Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/nupcYpRncbBv3-9dSwkTJgvZMyQ.roa
File: nupcYpRncbBv3-9dSwkTJgvZMyQ.roa (raw, json)
Hash identifier: 4MbXF1Yx0L8hJq971GxzZ01dBBGTfAi9S+9JFIVKcDg=
Subject key identifier: 9E:EA:5C:62:94:67:71:B0:6F:DF:EF:5D:4B:09:13:26:0B:D9:33:24
Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Certificate serial: 1F3A
Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/nupcYpRncbBv3-9dSwkTJgvZMyQ.roa
Signing time: Fri 17 Jan 2025 01:30:06 +0000
ROA not before: Fri 17 Jan 2025 01:30:06 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 58854
IP address blocks: 103.27.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7994 (0x1f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Validity
Not Before: Jan 17 01:30:06 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9EEA5C62946771B06FDFEF5D4B0913260BD93324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:8b:07:99:2f:79:6f:19:38:ba:56:cd:6a:
f4:ac:dd:7e:10:dc:93:84:d4:74:bb:7d:4b:74:28:
b5:aa:b8:1d:bb:3b:24:7d:fa:4c:92:92:6e:bc:77:
95:6f:40:8d:9b:d2:0a:82:30:35:8d:51:ce:0e:2e:
31:b7:53:86:33:1d:ff:1e:ab:37:e3:e2:18:41:69:
dc:99:8f:08:73:1a:72:79:f1:e6:ed:eb:4f:d3:ef:
e6:93:d6:fe:c0:63:c8:68:fd:c0:9f:92:b2:a6:ae:
21:9b:79:5a:e3:34:ce:a9:6b:9b:6b:dd:c7:55:c0:
22:d2:a9:f3:17:97:11:5b:15:f8:ec:59:ad:d6:a4:
a6:22:29:c1:3c:64:10:20:52:c5:41:9a:a6:4e:e4:
c6:af:90:43:2e:d4:8e:99:de:59:0d:51:36:6c:c7:
a7:72:9b:c6:85:ba:4f:7e:91:32:4f:55:8a:59:0d:
fe:c2:c2:f3:7a:f0:ad:6e:47:f0:1a:04:67:de:96:
a1:4a:9a:0c:cf:42:2d:78:24:15:1b:9c:fb:c3:e9:
5f:b6:30:81:77:d2:2e:ea:c4:6e:65:33:e1:4f:8e:
64:dd:0a:42:9c:e2:27:92:c0:92:6a:67:51:84:c9:
d0:a1:23:73:cd:35:f0:f6:7f:32:66:d8:78:0c:eb:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EA:5C:62:94:67:71:B0:6F:DF:EF:5D:4B:09:13:26:0B:D9:33:24
X509v3 Authority Key Identifier:
keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/nupcYpRncbBv3-9dSwkTJgvZMyQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.4.0/24
Signature Algorithm: sha256WithRSAEncryption
78:07:1c:2f:dc:8c:5a:6d:d7:76:42:f6:e7:63:e9:1c:ce:6c:
ea:be:4d:3b:1f:59:fe:e9:17:17:2a:55:45:a5:94:97:30:f3:
13:e5:c9:33:1f:c2:3d:2d:4b:be:3a:12:4a:71:29:04:b1:01:
88:76:e7:3f:80:84:d0:7f:a7:c0:f3:0d:92:55:ad:3d:cb:44:
43:63:32:9c:60:a6:09:b4:44:5f:f1:b9:f4:d2:57:d3:0d:0c:
98:75:f8:f4:09:f7:71:32:54:d5:28:d4:56:fc:79:26:f8:82:
bc:10:3d:d8:7d:1e:7c:f7:23:04:40:b5:96:cd:20:53:53:69:
58:64:c7:5f:9b:02:74:0d:e6:a4:7b:29:91:9b:f2:9c:c8:ef:
d5:45:bd:50:05:42:f2:ae:c2:8f:7b:58:ed:6c:02:a4:fd:42:
cf:29:7f:4a:ee:16:65:14:e3:c2:78:cf:44:f8:f5:c7:26:7d:
1f:16:5f:4f:6b:15:7a:fa:ca:e9:1b:9a:d0:f1:26:fa:56:c5:
a6:02:e0:7a:8f:a4:8a:77:e2:5c:89:ac:44:61:22:1e:3c:bb:
81:c1:ed:bb:f1:33:40:7a:f9:c5:b6:35:36:98:b0:bc:4d:45:
17:35:cc:9a:06:05:de:38:4d:af:aa:09:17:b6:8b:93:32:51:
1b:09:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:05 2025 by rpki-client