Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/ih7_WlEDq8E1hKRQD1YGCzIo4AM.roa
File: ih7_WlEDq8E1hKRQD1YGCzIo4AM.roa (raw, json)
Hash identifier: PdDPXYHFv3UM8cA5Oce8VwmtLFJgY0RqWI7b4Lfw4b4=
Subject key identifier: 8A:1E:FF:5A:51:03:AB:C1:35:84:A4:50:0F:56:06:0B:32:28:E0:03
Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Certificate serial: 079D
Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/ih7_WlEDq8E1hKRQD1YGCzIo4AM.roa
Signing time: Fri 09 May 2025 02:31:08 +0000
ROA not before: Fri 09 May 2025 02:31:08 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 58834
IP address blocks: 103.27.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1949 (0x79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Validity
Not Before: May 9 02:31:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8A1EFF5A5103ABC13584A4500F56060B3228E003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:c5:6d:f6:a7:51:f7:e6:e3:dc:95:25:c2:
4f:1e:14:3b:23:f5:e8:5a:29:0a:be:c3:8d:70:f5:
9d:36:b2:a7:eb:2a:27:23:cb:c2:a5:a2:d6:84:2d:
c0:67:66:79:96:a9:d0:a7:f8:ca:22:57:11:5c:42:
06:92:c9:88:f2:9c:13:d0:15:75:07:1d:59:12:2b:
cf:31:d4:aa:01:73:36:e2:18:bd:9d:c1:a5:d7:6b:
b7:0d:5f:9c:92:fc:85:25:b5:b2:08:53:11:b8:af:
5b:40:b7:b8:5d:04:09:59:ce:80:7f:a8:c2:75:6a:
cc:d8:16:51:e3:55:55:72:75:cd:b9:b6:28:6c:f4:
22:57:2c:35:8e:5d:bf:a8:d0:0a:1c:bc:74:1d:c7:
81:48:73:3d:fe:de:92:99:15:78:ac:1b:3a:21:a1:
00:d7:7e:da:fc:94:25:d7:65:09:c8:55:c9:cb:ee:
ad:41:82:65:b1:bb:d3:2e:36:ca:cc:b7:50:cc:fc:
2b:6c:28:43:3f:7b:82:4d:57:2a:48:61:4c:46:c2:
41:bb:f2:67:72:9e:52:21:2c:ce:f3:17:a8:c2:1c:
4a:b0:46:d5:d1:77:4a:cf:41:08:76:51:29:1a:61:
81:35:1e:6f:a1:d3:99:bf:7c:b6:c0:29:c7:bf:77:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:FF:5A:51:03:AB:C1:35:84:A4:50:0F:56:06:0B:32:28:E0:03
X509v3 Authority Key Identifier:
keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/ih7_WlEDq8E1hKRQD1YGCzIo4AM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e4:96:71:46:7a:78:48:87:d8:17:53:77:4d:af:20:67:1d:
de:40:d4:12:91:52:03:4c:14:e2:d4:6d:e6:84:6d:82:d1:76:
1e:1b:66:fd:a2:3e:57:cb:4a:6c:e6:53:63:ba:91:22:0a:67:
38:21:1b:3e:86:9d:b9:44:b5:33:b4:7a:51:5b:c7:79:40:16:
c9:f1:46:2f:e4:4c:be:a4:35:5b:88:75:04:64:92:8b:58:62:
14:3d:b9:5f:61:d5:ae:8c:bf:4d:95:6b:b7:13:d7:e8:84:5e:
44:53:e4:d0:4d:29:96:14:79:28:ce:60:60:45:ad:04:65:b0:
24:8f:26:55:32:6a:97:d3:05:0c:52:50:c7:c3:ba:9d:02:49:
43:d3:a6:33:25:3f:b9:54:4c:91:87:52:77:4a:b3:8a:f1:5d:
c6:05:30:e2:3d:b9:46:9e:6e:18:19:39:e3:5d:4f:5d:71:cd:
ac:16:f5:02:24:d1:45:66:63:db:2d:72:dd:13:76:86:1f:31:
4e:04:0c:e7:81:51:74:ad:b0:c1:06:0b:4f:65:47:96:88:d7:
fd:a2:a8:43:6e:33:6d:61:7b:88:57:66:2e:e0:ee:bf:2f:f9:
cb:0e:a7:ba:55:b8:54:32:0e:26:ec:b8:09:56:3f:33:f6:fa:
5c:44:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:21:59 2025 by rpki-client