Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8cpIGjOvkwDtEao8-stqEY7t2ew.roa
File: 8cpIGjOvkwDtEao8-stqEY7t2ew.roa (raw, json)
Hash identifier: Ry0GCQQ9W5083O6HV1o7UktrudxsUcvUb+n8YnSTsFQ=
Subject key identifier: F1:CA:48:1A:33:AF:93:00:ED:11:AA:3C:FA:CB:6A:11:8E:ED:D9:EC
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1859
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8cpIGjOvkwDtEao8-stqEY7t2ew.roa
Signing time: Fri 17 Jan 2025 01:24:57 +0000
ROA not before: Fri 17 Jan 2025 01:24:57 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 45.252.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6233 (0x1859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F1CA481A33AF9300ED11AA3CFACB6A118EEDD9EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:ae:1c:fb:32:d1:59:01:4f:67:92:2a:41:
46:54:d1:95:b1:aa:61:bc:a0:62:97:8f:a6:d0:50:
02:6f:a9:00:52:47:20:09:ab:9e:a5:13:d2:35:f0:
d1:5f:21:88:16:18:7d:ad:0d:18:41:ff:ba:d2:e1:
62:eb:0a:8e:1d:5a:c5:c4:3c:52:d1:88:c6:d3:48:
76:77:24:bf:52:52:7a:c7:16:47:94:67:12:c2:92:
4a:8c:34:3e:c1:64:44:75:74:a1:eb:fb:c3:a4:f1:
4c:b1:a3:de:fe:99:50:e0:07:c8:3b:22:63:f3:cd:
40:cb:2b:96:fe:41:42:98:3f:6b:42:a2:f2:7e:5e:
25:66:4c:5a:df:7a:6c:9a:ca:a4:1a:4d:40:46:5c:
3e:0d:4d:06:ed:f9:ae:fb:08:fe:cd:e8:94:a7:7e:
7a:4e:87:6e:75:3f:d7:50:1e:fa:c1:4d:8e:c5:66:
05:0e:f8:68:cc:ef:35:c5:e4:49:4c:fb:de:75:38:
97:b8:a4:2d:73:9f:ae:09:79:16:5b:2b:de:78:22:
c8:50:bd:20:fe:ca:ec:e4:e9:c2:92:63:17:80:39:
b4:c1:4b:2c:f4:3e:49:92:fc:63:b9:c8:5d:ea:a5:
98:fd:3f:08:18:83:01:3a:08:40:2c:a0:7f:06:8f:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CA:48:1A:33:AF:93:00:ED:11:AA:3C:FA:CB:6A:11:8E:ED:D9:EC
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8cpIGjOvkwDtEao8-stqEY7t2ew.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.40.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:4f:8b:e6:f9:16:2d:aa:80:5b:a8:73:52:c1:6b:7a:83:37:
d8:53:06:5c:38:92:8e:58:8f:85:a1:8b:5a:b0:65:12:bc:ca:
0c:30:4f:4f:da:26:6b:13:80:aa:e0:9f:55:9e:21:05:7d:7f:
d7:a7:30:66:7e:13:ee:43:fc:aa:ed:86:ba:ba:0a:fd:cd:65:
73:12:34:c8:00:90:70:1f:64:99:26:34:15:bf:00:d1:28:57:
6f:83:bd:eb:d2:40:0c:61:f9:84:11:5f:d4:03:21:67:ed:ff:
5b:d7:1d:8f:75:1b:32:1d:0d:aa:ba:11:84:91:bf:3d:83:4c:
35:b2:c4:59:1e:92:ae:0a:2c:a7:d6:56:bd:a5:5a:1b:ba:0f:
36:f7:b2:17:ef:f5:b3:da:eb:17:27:1f:33:1d:1c:44:29:99:
b8:b8:1e:28:d3:19:2f:e8:b3:da:c5:e9:55:c1:ab:c9:d3:4b:
01:c4:76:76:7d:cd:ec:92:91:a3:00:51:de:8b:28:4c:b0:5c:
89:b0:d5:0b:96:42:af:84:de:49:a4:26:85:b8:e4:c3:5c:15:
0b:6e:21:ef:13:08:e3:2d:1e:d9:99:e7:d9:56:b5:81:4a:96:
59:2a:97:df:e4:c4:c9:b7:dd:b1:08:bf:d8:5d:32:f3:af:e0:
86:60:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:46 2025 by rpki-client