Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/guJT03W_-tMFXlcliKng1B15iJU.roa
File: guJT03W_-tMFXlcliKng1B15iJU.roa (raw, json)
Hash identifier: QQpqs0hJ8p3B4dOO/H+6AxaU4zUX8J+RfxadTD1UG/4=
Subject key identifier: 82:E2:53:D3:75:BF:FA:D3:05:5E:57:25:88:A9:E0:D4:1D:79:88:95
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 2343
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/guJT03W_-tMFXlcliKng1B15iJU.roa
Signing time: Tue 08 Apr 2025 03:06:31 +0000
ROA not before: Tue 08 Apr 2025 03:06:31 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 59067
IP address blocks: 103.25.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9027 (0x2343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Apr 8 03:06:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=82E253D375BFFAD3055E572588A9E0D41D798895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:49:35:b0:e5:e7:81:79:d6:5f:27:e2:63:
6e:d5:81:3e:28:a2:3c:3d:44:0e:ed:43:94:97:37:
a8:0f:27:1f:2c:12:b8:6b:f2:47:9c:38:33:89:b5:
ff:7f:d6:d3:8f:07:23:77:1a:d3:59:6b:86:69:e7:
ce:3a:2a:51:18:b9:ed:0b:c6:5c:66:03:c2:25:10:
89:69:75:9a:8b:0a:e7:94:bf:cb:e2:70:43:bd:47:
bc:d7:3c:5c:57:08:39:b3:ba:97:8f:5f:3f:86:bf:
c7:55:2e:12:6d:8c:47:59:3e:20:ce:73:32:b0:74:
4c:49:9e:aa:d1:43:9f:fb:76:73:7a:a1:1a:df:e3:
84:4e:40:39:94:73:13:f0:ba:28:1e:1a:3b:a6:6f:
35:44:4a:e2:72:c0:09:82:dc:80:b9:99:1f:11:26:
c0:6e:27:09:d1:bd:76:70:d4:b6:af:3a:b9:5f:6e:
8c:f8:fe:56:0e:f8:1b:dc:a9:56:12:e6:0d:89:cf:
d2:7b:f0:0e:7c:c8:f3:38:28:20:35:23:21:63:9b:
73:c9:d9:a9:1b:0c:d8:65:34:e3:2b:70:36:c0:31:
f7:37:98:42:95:1c:ae:9d:4f:a7:1c:58:3b:ca:10:
ac:07:de:a8:cc:96:99:44:e9:96:16:a4:b4:ff:24:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:53:D3:75:BF:FA:D3:05:5E:57:25:88:A9:E0:D4:1D:79:88:95
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/guJT03W_-tMFXlcliKng1B15iJU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.156.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f9:d7:04:d0:c6:b6:ed:ee:a0:ff:69:7f:33:69:32:52:af:
6e:c6:7c:bf:74:c2:46:2b:5a:3d:40:fc:af:51:2e:d1:10:f3:
23:de:d3:94:90:4b:d6:f3:8a:d9:5e:48:b4:a1:75:49:5b:ec:
12:17:21:ab:f6:18:85:97:2b:33:a3:fb:3a:f9:52:3d:09:ca:
1c:34:c3:02:58:8a:5b:08:9a:15:ea:b9:eb:1f:49:30:03:20:
28:10:c2:79:0a:24:66:83:c0:ac:52:3e:f2:ed:ce:cb:7b:20:
aa:1a:f3:10:75:ea:50:fd:5a:ac:f5:61:0b:2c:77:3e:a0:28:
30:19:15:9a:74:f3:ea:83:98:18:e5:4d:0e:f2:79:4f:7a:00:
35:8e:cb:5e:be:8b:aa:ac:86:c4:9e:cb:f1:f6:5e:be:c6:8d:
84:9c:c4:af:5e:a3:34:cf:ab:27:39:53:46:60:57:0a:c1:25:
c6:6f:f8:78:4f:9d:f2:58:fe:08:cb:1b:8a:77:81:0e:86:6d:
3f:cf:e9:a2:bb:bd:09:16:75:41:e8:b7:58:74:db:7d:a8:e7:
ac:74:36:84:78:c4:62:df:92:94:bf:3d:73:78:26:a4:4d:58:
0f:04:59:e8:2f:cc:68:c9:f4:ab:da:7f:a4:b1:31:4e:08:fa:
21:b8:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:30 2025 by rpki-client on console.sobornost.net