Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/u8mb9xN6Vm3rouviCO2m30afqkI.roa
File: u8mb9xN6Vm3rouviCO2m30afqkI.roa (raw, json)
Hash identifier: YhipqW1Mvy6J2T8/LJ4FDYayL/Dxufv/wV6VNoAnwyg=
Subject key identifier: BB:C9:9B:F7:13:7A:56:6D:EB:A2:EB:E2:08:ED:A6:DF:46:9F:AA:42
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14EB
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/u8mb9xN6Vm3rouviCO2m30afqkI.roa
Signing time: Wed 11 Sep 2024 02:26:08 +0000
ROA not before: Wed 11 Sep 2024 02:26:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.221.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5355 (0x14eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:26:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BBC99BF7137A566DEBA2EBE208EDA6DF469FAA42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:8e:65:4d:ef:b8:ee:6b:5c:da:ad:0b:10:
5a:f9:5c:c3:ae:00:09:dd:da:94:ae:f9:6f:65:ba:
9b:65:25:cd:fb:e1:61:7f:0c:db:2c:29:d7:bb:8a:
65:5d:57:56:66:56:44:c2:84:d8:11:1d:a4:2d:b1:
1c:2f:52:be:a2:52:22:96:64:dd:00:25:c3:2e:2f:
bc:a3:b6:dd:bc:b4:7e:35:49:01:c3:25:a4:25:f2:
d0:39:b4:f8:1e:7e:94:f2:14:19:af:d9:1e:e0:dc:
70:62:65:23:e7:70:10:69:5d:bd:a7:aa:09:c6:e7:
c5:ac:c3:54:d3:d1:44:35:10:b8:bd:91:9a:f8:59:
39:36:e4:35:34:1a:4f:6a:85:a3:67:7e:ba:c0:7b:
db:44:bb:91:ed:6c:b3:1e:bc:9d:97:0d:a9:6d:ca:
55:7e:30:7d:90:27:39:c9:75:4c:f1:12:40:8c:c2:
95:8b:17:25:0b:a2:2d:2a:fb:d4:21:c3:36:f1:93:
81:1d:e4:08:1b:b9:fc:30:f2:67:c4:72:a4:ec:16:
51:94:1c:c7:d6:79:89:30:ca:6e:4b:55:9c:08:bc:
e7:45:ee:56:a4:bb:de:62:de:2f:6e:56:d8:a4:7b:
97:46:da:d1:d2:b6:24:96:4f:0d:10:ab:fb:ff:ed:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:9B:F7:13:7A:56:6D:EB:A2:EB:E2:08:ED:A6:DF:46:9F:AA:42
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/u8mb9xN6Vm3rouviCO2m30afqkI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.7.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9c:58:c4:2d:02:f2:01:6d:8a:89:cc:dc:fb:2d:f3:41:91:
42:22:1f:78:42:af:5b:62:07:fb:6e:dd:f7:b5:6c:73:2a:a1:
9e:99:aa:86:ef:90:7e:80:df:4a:21:f3:16:b6:ee:cf:bf:52:
cf:2b:86:a9:00:45:3b:62:2b:30:9b:79:d7:a8:2b:f6:d1:03:
fb:4c:a5:3b:bd:7e:67:1b:37:46:8a:11:bc:5e:c5:03:b2:54:
50:08:3d:a1:51:c6:1b:c0:b9:f0:7b:a2:2f:8d:a3:a5:61:73:
74:d2:fc:52:93:59:04:67:fe:58:bf:ca:1f:7c:16:7f:98:ff:
06:94:f6:50:f8:e3:9f:ce:be:f1:95:0b:79:46:8b:db:df:a4:
2d:bd:f9:8a:b9:5b:d2:1e:a1:df:d8:9a:c7:a2:73:0a:61:6f:
41:b0:6e:29:4f:c7:ff:26:dc:4a:65:75:6b:f3:91:5d:dd:56:
a1:b4:ef:c4:41:ac:8b:e1:19:e7:20:b2:8a:58:7c:ac:89:1e:
80:86:e8:23:ff:23:ef:10:e0:7b:40:11:f3:a8:56:b3:02:a9:
23:d9:65:69:47:35:76:25:44:ce:70:18:8c:6b:5c:bd:99:c7:
37:b8:91:b6:fe:7b:fe:9f:7b:b8:97:07:81:5b:48:fb:25:c0:
d4:34:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:22 2025 by rpki-client