Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8ouQPG6-48J4x3THcHS_f3LtWzg.roa
File: 8ouQPG6-48J4x3THcHS_f3LtWzg.roa (raw, json)
Hash identifier: UGPmIVbJg2GpZlTH2psGjUcrQR4lpua5q1SJAPIC0Yc=
Subject key identifier: F2:8B:90:3C:6E:BE:E3:C2:78:C7:74:C7:70:74:BF:7F:72:ED:5B:38
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 151F
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8ouQPG6-48J4x3THcHS_f3LtWzg.roa
Signing time: Wed 11 Sep 2024 02:30:10 +0000
ROA not before: Wed 11 Sep 2024 02:30:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 45.252.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5407 (0x151f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:30:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F28B903C6EBEE3C278C774C77074BF7F72ED5B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:22:a6:3b:bb:c2:6e:6b:bb:4c:50:2a:2e:
07:88:77:be:b6:b8:34:77:de:04:48:7a:07:1d:c3:
7b:a5:0d:6c:45:16:4f:e8:fe:34:e1:96:0d:a9:55:
03:ff:18:2f:94:c5:a0:6d:53:dd:3a:87:88:db:e5:
19:b9:59:d8:d5:68:0e:1e:49:91:92:a7:c8:9f:10:
39:2e:e6:b3:73:e2:69:ab:7f:12:8a:e8:08:33:9c:
cc:35:fe:b1:ae:1e:2b:75:0f:cf:81:8f:3c:ef:ae:
b9:f6:5c:0c:8a:7d:c1:93:73:dc:c6:85:43:ad:bf:
8f:dd:f4:53:26:94:52:1e:13:21:56:cd:c7:72:08:
f0:8d:88:52:9a:4b:a8:4b:61:40:86:27:0d:94:59:
fd:97:71:4d:fc:3e:a3:9d:f3:e4:97:0e:d0:e0:27:
70:73:b7:e2:96:27:9e:f5:04:fe:09:09:fb:39:c7:
59:a9:d9:e8:42:36:aa:23:ae:58:a0:b5:a0:7a:00:
52:f0:37:69:c4:6e:5c:a2:8f:cd:4f:2f:e0:a3:f8:
71:00:d1:95:27:56:e9:6d:90:5a:19:48:8d:64:ae:
1b:e8:ab:b1:d0:57:33:46:18:ff:9b:e8:d7:e3:d3:
eb:b8:03:ce:5c:59:0d:c2:26:67:a8:91:ec:dd:60:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8B:90:3C:6E:BE:E3:C2:78:C7:74:C7:70:74:BF:7F:72:ED:5B:38
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8ouQPG6-48J4x3THcHS_f3LtWzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:b1:a5:03:8e:54:4b:6d:67:18:b4:44:0a:5a:d0:44:ae:ec:
01:5a:de:ef:97:6e:67:85:9b:d1:4e:4b:b7:9c:9b:87:69:3c:
23:4f:f5:12:9c:22:e1:31:5e:9e:22:2a:5c:09:ab:06:2f:68:
09:12:c5:d0:24:c8:66:d9:20:94:4e:bb:98:bb:fa:fa:1c:05:
5c:1c:3e:be:a9:b8:9b:69:28:41:55:27:02:d2:d5:98:b4:6a:
70:4d:d3:31:8a:47:aa:a7:c1:30:80:1e:07:13:7e:68:9e:96:
c9:ae:08:a3:7a:8c:6b:a5:0b:f2:c8:e1:2d:8b:c3:eb:54:7b:
3c:e6:0f:63:d7:cf:de:5a:fd:52:28:ad:ec:8c:46:56:83:8f:
c1:2a:a8:54:f1:ba:4e:76:0d:72:e9:7d:52:36:47:99:ee:65:
a2:69:e5:88:8a:da:3d:12:9b:23:56:18:a7:b1:16:4f:58:d2:
ad:bb:c6:2a:96:75:98:d9:99:1e:b7:19:0e:a0:14:c9:ed:b1:
e6:d2:95:20:4f:e5:b8:56:a8:90:d5:8d:92:5a:b8:a0:15:9a:
6d:c7:7c:e6:e8:74:13:29:68:2b:3b:3a:dc:45:c2:07:7c:dc:
63:35:d4:b2:10:eb:7b:c3:d0:18:f6:0a:18:36:03:1d:e9:cf:
23:1d:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:23:20 2025 by rpki-client