a:a9:ce:2c:35:a5:fa:
5c:49:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:48 2025 by rpki-client