Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/vpx9PbKa8OM9VBBpRhwZEwKNKG8.roa
File: vpx9PbKa8OM9VBBpRhwZEwKNKG8.roa (raw, json)
Hash identifier: gUl/BfZNO/IOIm/uzakyDY6TMIhkZF8kZ8+Emzgycrs=
Subject key identifier: BE:9C:7D:3D:B2:9A:F0:E3:3D:54:10:69:46:1C:19:13:02:8D:28:6F
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 17FF
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vpx9PbKa8OM9VBBpRhwZEwKNKG8.roa
Signing time: Fri 17 Jan 2025 01:24:25 +0000
ROA not before: Fri 17 Jan 2025 01:24:25 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138527
IP address blocks: 103.221.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6143 (0x17ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:25 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BE9C7D3DB29AF0E33D541069461C1913028D286F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:d8:bc:74:4c:df:30:2f:52:fe:c0:d7:36:
88:d4:95:91:c6:27:30:95:85:f4:e4:c4:9b:53:62:
b8:73:0c:ef:7c:5e:86:f0:21:27:c5:13:c7:db:4b:
d6:30:ee:c4:28:0a:e4:1a:ff:5b:17:13:fd:2f:93:
3e:39:4f:11:48:11:58:e8:14:d8:bb:a1:ad:3a:bf:
dc:6c:ff:12:7a:28:12:28:85:c5:a1:cd:78:ff:a1:
ec:9c:58:56:af:43:36:2b:4c:0a:ca:54:58:fb:0c:
5b:9f:a4:65:9f:0a:49:00:1a:c8:dd:4e:07:80:44:
2f:d2:e1:c8:32:f6:1f:9b:6b:c2:0a:99:fd:30:c9:
1d:ba:55:8b:4d:bd:d5:00:24:d9:22:fb:34:57:e1:
62:c1:5b:e6:90:09:2f:7d:ee:44:cb:da:a7:5b:0f:
e5:95:9c:b0:68:37:76:9c:f5:7a:74:67:49:47:a6:
6e:8b:7b:60:af:eb:00:56:61:b4:f4:0d:dd:f7:9e:
b4:e1:fd:ed:09:8f:b3:a4:1f:71:7e:f4:c7:4d:fb:
c9:b7:7d:9e:2a:c0:f5:0e:15:ec:10:fc:81:7a:bb:
8f:a7:1b:e0:3e:16:57:ac:82:9a:11:53:d5:b5:e7:
4e:43:30:34:7c:9c:d8:50:e6:ec:ee:bc:70:e7:be:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:7D:3D:B2:9A:F0:E3:3D:54:10:69:46:1C:19:13:02:8D:28:6F
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vpx9PbKa8OM9VBBpRhwZEwKNKG8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.24.0/22
Signature Algorithm: sha256WithRSAEncryption
63:1b:95:57:66:ac:21:7e:e4:22:28:e3:65:5b:8c:86:91:41:
2a:87:e8:dd:0e:c2:c6:77:51:09:57:4e:bf:59:4f:06:91:fb:
47:46:f0:af:95:0b:30:a9:d4:da:86:0d:a4:11:90:98:59:34:
17:56:1e:87:d7:4e:b2:78:8f:a7:d3:cd:6b:81:94:d3:0b:9e:
63:25:fe:a9:c3:44:b9:c6:a6:6a:0f:90:50:f9:ca:bd:5d:d1:
fe:6b:15:1c:24:4e:5e:83:a5:d3:74:96:17:8d:67:4f:6f:59:
98:79:eb:ea:63:e9:6c:49:32:4a:cf:b7:1d:3b:28:9c:78:f3:
3a:41:0f:5d:17:92:32:df:fc:01:c6:30:2f:f1:11:b5:98:15:
98:1f:fd:f8:d9:91:99:ff:c0:c7:c5:c2:43:05:60:ed:bf:fd:
8d:01:12:8e:4c:a0:93:6e:3c:99:05:6b:85:02:b7:6a:4f:60:
57:9d:bb:c3:72:28:c9:3e:5a:c3:44:80:81:98:20:dc:8b:fe:
9b:f4:23:a0:37:ff:30:b1:65:7d:9e:e0:7f:88:30:f7:1b:27:
f3:8a:fe:35:02:90:4e:91:c3:70:72:a0:18:bb:f4:c1:41:a5:
b9:e0:36:c4:7b:07:c1:30:02:e3:a9:1b:c2:a8:eb:a6:f7:0b:
a1:03:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:45 2025 by rpki-client