Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/1qvAsPcDeP2wDb4v7hkSELyK2Hs.roa
File: 1qvAsPcDeP2wDb4v7hkSELyK2Hs.roa (raw, json)
Hash identifier: JJnDqDSC7VZdelof424nBOcLRsDNW/5JNgoPNk5aoRs=
Subject key identifier: D6:AB:C0:B0:F7:03:78:FD:B0:0D:BE:2F:EE:19:12:10:BC:8A:D8:7B
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 17
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/1qvAsPcDeP2wDb4v7hkSELyK2Hs.roa
Signing time: Thu 17 Apr 2025 11:31:16 +0000
ROA not before: Thu 17 Apr 2025 11:31:16 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.118.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:31:16 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=D6ABC0B0F70378FDB00DBE2FEE191210BC8AD87B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:02:0e:89:9d:b9:f6:a4:5e:84:01:ec:26:
46:33:b9:8d:66:73:c0:19:c7:93:b1:fe:00:f6:f0:
42:ca:c6:d9:97:4c:49:55:49:dc:a1:54:31:6d:bf:
36:27:d2:49:d9:73:b9:b5:b9:24:07:f5:2e:16:c8:
02:20:e2:e8:e1:1b:ad:bf:7f:f1:00:4d:97:7a:1a:
fd:af:3d:c7:3f:68:3e:a3:77:fa:7c:2b:18:a5:70:
5e:43:07:4c:85:06:ae:48:84:7b:65:7f:d7:da:db:
8c:39:9a:88:d4:98:01:42:b6:44:31:c6:78:a8:13:
85:1e:ef:13:55:a3:0a:f8:92:8d:83:07:45:bd:58:
37:5e:b1:6d:ce:4b:17:0d:7b:7d:79:6b:c3:31:eb:
ba:42:e4:37:f5:60:aa:94:be:79:8b:0a:dd:4a:73:
d5:a1:95:6c:17:e2:c9:49:3e:56:d4:3f:ed:2b:45:
42:e9:96:e8:01:da:a9:3d:89:d2:b7:ee:50:6a:88:
f7:da:77:53:68:2f:ba:ac:2f:50:21:92:2f:80:3b:
18:b5:6c:2b:ee:85:1b:09:de:69:5d:b5:ef:74:27:
29:d8:39:ec:55:79:5d:f5:1b:8f:c8:f8:a6:73:a7:
02:bf:e7:7b:80:32:a2:95:09:5a:de:62:94:99:d2:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:C0:B0:F7:03:78:FD:B0:0D:BE:2F:EE:19:12:10:BC:8A:D8:7B
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/1qvAsPcDeP2wDb4v7hkSELyK2Hs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:c7:06:e3:8b:c2:d5:c5:f6:87:a8:14:bb:fa:7b:7b:41:d2:
05:a8:51:71:f1:ee:f7:2d:84:6a:66:4d:71:fc:21:b0:03:85:
a8:f7:cc:cc:08:94:93:25:e3:16:3a:a1:29:b7:71:43:57:8e:
80:b7:30:9d:3f:7b:47:81:0f:7d:6b:94:3f:63:e1:5a:d5:12:
41:63:ea:ad:89:fc:2d:35:90:11:7f:e5:5b:e2:d5:3d:ef:da:
54:f3:fd:d0:5b:f2:4a:44:ac:5e:8e:82:d8:ad:35:d5:7c:ae:
8b:c8:0e:d3:02:8a:bc:9f:23:9f:3b:94:01:5a:2e:5b:87:00:
3a:f7:5d:2a:12:b0:43:37:11:97:d9:04:d0:6c:26:1a:57:ed:
82:bb:91:b7:8d:08:5e:85:8a:eb:c3:55:f9:b4:a6:10:e1:fd:
e2:bb:04:46:2e:87:c9:1f:1d:99:86:8f:5e:23:ba:b0:fd:42:
2a:71:0d:ad:e9:41:86:fd:e1:78:d3:f3:b6:d4:7c:96:99:69:
2e:d6:ff:18:b4:ba:13:e6:38:2c:41:53:4f:8c:60:1b:39:ab:
ca:a2:b2:2c:34:bb:b0:90:5a:fb:1b:6c:c3:1b:f1:32:9c:bd:
43:a0:8e:87:57:70:c9:46:d2:67:26:ba:49:6a:0b:1c:5d:01:
6a:73:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:33 2025 by rpki-client on console.sobornost.net