Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/1GotaIHUlave344Vv3f1oTlFPYc.roa
File: 1GotaIHUlave344Vv3f1oTlFPYc.roa (raw, json)
Hash identifier: ptuylA8GYqg0O3dHGuo7x69vl98Xg+rfpFcaOB3+nys=
Subject key identifier: D4:6A:2D:68:81:D4:95:AB:DE:DF:8E:15:BF:77:F5:A1:39:45:3D:87
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1842
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1GotaIHUlave344Vv3f1oTlFPYc.roa
Signing time: Fri 17 Jan 2025 01:24:48 +0000
ROA not before: Fri 17 Jan 2025 01:24:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 45.252.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6210 (0x1842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D46A2D6881D495ABDEDF8E15BF77F5A139453D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:4a:5f:33:d1:8a:76:68:71:63:d9:66:0f:
f6:eb:57:75:f6:e7:00:1e:b2:ad:b2:2c:8f:6b:9b:
cd:8c:84:7d:2e:5d:67:6c:a6:f5:4e:08:c9:83:dd:
a0:e6:1e:1c:4f:60:b0:f1:24:8f:3d:b7:60:ae:6a:
a6:ab:68:22:e4:63:50:d5:df:92:e8:12:25:c8:d9:
78:1b:b8:2f:54:21:03:86:9e:76:be:6c:95:33:da:
7b:96:0c:d2:68:61:e8:06:31:0a:7f:db:e9:d6:2d:
db:c8:b8:7a:98:58:94:25:f8:b3:11:17:91:e9:67:
6c:41:aa:1e:3b:a0:de:03:81:36:3e:ac:fd:ca:22:
f5:d3:e3:ba:ab:60:fd:25:82:6c:09:51:88:9d:c3:
4d:87:8e:3b:8c:38:6f:f7:5d:76:8c:39:54:3c:04:
1b:c6:7e:76:39:43:8b:02:98:6e:b5:47:f8:2d:2b:
8f:5c:ca:3f:9d:8f:e1:2e:82:83:05:a0:1d:00:62:
a4:28:14:60:a1:fc:d0:05:68:dc:dc:87:a1:d8:50:
51:4a:0b:1b:ef:71:20:0f:20:4a:4b:41:4c:8a:77:
e8:e7:14:d4:7b:cb:c9:60:ed:81:be:da:73:44:88:
5c:2c:44:ca:1a:3b:22:73:fd:5c:50:e5:41:02:3f:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:2D:68:81:D4:95:AB:DE:DF:8E:15:BF:77:F5:A1:39:45:3D:87
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1GotaIHUlave344Vv3f1oTlFPYc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:75:47:a4:8d:c5:d9:03:e2:a1:34:50:6b:32:f5:17:11:37:
f0:9b:44:54:31:c6:68:29:bc:40:3d:43:4e:5c:c0:eb:eb:c7:
0f:bf:6f:a6:35:de:b8:16:f7:3a:ab:7c:5e:ae:4b:da:9a:43:
4b:d2:2b:63:06:6c:05:29:c6:62:28:52:3c:af:55:19:e2:e5:
04:68:27:d9:90:cb:fe:5c:d6:ed:88:0e:33:2d:2a:38:1f:15:
fd:56:41:c0:25:f2:7a:6d:84:c7:1b:9b:e9:1a:46:4b:f4:68:
36:13:83:20:17:4f:69:8f:ef:13:c7:14:27:5b:83:0c:03:60:
0c:bc:e6:99:db:3a:97:85:04:5a:81:95:e0:ef:ed:29:82:dc:
07:69:b5:48:0d:cd:71:4e:5e:7c:88:8e:c7:9b:c5:f0:54:5e:
1f:a2:db:cb:de:b2:39:9c:64:9b:15:fe:18:c4:c5:bb:a1:59:
dd:c9:8c:5a:84:c6:6b:59:48:18:3f:53:4d:53:ed:09:b6:d5:
d6:f5:b8:78:d9:98:c5:ca:9e:6a:a3:53:de:b9:58:dc:2a:d4:
7c:18:d2:4f:c7:90:00:04:74:a2:e2:cd:1d:f9:c7:b8:41:3c:
d3:a3:f2:e7:8a:f6:2d:99:42:be:4e:7f:66:73:5d:42:08:90:
24:a3:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:59 2025 by rpki-client