Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/83MGAnub2KkGtzeJOggPRjTVXqg.roa
File: 83MGAnub2KkGtzeJOggPRjTVXqg.roa (raw, json)
Hash identifier: dnAoXKjZ2EkXlx8N4pPG8t9LzAoqQ4ZH2ytZ6v8sHjk=
Subject key identifier: F3:73:06:02:7B:9B:D8:A9:06:B7:37:89:3A:08:0F:46:34:D5:5E:A8
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1465
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/83MGAnub2KkGtzeJOggPRjTVXqg.roa
Signing time: Wed 11 Sep 2024 02:23:15 +0000
ROA not before: Wed 11 Sep 2024 02:23:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24373
IP address blocks: 45.252.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5221 (0x1465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F37306027B9BD8A906B737893A080F4634D55EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:2f:22:39:f1:94:c7:0a:54:c0:bd:5d:88:
52:46:5b:35:2f:fc:34:54:04:e2:18:9f:56:c7:99:
b5:52:d8:fd:d0:3b:ed:a4:2f:74:e1:fa:3e:56:91:
2d:32:78:6b:54:e7:51:9c:6e:5c:1c:e6:28:05:22:
6c:51:38:0f:84:e3:d3:d9:84:4d:73:60:37:a7:a6:
b7:d0:e1:95:3a:3c:b6:74:a7:83:cb:ae:95:fa:23:
04:25:6e:0f:74:29:79:bc:3e:41:3e:63:8a:6d:4e:
08:8e:1f:e6:21:c7:6a:71:1f:6a:1a:f0:6f:5a:29:
43:53:0f:4c:22:17:80:33:68:9f:99:0f:e1:ef:8e:
e4:fb:f7:39:cd:c4:16:f9:8c:0d:5f:42:10:e3:cc:
7f:81:60:4f:7e:2a:61:f0:ca:0c:e0:83:36:51:da:
f8:6a:63:6a:85:98:3f:50:64:17:d5:69:6c:6c:d6:
2b:a6:7a:1c:64:f6:1b:cf:8c:0b:91:34:94:94:93:
61:00:20:69:fa:eb:98:2c:e7:69:7a:4f:6e:95:00:
29:96:6b:a4:6a:8a:d7:67:0d:83:23:8d:02:61:79:
ce:49:b8:f0:69:de:a3:92:3f:3b:d1:7b:9c:f5:e0:
c1:7d:e9:c0:44:20:53:fb:c3:0d:d6:e3:4b:49:40:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:06:02:7B:9B:D8:A9:06:B7:37:89:3A:08:0F:46:34:D5:5E:A8
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/83MGAnub2KkGtzeJOggPRjTVXqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
07:46:46:2d:4e:0e:20:00:54:f8:58:6d:b8:79:62:15:e2:dc:
cc:c4:90:ce:1e:ee:5d:e1:8a:bf:59:06:e6:04:7c:bc:f4:a0:
1a:44:9d:01:a8:fb:64:d0:08:5b:6b:65:a5:1b:25:4f:7a:ed:
d2:4d:62:cb:45:e3:5d:2d:f0:11:75:70:23:b8:c5:a8:93:35:
fe:c7:38:8f:67:a9:a0:29:24:d2:55:fc:ad:fb:02:f5:56:11:
f2:70:66:ba:06:df:c2:a5:99:97:a9:5c:a7:6b:83:e9:69:e4:
a7:c6:c0:a4:00:16:d9:d9:0b:d9:d2:e5:44:8a:93:a4:02:18:
44:af:56:18:81:12:ea:e1:63:42:30:16:15:cc:72:8f:67:ea:
89:36:7c:60:32:f0:e3:82:2f:e9:f4:ea:07:b6:5f:b3:5a:a6:
f3:98:29:6a:9f:5a:e5:22:86:1a:79:58:cd:a8:5b:9d:b2:ab:
18:2d:49:0c:72:be:a4:71:4a:a7:70:44:62:09:05:68:a1:6e:
0f:82:fe:32:d6:0a:58:f5:a5:4c:d9:9e:cb:ab:ee:59:16:e9:
e8:44:53:6a:0c:70:a5:9d:a7:f3:45:b1:3e:e1:e2:93:43:26:
11:9a:a6:e3:0d:18:9e:ef:f6:b4:55:81:25:0f:2c:9c:34:c5:
79:3e:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:07 2025 by rpki-client