Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/yxe_3lN7r-qlNITGszP5j2oxcrQ.roa
File: yxe_3lN7r-qlNITGszP5j2oxcrQ.roa (raw, json)
Hash identifier: cGP5ba8hYBpCXOOZbfRn6EA5p32FcmE6TpARpFx+6fU=
Subject key identifier: CB:17:BF:DE:53:7B:AF:EA:A5:34:84:C6:B3:33:F9:8F:6A:31:72:B4
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 153E
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/yxe_3lN7r-qlNITGszP5j2oxcrQ.roa
Signing time: Wed 11 Sep 2024 03:57:56 +0000
ROA not before: Wed 11 Sep 2024 03:57:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139259
IP address blocks: 103.221.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5438 (0x153e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 03:57:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CB17BFDE537BAFEAA53484C6B333F98F6A3172B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:2e:e0:72:36:d5:c5:01:9e:4a:07:61:1f:
9c:84:ca:f2:09:38:4b:d5:80:bf:74:b3:b7:b3:3b:
dc:7b:5e:f9:81:34:59:b3:69:68:79:79:70:2a:1d:
ba:67:45:57:e7:4d:4a:9e:7e:06:c4:a9:6a:17:eb:
0e:4b:17:45:05:c0:50:75:b4:ba:c5:83:ca:18:4c:
c1:1e:5f:85:e5:2b:49:49:a0:e7:72:8e:02:d2:45:
cf:1f:f1:b0:6a:73:12:f9:a4:4b:36:41:a3:10:c6:
4d:4f:57:24:d7:aa:e6:d6:26:f5:cb:5b:af:b9:94:
7c:37:54:c3:5a:29:5b:37:00:df:2b:3a:2e:4b:7b:
39:52:e4:89:94:e8:a3:63:37:7d:d3:e8:84:9b:52:
aa:a4:b4:2e:6a:ea:ba:de:f7:a0:00:9e:e6:a4:e9:
8a:6b:e3:86:8c:ee:b8:15:0b:b2:04:8c:42:c1:57:
ee:a0:9a:83:6a:a1:37:b1:9c:d5:50:44:ef:cc:a6:
48:53:25:d0:d5:c8:c8:4c:a1:26:41:14:97:e3:56:
45:d4:6f:ad:14:23:bc:f0:cb:33:9d:0e:74:b3:1c:
88:d4:24:99:f5:6a:89:a9:54:83:d6:43:ee:fe:20:
3f:ee:2e:0f:63:56:c1:c5:cd:f2:74:9b:a8:35:45:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:BF:DE:53:7B:AF:EA:A5:34:84:C6:B3:33:F9:8F:6A:31:72:B4
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/yxe_3lN7r-qlNITGszP5j2oxcrQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:76:15:6d:86:d0:94:a3:ea:67:58:9d:4e:23:1f:c6:b5:b4:
f0:da:92:02:5d:83:cd:ca:17:78:c1:74:13:ab:82:be:c0:e7:
b5:ee:7f:eb:8c:da:6e:12:58:a5:3e:8f:ea:0d:d7:d9:14:2f:
ad:96:48:0a:74:5a:31:02:3a:f1:05:6b:73:16:f2:21:3f:75:
27:44:c7:0c:b1:0c:4a:a2:43:e5:1d:19:30:dd:dd:fd:37:0b:
b7:06:b3:2d:42:cd:92:67:98:ed:69:5f:b5:56:fa:7f:39:af:
c7:39:69:41:24:f7:6e:76:66:3e:ac:e5:61:3f:ac:3c:de:2b:
09:3b:95:d3:54:19:6d:5a:98:fd:85:41:33:ab:01:b0:44:2c:
92:7e:1b:df:75:b4:b0:eb:5d:51:2b:b9:ca:a7:54:9d:40:ff:
63:14:2f:ff:bf:c9:cf:0c:87:21:de:ad:4b:04:17:f3:b7:f2:
07:c8:68:b1:bb:e1:c6:c6:17:b4:27:c1:fe:15:18:ea:6c:5f:
13:be:80:ed:3a:a8:02:e2:42:7c:47:d0:47:26:6f:26:9c:40:
7a:93:33:4a:7e:fe:98:4c:17:d9:5e:2d:f3:e8:ed:6c:4c:e8:
84:f7:4d:cb:e1:10:40:43:ad:e4:65:f3:ff:4b:0c:03:97:4e:
4f:75:04:fe
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw
MzU3NTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENCMTdCRkRFNTM3QkFG
RUFBNTM0ODRDNkIzMzNGOThGNkEzMTcyQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmyS7gcjbVxQGeSgdhH5yEyvIJOEvVgL90s7ezO9x7XvmBNFmz
aWh5eXAqHbpnRVfnTUqefgbEqWoX6w5LF0UFwFB1tLrFg8oYTMEeX4XlK0lJoOdy
jgLSRc8f8bBqcxL5pEs2QaMQxk1PVyTXqubWJvXLW6+5lHw3VMNaKVs3AN8rOi5L
ezlS5ImU6KNjN33T6ISbUqqktC5q6rre96AAnuak6Ypr44aM7rgVC7IEjELBV+6g
moNqoTexnNVQRO/MpkhTJdDVyMhMoSZBFJfjVkXUb60UI7zwyzOdDnSzHIjUJJn1
aompVIPWQ+7+ID/uLg9jVsHFzfJ0m6g1RdyXAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUyxe/3lN7r+qlNITGszP5j2oxcrQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3l4ZV8zbE43ci1xbE5J
VEdzelA1ajJveGNyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3QQwDQYJKoZIhvcNAQELBQADggEBALB2FW2G0JSj6mdYnU4jH8a1tPDakgJd
g83KF3jBdBOrgr7A57Xuf+uM2m4SWKU+j+oN19kUL62WSAp0WjECOvEFa3MW8iE/
dSdExwyxDEqiQ+UdGTDd3f03C7cGsy1CzZJnmO1pX7VW+n85r8c5aUEk9252Zj6s
5WE/rDzeKwk7ldNUGW1amP2FQTOrAbBELJJ+G991tLDrXVErucqnVJ1A/2MUL/+/
yc8MhyHerUsEF/O38gfIaLG74cbGF7Qnwf4VGOpsXxO+gO06qALiQnxH0Ecmbyac
QHqTM0p+/phMF9leLfPo7WxM6IT3TcvhEEBDreRl8/9LDAOXTk91BP4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:41 2025 by rpki-client