Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/6ipJzxKA1U16y6aMGaAa1My3PzY.roa
File: 6ipJzxKA1U16y6aMGaAa1My3PzY.roa (raw, json)
Hash identifier: 5GlYZG5mQrW32aR4b3Xj7oXd3fuJz4o+MluHBYSQoy0=
Subject key identifier: EA:2A:49:CF:12:80:D5:4D:7A:CB:A6:8C:19:A0:1A:D4:CC:B7:3F:36
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CAB
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/6ipJzxKA1U16y6aMGaAa1My3PzY.roa
Signing time: Thu 02 Jan 2025 13:58:19 +0000
ROA not before: Thu 02 Jan 2025 13:58:19 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4811
IP address blocks: 14.103.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7339 (0x1cab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EA2A49CF1280D54D7ACBA68C19A01AD4CCB73F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:e9:6f:24:73:b8:ff:2a:64:a2:3a:dd:f1:
c3:17:9b:77:8c:bf:09:b2:d6:e6:c1:42:54:d1:e6:
95:67:4e:78:d5:d1:98:e1:c8:70:21:4c:47:98:2a:
f2:ec:3c:bc:2c:e9:30:ac:8f:ea:6e:4e:59:bb:31:
31:a5:e0:17:da:1d:1f:15:a2:8f:0b:60:90:c3:a6:
f7:09:be:f6:b2:87:16:06:0d:49:32:10:35:56:40:
f4:0e:84:6b:52:ba:7b:a3:3e:f4:c0:9e:83:14:29:
f3:1a:04:31:cb:bc:3b:54:42:d3:f4:91:d1:0c:e5:
c6:54:46:b6:94:fc:99:ee:cd:a0:3a:57:53:81:16:
8b:7a:e3:9b:17:15:16:c4:32:57:bc:82:97:98:4d:
bf:34:10:2b:36:c3:cf:88:c1:ed:06:f3:9f:90:54:
5c:95:7a:08:aa:50:d2:ce:75:dc:13:50:e6:4e:18:
1d:b4:19:6d:30:9a:06:cc:e4:06:b3:c2:cf:41:46:
4e:39:3a:ee:b1:c9:4b:21:19:b1:89:d5:86:13:13:
a5:6e:9b:f6:67:eb:5c:b6:93:b6:55:1a:1f:48:e2:
17:f8:43:03:d3:9c:8e:d7:3b:6c:83:0d:82:d7:31:
a2:38:e0:5c:d2:ff:b2:11:bc:77:bc:40:1b:22:3d:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2A:49:CF:12:80:D5:4D:7A:CB:A6:8C:19:A0:1A:D4:CC:B7:3F:36
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/6ipJzxKA1U16y6aMGaAa1My3PzY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.72.0/23
Signature Algorithm: sha256WithRSAEncryption
12:2b:08:52:89:72:4e:56:ef:68:b7:5f:68:75:9b:18:e1:9f:
5d:2c:05:94:8b:56:d3:4a:f7:b0:0c:b7:ae:a1:9c:3f:bd:01:
f5:b7:11:bd:3f:4d:c5:fb:fa:e0:8a:a1:dc:ae:96:ec:5e:16:
92:61:c2:be:69:8f:17:10:e9:88:93:78:96:a4:3a:4f:0c:55:
af:51:10:f6:49:d6:d9:88:3a:52:90:2b:b3:89:ff:87:c6:08:
06:4f:54:ae:c6:e6:c2:97:eb:1e:8b:2f:ac:24:7f:08:5c:f0:
19:be:4a:a8:39:f4:a0:d2:3f:c0:a0:01:35:fd:f7:0e:51:c2:
14:b7:d1:80:00:a2:02:18:84:1c:b9:8d:cd:e7:14:50:67:f8:
e3:95:70:29:a8:97:f0:24:78:1b:db:02:f5:a2:ff:86:bf:33:
ca:10:c4:94:eb:5f:a2:24:1e:8a:d3:a6:bb:76:54:37:df:55:
bc:6b:69:83:7b:5f:70:d8:3b:e0:f4:24:5b:7c:94:34:d3:81:
8b:a0:29:2c:a9:c3:c9:f0:a3:96:35:05:0b:a7:df:57:e4:b7:
b6:03:9d:20:24:8b:30:0c:12:49:1c:b8:67:4f:e1:2d:01:3c:
f0:2a:24:0b:1c:ef:58:4f:63:8e:b3:20:5d:45:ea:1a:0b:a4:
65:1f:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:28:34 2025 by rpki-client