Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/wBfzi9DVvJBqpWOdgn_Enb20PKE.roa
File: wBfzi9DVvJBqpWOdgn_Enb20PKE.roa (raw, json)
Hash identifier: vxQooelYK8GHAhBkJhdcEitFbO7l/Rpn4sTXfROBvj4=
Subject key identifier: C0:17:F3:8B:D0:D5:BC:90:6A:A5:63:9D:82:7F:C4:9D:BD:B4:3C:A1
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 305B
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/wBfzi9DVvJBqpWOdgn_Enb20PKE.roa
Signing time: Sun 30 Mar 2025 19:58:18 +0000
ROA not before: Sun 30 Mar 2025 19:58:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 134762
IP address blocks: 103.45.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12379 (0x305b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Mar 30 19:58:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C017F38BD0D5BC906AA5639D827FC49DBDB43CA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1b:3a:84:53:ab:72:51:98:11:2e:6e:24:be:
cc:af:35:c0:b7:f4:80:1b:45:3c:68:dd:dc:56:f0:
d3:65:d1:ac:36:42:1b:d8:51:fb:3d:65:2a:69:42:
32:49:25:7e:a2:59:58:e0:aa:37:85:23:df:44:60:
90:e4:cb:3e:a3:a7:3c:b5:23:da:05:14:27:07:a3:
36:08:f2:c9:25:f5:04:cc:42:2c:56:34:10:35:af:
5c:ee:15:97:93:4f:79:01:98:ab:e6:19:e8:dd:1a:
3e:dd:dd:c4:21:d0:9b:d9:47:d0:05:c7:de:d9:33:
b9:5b:da:1d:88:86:be:35:6f:c0:25:36:df:b7:68:
64:df:63:c6:00:89:7f:59:b9:1f:f8:de:d5:fb:97:
de:ea:32:07:b3:bb:dc:de:cf:48:26:77:95:67:ca:
dd:ca:6c:99:ef:4d:94:bc:57:80:f3:d1:8c:aa:77:
76:00:2b:75:94:5a:5c:78:e3:c6:4b:a0:63:bc:70:
87:05:56:34:da:6b:9c:58:65:10:de:54:da:80:cf:
ca:be:3b:29:bf:16:1a:ac:4b:2d:ed:82:12:3d:b0:
e8:6a:8d:dc:99:49:12:65:ba:47:07:e5:73:b5:ec:
b9:84:d2:b0:d2:cb:64:0f:30:4b:35:6c:5a:b4:d5:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:F3:8B:D0:D5:BC:90:6A:A5:63:9D:82:7F:C4:9D:BD:B4:3C:A1
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/wBfzi9DVvJBqpWOdgn_Enb20PKE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:89:93:4b:a9:7b:99:a6:7f:45:a5:48:59:d5:50:8c:b3:03:
d1:6e:d6:45:85:a1:e8:64:76:08:cc:b7:ca:7c:79:14:26:71:
68:0f:16:f9:7b:f9:53:ae:b9:1d:5f:82:e8:95:ac:74:57:9b:
39:04:5f:9b:22:33:39:4a:c4:c2:11:be:88:05:c6:0e:17:fe:
da:be:5a:6c:e4:fd:78:90:10:04:60:b9:1a:6b:94:66:58:55:
d5:9b:a4:15:b9:6a:2e:8b:ec:34:5c:5a:55:a7:6e:b5:1c:1a:
36:92:42:1b:81:c2:06:de:b8:32:f1:55:91:a5:8a:7a:12:15:
14:61:af:2f:5f:cd:60:57:e6:ee:99:01:e2:68:f9:a9:77:78:
60:a2:21:ae:e7:e2:2a:b1:e3:16:38:3c:43:f8:a0:30:6a:7e:
be:c9:2a:6a:6a:02:dc:16:35:fe:c2:e5:2a:8c:b1:78:20:e9:
8a:0b:e8:07:b5:08:c4:1c:a7:15:34:62:e3:27:d3:c0:d6:e1:
0b:84:0d:54:02:75:d3:19:44:04:f8:70:ff:77:bc:33:34:6e:
9f:0d:d6:ab:a4:5e:a5:62:d5:a0:f8:66:c3:b3:e0:d0:e6:b1:
f8:11:11:45:5d:a7:c2:f5:b8:5c:d7:5a:39:00:0e:32:09:2e:
fd:e7:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:43 2025 by rpki-client