Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8eJ_X95EtXZR3447nAYK9mN40Uw.roa
File: 8eJ_X95EtXZR3447nAYK9mN40Uw.roa (raw, json)
Hash identifier: YEYtVkj9dbQUTfmiFFTKyX8ezWjKTHvh8MpMgy0fFQ8=
Subject key identifier: F1:E2:7F:5F:DE:44:B5:76:51:DF:8E:3B:9C:06:0A:F6:63:78:D1:4C
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1823
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8eJ_X95EtXZR3447nAYK9mN40Uw.roa
Signing time: Fri 17 Jan 2025 01:24:38 +0000
ROA not before: Fri 17 Jan 2025 01:24:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 45.252.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6179 (0x1823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F1E27F5FDE44B57651DF8E3B9C060AF66378D14C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:e4:8f:d7:3b:d1:dd:46:a4:11:41:de:dd:
fa:7d:39:72:2e:73:b1:8a:66:e4:bb:11:09:a7:cb:
ce:20:33:08:98:d0:9e:99:d7:c9:77:14:ab:07:39:
d3:c1:e9:9b:24:b3:6c:c2:95:95:7f:8c:69:c3:d6:
2e:24:a7:6a:8d:88:5a:4c:85:1c:15:2f:ff:a7:79:
25:ef:f2:3e:9c:65:b0:b0:be:28:0d:5c:15:18:3f:
00:df:5d:f9:c1:be:37:c3:b6:39:f8:01:c0:96:09:
38:b5:d0:7a:82:8e:5f:28:59:e2:d4:7b:be:bf:8e:
39:9b:37:58:7c:3b:84:0a:eb:2f:c0:db:9a:e9:04:
4b:09:6d:dc:17:fb:85:8a:e0:ea:df:52:6b:02:fe:
42:e9:03:90:63:1f:5c:76:03:08:42:e5:55:3c:c7:
fd:ba:e9:2c:22:27:6e:b5:52:f3:78:43:29:02:80:
0a:03:d4:25:26:d9:8e:97:5a:7d:5b:ce:6c:af:50:
85:66:63:a6:73:45:a1:3f:18:e2:5a:91:97:47:55:
c9:64:d5:a8:43:64:99:8e:8f:43:de:b7:25:40:bc:
28:28:93:ad:46:6c:47:d2:1d:a2:07:20:ef:a4:d6:
5f:7b:93:92:15:e7:78:1c:b0:6e:02:ac:2e:7e:54:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:7F:5F:DE:44:B5:76:51:DF:8E:3B:9C:06:0A:F6:63:78:D1:4C
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8eJ_X95EtXZR3447nAYK9mN40Uw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:fb:f3:54:ff:5d:38:15:23:24:14:8f:f8:eb:13:f2:fd:7b:
c0:b9:34:2b:4d:3d:97:80:27:a3:de:84:1b:7c:0f:b3:a2:d1:
fb:17:e3:05:88:b1:35:f5:37:38:88:89:3a:4f:c5:68:d4:7b:
12:2e:8f:b2:03:5e:0b:81:97:c5:f5:60:f5:d1:5f:54:fd:c4:
d5:6b:63:a8:0c:43:f2:20:c1:2b:26:6a:87:0e:6d:27:5d:7c:
08:6f:a4:0a:10:b6:75:3e:65:2e:ca:ac:73:69:82:9f:c6:e1:
6e:4a:3c:fa:4f:09:cf:63:5b:2f:3d:bd:51:ec:fd:e8:e5:af:
21:93:9b:9a:a8:2a:b6:98:13:a3:a0:f5:1d:29:ff:d6:73:25:
9d:f3:6a:f6:7d:69:ef:ae:27:d1:cf:94:6c:bb:3c:11:9a:f3:
b4:80:17:b8:58:2f:8c:fe:d3:ad:e3:96:5b:56:fa:05:c3:6f:
11:80:4d:af:00:db:8c:66:87:24:7d:05:24:24:83:ad:4e:64:
9f:a7:92:99:18:59:14:33:0a:2f:c3:d9:4e:c9:d7:f7:a2:33:
0a:f9:4d:93:38:ac:dc:c2:1d:b3:7f:e4:28:d6:e6:1a:de:6f:
6e:72:67:d5:f3:4d:c3:bf:f0:4c:d0:8b:de:07:74:72:b1:56:
57:72:3b:05
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0MzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYxRTI3RjVGREU0NEI1
NzY1MURGOEUzQjlDMDYwQUY2NjM3OEQxNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzLOSP1zvR3UakEUHe3fp9OXIuc7GKZuS7EQmny84gMwiY0J6Z
18l3FKsHOdPB6Zsks2zClZV/jGnD1i4kp2qNiFpMhRwVL/+neSXv8j6cZbCwvigN
XBUYPwDfXfnBvjfDtjn4AcCWCTi10HqCjl8oWeLUe76/jjmbN1h8O4QK6y/A25rp
BEsJbdwX+4WK4OrfUmsC/kLpA5BjH1x2AwhC5VU8x/266SwiJ261UvN4QykCgAoD
1CUm2Y6XWn1bzmyvUIVmY6ZzRaE/GOJakZdHVclk1ahDZJmOj0PetyVAvCgok61G
bEfSHaIHIO+k1l97k5IV53gcsG4CrC5+VPeLAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU8eJ/X95EtXZR3447nAYK9mN40UwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzhlSl9YOTVFdFhaUjM0
NDduQVlLOW1ONDBVdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIt/GQwDQYJKoZIhvcNAQELBQADggEBAF/781T/XTgVIyQUj/jrE/L9e8C5NCtN
PZeAJ6PehBt8D7Oi0fsX4wWIsTX1NziIiTpPxWjUexIuj7IDXguBl8X1YPXRX1T9
xNVrY6gMQ/IgwSsmaocObSddfAhvpAoQtnU+ZS7KrHNpgp/G4W5KPPpPCc9jWy89
vVHs/ejlryGTm5qoKraYE6Og9R0p/9ZzJZ3zavZ9ae+uJ9HPlGy7PBGa87SAF7hY
L4z+063jlltW+gXDbxGATa8A24xmhyR9BSQkg61OZJ+nkpkYWRQzCi/D2U7J1/ei
Mwr5TZM4rNzCHbN/5CjW5hreb25yZ9XzTcO/8EzQi94HdHKxVldyOwU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:34 2025 by rpki-client