Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/EY8LSWQxNZqBQLTFY07BhlQLJo4.roa
File: EY8LSWQxNZqBQLTFY07BhlQLJo4.roa (raw, json)
Hash identifier: xXvvcueUD59lurpCZHhxayIZDTl9+EbvTXThbhqx5BY=
Subject key identifier: 11:8F:0B:49:64:31:35:9A:81:40:B4:C5:63:4E:C1:86:54:0B:26:8E
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 08AB
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/EY8LSWQxNZqBQLTFY07BhlQLJo4.roa
Signing time: Tue 17 Dec 2024 06:30:19 +0000
ROA not before: Tue 17 Dec 2024 06:30:19 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2219 (0x8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 17 06:30:19 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=118F0B496431359A8140B4C5634EC186540B268E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:67:ad:9b:11:d1:63:97:3f:23:75:10:92:
08:d6:a2:4f:ec:af:2f:bd:1f:2a:0d:41:4e:d3:b7:
15:ab:fb:a6:d4:0d:8d:4d:dc:e8:cb:7e:2b:75:62:
19:b7:bd:60:4e:c5:80:63:ca:29:74:e8:02:b0:85:
49:5e:7e:9b:fd:49:93:b4:de:fb:4e:69:a8:12:89:
75:28:f6:b0:33:c1:ae:cf:6a:9b:bb:89:b2:3a:f7:
b5:7d:56:40:e5:19:4f:ed:67:0c:57:d9:d4:80:0c:
d3:02:8b:97:c7:3e:d4:c4:3c:6a:34:87:ed:1c:cf:
10:02:44:ae:57:45:08:65:ce:d1:6a:e7:05:a4:f1:
c9:83:a4:e7:83:b2:f7:6b:86:9e:e5:15:4b:f9:94:
d6:6c:28:21:82:63:26:eb:30:11:ba:a3:6a:55:e9:
7c:ec:1b:44:05:02:64:23:86:ac:18:1a:21:d6:31:
c6:31:a5:bc:da:02:11:9c:e5:81:18:fb:eb:f1:1d:
a4:44:a3:79:08:61:3c:67:56:0a:c6:5e:a0:d4:e7:
e5:2a:c2:8a:6b:93:72:52:ec:22:6b:bd:e6:8e:41:
45:5d:9a:1a:3a:e0:b1:5d:2e:2b:00:58:64:5c:2d:
c6:42:e3:20:6f:f0:05:bc:f5:db:36:93:27:23:2b:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:0B:49:64:31:35:9A:81:40:B4:C5:63:4E:C1:86:54:0B:26:8E
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/EY8LSWQxNZqBQLTFY07BhlQLJo4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
47:9a:11:bc:53:64:dd:92:cd:82:0d:ba:85:cf:28:57:6b:b0:
fa:ec:2a:54:d2:14:37:15:6b:2f:c5:84:7d:94:ba:0b:cc:1c:
a1:b2:ab:b4:1f:d4:a6:5c:d1:f8:fd:b5:69:37:d7:f8:a9:7a:
3c:0b:88:9b:13:a4:a8:92:08:f8:12:14:2c:d3:a8:9f:09:a5:
2b:f2:ba:0d:f9:76:cb:a2:df:a4:ec:b3:aa:e9:e9:a6:bd:4c:
d6:ed:80:d2:a8:9a:e2:8a:e4:4e:7a:18:b7:83:f6:8c:f8:e0:
fc:c3:19:b4:53:a9:8a:b0:05:fe:1e:8b:0d:17:33:fb:97:ed:
33:e9:d2:ea:4a:70:86:4d:e7:43:e0:da:2b:cd:cd:52:6c:40:
43:7c:8b:32:eb:18:c8:87:22:73:b7:4d:ef:01:9e:6d:cd:b6:
4d:1c:ef:bc:f0:da:9b:19:8b:88:18:66:4a:31:b3:9b:41:83:
3a:63:8d:6f:48:0a:68:8d:9d:bf:30:d4:ff:cb:ea:64:6f:67:
32:03:d8:8a:ae:1b:a8:74:cc:3b:72:3f:2d:7d:32:4e:ec:b3:
ee:db:67:50:f2:99:4a:85:bc:2b:ef:c2:81:1e:56:ae:16:3f:
60:ce:96:5b:7f:2e:a4:2d:e6:02:ee:36:81:23:af:0e:79:26:
b9:87:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:57 2025 by rpki-client