Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/Dq8TB9Iw3wpCYOom-TFTIIU8DxE.roa
File: Dq8TB9Iw3wpCYOom-TFTIIU8DxE.roa (raw, json)
Hash identifier: SbtrU6v4DFJqI+K7YSbJe05UeDGIMiyFW8Ot9p2YPgc=
Subject key identifier: 0E:AF:13:07:D2:30:DF:0A:42:60:EA:26:F9:31:53:20:85:3C:0F:11
Certificate issuer: /CN=7B099066BD2AF234293C87917B33B1AB861970EF
Certificate serial: 195C
Authority key identifier: 7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Dq8TB9Iw3wpCYOom-TFTIIU8DxE.roa
Signing time: Tue 24 Sep 2024 00:18:54 +0000
ROA not before: Tue 24 Sep 2024 00:18:54 +0000
ROA not after: Sat 20 Sep 2025 07:41:26 +0000
asID: 63199
IP address blocks: 139.159.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6492 (0x195c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B099066BD2AF234293C87917B33B1AB861970EF
Validity
Not Before: Sep 24 00:18:54 2024 GMT
Not After : Sep 20 07:41:26 2025 GMT
Subject: CN=0EAF1307D230DF0A4260EA26F9315320853C0F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:e3:d2:28:a6:17:82:5f:0f:1f:dd:4c:60:
19:31:22:10:b9:a4:78:3a:5d:e0:35:94:b9:b2:9a:
21:38:ba:a9:36:b1:9f:6a:19:80:5f:24:46:9e:60:
3f:07:97:46:1b:f1:b4:9b:de:da:a1:ab:32:29:3c:
f6:d9:a2:c8:79:0e:91:2b:44:ad:ec:31:e3:61:18:
94:56:35:6c:3b:dd:b7:75:8f:95:dd:1b:f1:78:51:
34:1d:97:50:a1:4f:f1:3f:6f:7c:06:1f:5e:ef:f8:
13:01:79:6f:e4:6a:b4:88:3f:18:50:ea:c6:53:6d:
a4:94:f8:e0:0c:c3:e0:06:61:10:4d:e2:83:a9:ad:
1d:e8:00:f1:01:44:d1:01:29:49:f8:9b:a8:85:17:
5f:05:5e:f4:35:a3:08:90:6e:f4:5c:87:e7:ad:bd:
83:a6:1b:00:18:57:bb:d1:c7:da:1f:80:02:fc:18:
fa:9b:e9:e4:0a:9c:52:52:56:b7:3a:91:28:e8:b5:
c0:06:fe:1c:d0:ba:94:ef:9e:2e:74:dc:d8:f2:2e:
80:d5:44:5f:1e:cf:fb:32:e2:f3:2a:88:ff:2b:37:
bf:23:d0:38:6b:6e:b5:07:67:a6:a8:0d:a2:2b:36:
c6:6d:d8:d4:36:ae:df:87:c6:a7:0c:54:4f:17:9b:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AF:13:07:D2:30:DF:0A:42:60:EA:26:F9:31:53:20:85:3C:0F:11
X509v3 Authority Key Identifier:
keyid:7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Dq8TB9Iw3wpCYOom-TFTIIU8DxE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.159.104.0/22
Signature Algorithm: sha256WithRSAEncryption
00:c5:52:57:a2:e0:85:34:02:45:12:23:2b:3c:b5:42:5e:ad:
cb:1d:20:e2:d4:74:79:cb:89:6f:d8:0a:c9:45:af:e8:af:67:
5d:1f:e0:2e:62:7a:37:2d:70:6c:07:f2:b4:55:bc:f0:c9:79:
89:53:63:98:a9:db:f9:d6:ed:87:0d:06:2d:0d:6a:e7:99:76:
b6:db:3d:cf:07:d7:3c:f2:e2:32:73:7e:3a:e3:fe:68:f4:88:
2b:79:73:34:3e:8f:26:a0:63:bc:2a:0d:c2:d9:8c:e5:ef:43:
60:3d:e3:9c:27:93:1b:23:5e:6f:9c:f0:4d:44:de:b3:0a:4c:
62:0f:1e:93:06:29:d5:52:0f:6e:97:73:b9:1a:46:6b:33:b4:
09:45:1b:ac:32:5b:0b:54:86:a6:1e:e2:a5:b5:db:47:56:0d:
e2:ed:36:15:b0:cc:ed:a5:18:24:b1:78:2b:db:82:dd:0e:6e:
25:17:6d:1d:81:e5:8e:19:7f:a5:10:ad:3d:ca:ae:dc:48:f9:
90:f2:12:5d:1d:76:cd:9d:c4:65:50:52:38:6a:cf:35:a1:cf:
79:95:77:db:f9:33:2d:55:23:bc:a5:c9:40:aa:8a:07:a4:83:
31:31:0d:1d:46:10:c5:15:0f:0e:30:37:15:c4:bd:67:b8:9f:
b2:38:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:33 2025 by rpki-client