Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/iRPsSKHZxbiAdmIl_ajTiWrVSs0.roa
File: iRPsSKHZxbiAdmIl_ajTiWrVSs0.roa (raw, json)
Hash identifier: 42Qgimj5yzYbVOKk6fTnCdV5YdeSTTyKpX9u89NlDMU=
Subject key identifier: 89:13:EC:48:A1:D9:C5:B8:80:76:62:25:FD:A8:D3:89:6A:D5:4A:CD
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 08A9
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/iRPsSKHZxbiAdmIl_ajTiWrVSs0.roa
Signing time: Tue 17 Dec 2024 06:24:29 +0000
ROA not before: Tue 17 Dec 2024 06:24:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63567
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217 (0x8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 17 06:24:29 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8913EC48A1D9C5B880766225FDA8D3896AD54ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:fc:a8:59:25:66:df:e6:4c:40:94:0a:d9:
a3:a9:be:c1:c3:1c:0d:a1:f0:88:9e:e0:14:f5:85:
4a:f4:47:85:c7:56:ce:b7:5e:27:38:5d:71:f4:aa:
15:46:b4:4f:20:0c:e5:81:ce:9a:a6:e8:5c:4e:4c:
79:de:c2:29:8e:0d:5d:80:d3:c3:43:6b:9f:60:c3:
e9:0e:9e:c7:00:63:7a:ff:01:72:6c:fc:2a:68:2d:
8a:83:22:97:9b:d9:af:5f:79:22:76:de:51:44:b7:
1e:e9:3b:ee:76:2e:1d:0b:87:c3:78:f8:5e:28:70:
a7:47:60:20:d2:0c:d0:9d:f4:91:a1:cd:8e:cd:df:
b1:d8:e8:41:80:94:b2:65:de:e6:bf:ae:9d:ed:ff:
7e:b9:ef:7a:46:82:cb:55:5b:91:cf:4f:db:c2:ba:
89:36:4b:d8:f4:01:b4:8f:45:d5:03:67:83:a7:67:
22:1f:cf:0c:27:e2:ea:e0:a9:53:d8:44:63:57:73:
71:90:bc:fc:b1:3f:a4:96:0c:e3:e0:cd:92:94:01:
4c:e8:0a:a2:bb:2c:58:56:2b:17:a6:aa:c4:b1:18:
57:f0:6f:ad:0d:c1:99:12:3f:92:74:26:ed:60:3d:
18:e6:29:e1:05:a5:eb:11:c8:c3:7c:e2:cd:75:40:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:EC:48:A1:D9:C5:B8:80:76:62:25:FD:A8:D3:89:6A:D5:4A:CD
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/iRPsSKHZxbiAdmIl_ajTiWrVSs0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
99:c0:35:70:1e:3c:32:27:7e:a8:59:b6:9e:85:13:bc:30:e8:
c1:28:be:16:b4:c0:7c:28:bc:ba:97:8a:6c:91:52:16:64:9d:
6f:83:5f:4d:b6:96:c8:86:08:5c:c8:ef:e2:59:8a:b6:77:b4:
38:5a:9f:0d:96:4e:9b:a8:7e:50:23:2b:93:0b:f8:1e:70:de:
1d:5a:c5:91:74:32:f8:28:e2:09:f5:ec:e7:25:24:a8:60:8f:
b9:14:4c:d6:c0:75:4f:17:59:d1:ed:05:91:78:cc:cb:3d:2a:
30:96:6d:70:35:2b:95:42:2a:6b:46:09:53:31:42:f7:4b:9d:
23:86:47:ec:bb:b3:70:63:47:1e:24:b0:98:b7:3e:a1:04:d2:
c4:bb:71:0b:23:da:61:01:62:3b:8b:ad:0d:de:79:52:b9:33:
42:2b:d0:04:ef:d2:e5:4c:0f:e3:1a:7f:f2:18:08:33:d7:cb:
71:6e:1e:4b:0b:cb:5a:eb:a3:c9:10:7e:21:76:3a:d9:97:7f:
c1:7f:14:2b:c5:8f:90:bc:92:be:cc:27:b8:7a:41:50:f8:9d:
f4:a4:e9:47:79:9a:ce:c1:a1:56:ac:a1:b8:f2:e6:b6:f1:d4:
8b:8c:39:1c:e1:67:30:c4:17:42:2c:87:40:3a:94:38:f6:7a:
de:f3:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:46 2025 by rpki-client