Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/wHMmzLk4ap0b_weyXau40CfS5qE.roa
File: wHMmzLk4ap0b_weyXau40CfS5qE.roa (raw, json)
Hash identifier: 0c0z5g2xMvm0MjRx2zTsMrDyegL5UXC56Oeg19h5RkE=
Subject key identifier: C0:73:26:CC:B9:38:6A:9D:1B:FF:07:B2:5D:AB:B8:D0:27:D2:E6:A1
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1540
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wHMmzLk4ap0b_weyXau40CfS5qE.roa
Signing time: Wed 11 Sep 2024 03:57:56 +0000
ROA not before: Wed 11 Sep 2024 03:57:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139259
IP address blocks: 103.221.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5440 (0x1540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 03:57:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C07326CCB9386A9D1BFF07B25DABB8D027D2E6A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:9f:ad:11:34:4d:e7:e5:e7:d4:47:91:e8:
b0:c1:f1:c9:3a:7f:14:8e:7a:89:a5:ae:d1:ac:39:
48:4e:c2:07:1d:50:5a:29:af:1b:f7:5f:58:fd:c4:
a5:51:26:d4:74:28:ed:54:14:a7:d2:56:57:a0:d3:
a2:38:1e:41:36:1e:5a:8f:39:23:10:35:a2:a9:4c:
8e:ed:5d:90:4d:c9:92:28:47:b7:50:ec:1b:d9:3c:
86:b7:b1:36:06:2d:67:e5:2d:34:aa:bc:63:39:f6:
11:aa:a5:c4:c7:df:4e:88:3b:c5:ea:06:33:55:26:
4c:7d:ee:e9:6f:e9:d6:00:47:7f:b3:d7:e9:9f:7b:
59:ff:74:1b:12:36:98:65:4d:61:62:80:b6:b4:66:
fc:05:48:de:cb:c6:7e:16:21:28:db:68:06:fb:62:
dc:d2:43:d8:1d:85:23:44:bd:00:eb:95:d2:0c:12:
fb:a9:33:f4:8b:77:93:9d:49:6f:5d:e7:23:19:9a:
35:a1:06:32:75:7c:9d:ca:40:cb:0c:80:57:b2:b3:
29:86:c6:a3:55:26:57:6f:ac:7f:b8:93:4f:49:17:
c5:53:61:d9:8d:34:55:54:55:4f:bc:dc:ab:db:56:
96:4b:84:38:89:06:4e:04:e5:ba:cc:02:14:ff:a6:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:26:CC:B9:38:6A:9D:1B:FF:07:B2:5D:AB:B8:D0:27:D2:E6:A1
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/wHMmzLk4ap0b_weyXau40CfS5qE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.3.0/24
Signature Algorithm: sha256WithRSAEncryption
17:89:3b:44:83:7a:8b:d3:1c:c9:b2:de:c1:35:5d:a2:a6:c7:
3f:bb:21:88:90:26:d3:4a:1d:41:e8:86:52:70:c0:88:6e:6e:
9b:95:77:82:99:45:80:8a:c3:e8:98:e3:cb:47:7b:f9:9d:f8:
15:db:82:44:ab:6d:05:04:1e:d3:6f:25:4a:d1:1c:f2:24:22:
29:c0:9c:d7:e6:88:44:67:f0:b6:84:02:ce:eb:38:df:2a:ba:
55:00:23:24:2b:ec:09:26:de:80:47:fe:8f:1e:f6:4b:68:a3:
f9:d2:78:9a:4a:2a:2f:e8:cc:df:26:7a:b5:2f:9e:af:36:ae:
f8:97:14:07:76:4f:d5:f0:98:08:88:1e:76:19:3c:7b:55:1d:
e3:ff:4a:47:69:a8:cf:a0:1a:d0:4f:d4:bd:37:d1:95:88:8b:
c1:a5:a3:aa:37:37:7a:b2:b0:92:03:66:4a:9c:9e:5d:58:15:
90:4d:91:0c:c2:dc:1a:2d:7e:4f:3d:47:a7:87:8d:9b:b1:5c:
38:70:b8:b6:59:43:fe:d4:d4:6f:f3:59:7b:f4:a6:45:33:97:
fa:08:53:3f:76:1e:44:e0:a7:b6:c1:46:d4:d4:23:a8:67:5a:
65:2a:47:5d:d0:ed:8b:03:40:68:34:d0:05:c6:bb:ef:7e:1b:
cc:66:37:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:44 2025 by rpki-client