Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xwR-9qb23EmJv1jLfs_RNe0eSRY.roa
File: xwR-9qb23EmJv1jLfs_RNe0eSRY.roa (raw, json)
Hash identifier: 0W1a8UD7pTjSJqOCOWAiJbKcR42XxumWJGtwWnjrfOE=
Subject key identifier: C7:04:7E:F6:A6:F6:DC:49:89:BF:58:CB:7E:CF:D1:35:ED:1E:49:16
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1894
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xwR-9qb23EmJv1jLfs_RNe0eSRY.roa
Signing time: Fri 17 Jan 2025 01:25:16 +0000
ROA not before: Fri 17 Jan 2025 01:25:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138527
IP address blocks: 103.221.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6292 (0x1894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C7047EF6A6F6DC4989BF58CB7ECFD135ED1E4916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:6f:4e:14:a1:58:10:23:47:c1:cd:13:1d:
ff:91:be:59:23:24:4f:c7:fa:5c:4a:b2:25:3b:5a:
fa:80:78:5a:89:23:87:e8:d3:24:84:18:df:d8:ae:
ea:80:0f:0e:8b:51:6d:6f:19:25:b0:79:16:01:58:
58:56:68:41:74:b8:6a:1f:e3:11:af:ff:84:16:76:
52:0b:a9:d3:40:b0:67:aa:28:00:72:17:aa:12:ca:
94:89:b2:21:1a:eb:db:50:bb:28:1e:7e:f7:3f:1a:
89:e2:37:47:4b:f4:15:92:db:8b:51:7d:15:ba:4b:
7e:50:9b:5d:e3:50:89:89:53:b8:20:12:5e:3a:3e:
91:18:f0:9c:14:e3:8c:03:68:c4:19:e4:60:72:12:
71:83:d3:46:a1:80:46:cf:34:94:4a:a9:22:be:30:
ac:3c:ca:85:42:2c:69:97:66:51:d0:06:a9:16:12:
2b:23:6d:f4:43:56:39:e5:64:cc:63:29:41:dc:31:
f4:e3:7a:fd:1f:82:f5:08:59:f3:08:17:a9:e9:02:
3e:54:c0:64:2a:57:08:6f:76:17:f0:b6:ef:2f:ba:
0c:6b:77:6f:8d:9a:79:d7:3d:fc:86:60:e4:82:9d:
59:1d:69:68:33:58:c0:04:58:16:b2:d9:93:10:1b:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:04:7E:F6:A6:F6:DC:49:89:BF:58:CB:7E:CF:D1:35:ED:1E:49:16
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xwR-9qb23EmJv1jLfs_RNe0eSRY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.4.0/22
Signature Algorithm: sha256WithRSAEncryption
90:45:12:92:b1:35:8f:97:00:88:99:c0:43:af:71:d7:28:02:
90:42:04:7c:2e:af:34:80:29:1e:8e:f5:5a:b6:46:08:db:af:
42:4a:1f:bf:76:4f:51:a3:af:0d:2f:8f:8e:f6:4e:ea:11:f5:
d1:01:4f:7f:24:5a:48:4a:ac:e5:f7:31:36:91:aa:0a:35:19:
23:44:2b:04:0c:fe:d7:13:93:ec:0f:0e:65:2d:9f:71:3d:37:
35:53:ff:61:f9:9b:f4:4c:5d:6d:04:43:3f:33:ea:42:8d:38:
f5:e0:c0:a8:a1:4a:c0:6a:62:03:30:ee:1b:04:01:96:eb:a4:
b4:67:66:82:9b:b1:fa:99:4d:5b:ad:e6:42:6a:22:0f:9b:40:
70:8b:17:a7:47:6a:e2:87:a2:2e:34:76:c4:69:9b:3a:90:46:
c2:4f:80:cc:c7:a6:5b:a2:05:c8:f0:ae:3b:31:d7:85:01:fe:
70:90:24:38:4b:b8:ba:33:b0:04:a3:05:e7:9a:9a:71:e4:24:
05:2e:d0:9b:bc:03:da:64:00:08:43:3a:ec:21:9c:67:2e:e7:
da:0a:06:ff:01:6f:08:99:67:b8:3b:8b:aa:b6:48:76:2e:87:
45:e2:63:0a:9d:2d:99:bb:e3:74:b8:17:e5:10:33:47:a0:8d:
7c:78:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:54 2025 by rpki-client