Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/uNiI8MgxZKuGKgs01FYnoPJrnxE.roa
File: uNiI8MgxZKuGKgs01FYnoPJrnxE.roa (raw, json)
Hash identifier: pAtNIdvPKCBIjwR60UNWgMZan/eRSxdvvV5Ro1+fMR4=
Subject key identifier: B8:D8:88:F0:C8:31:64:AB:86:2A:0B:34:D4:56:27:A0:F2:6B:9F:11
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 185C
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/uNiI8MgxZKuGKgs01FYnoPJrnxE.roa
Signing time: Fri 17 Jan 2025 01:24:58 +0000
ROA not before: Fri 17 Jan 2025 01:24:58 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6236 (0x185c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:58 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B8D888F0C83164AB862A0B34D45627A0F26B9F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:03:c2:75:85:51:bf:94:46:d0:fa:33:1a:
d6:3f:e0:ad:fd:84:65:ac:9a:a8:97:11:80:7a:f9:
e0:f3:0f:a4:15:db:19:39:98:58:61:83:10:23:4a:
fc:73:53:bb:3e:50:6d:6e:41:67:f1:cc:9b:02:52:
08:53:dc:55:b0:37:fe:7b:63:12:79:54:b0:fb:10:
45:5a:53:37:1f:d1:ec:3a:00:e4:43:47:83:64:09:
c8:fb:c5:27:b6:a1:6e:d1:55:f1:9f:28:5b:06:37:
9f:49:c7:6e:0a:4f:24:a1:d4:b4:3f:f3:9f:8e:8b:
31:8e:96:3c:b8:ab:cd:71:d7:07:9d:d0:3b:34:68:
be:55:20:22:c6:39:4a:8f:72:07:56:61:9d:c0:2c:
94:df:70:34:47:b5:43:70:e8:ae:b7:41:29:d4:f9:
4e:2d:02:ed:a1:fa:86:13:67:b6:35:10:09:41:58:
cc:69:98:a6:2c:55:f7:d4:c0:dd:0f:87:4c:24:a2:
07:90:f2:b9:6c:7e:7c:5c:71:e2:1c:4d:12:47:a7:
41:5a:4f:b5:bc:38:bf:28:42:8c:4a:ab:91:0a:f1:
02:01:a3:14:50:3b:14:d2:d1:0b:67:12:7a:d8:fa:
2b:f0:77:f6:a5:3e:9f:48:ac:3b:f2:3a:19:d4:a0:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D8:88:F0:C8:31:64:AB:86:2A:0B:34:D4:56:27:A0:F2:6B:9F:11
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/uNiI8MgxZKuGKgs01FYnoPJrnxE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.34.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d7:3d:43:ec:d3:cb:13:7e:d8:ce:79:58:68:42:4f:12:f1:
71:0e:49:90:0d:0d:66:2c:ba:52:c7:d7:53:e1:ab:f1:dd:eb:
51:e8:5f:3e:36:59:f8:13:e4:40:8a:4f:5b:47:0d:2a:47:c1:
8c:6c:2f:97:dc:ac:a9:20:0e:4d:3b:26:ce:ec:88:2c:03:a0:
6b:cb:94:fb:5c:39:20:69:11:8c:50:cf:7c:f0:31:7b:12:89:
98:75:43:72:7f:c8:23:61:2c:d1:1d:8a:1d:17:7e:0e:4a:cd:
d7:c9:dc:23:92:e0:fc:fc:64:d5:01:f1:b6:b8:83:61:02:0e:
7d:38:f1:4f:9b:8f:dc:26:cc:25:c0:b7:43:16:0e:11:d7:10:
11:f0:00:c2:28:ed:23:2c:40:7f:a6:46:16:54:e1:06:14:4a:
24:7e:c2:82:3d:0b:f2:9f:5a:b1:54:4a:5a:57:d9:f1:bb:d2:
3a:b5:0b:b7:92:76:fc:a4:6e:f5:14:10:20:57:9e:c2:05:3b:
e5:17:82:9b:4f:33:6c:7b:89:1f:68:0c:f0:da:72:9b:a6:c7:
eb:70:e0:cb:5e:83:8c:01:c1:f7:6c:e0:75:86:1d:2c:a9:58:
d5:eb:4a:c4:4e:cd:44:4a:e8:ab:70:17:14:fb:7c:18:fd:ca:
b1:ca:63:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:21 2025 by rpki-client