Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/As6l99ptn0Yq3AIQ1cdKwaPzVkA.roa
File: As6l99ptn0Yq3AIQ1cdKwaPzVkA.roa (raw, json)
Hash identifier: YcryI+M+Yr8nj9pTolk0GXI9Hj2MiVWWTj1KBANjXL4=
Subject key identifier: 02:CE:A5:F7:DA:6D:9F:46:2A:DC:02:10:D5:C7:4A:C1:A3:F3:56:40
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18FD
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/As6l99ptn0Yq3AIQ1cdKwaPzVkA.roa
Signing time: Fri 17 Jan 2025 01:25:54 +0000
ROA not before: Fri 17 Jan 2025 01:25:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 45.252.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6397 (0x18fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=02CEA5F7DA6D9F462ADC0210D5C74AC1A3F35640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:ba:0b:c1:af:ee:a1:1a:ac:39:35:2e:34:
83:ee:2d:aa:9e:ac:ec:7d:30:28:28:a3:b4:ee:68:
9f:2c:c0:35:4f:c2:e9:eb:9c:46:55:42:cf:77:34:
ad:7c:c5:e3:6d:d0:0d:23:04:36:43:22:5b:46:e0:
52:46:16:46:46:b3:eb:31:d3:92:30:04:01:3f:ec:
94:f8:8d:3b:af:f7:4d:20:2e:7a:1c:c2:97:5c:fc:
c2:a8:f3:5f:8b:82:21:98:ab:10:d6:bd:1f:9d:20:
0e:6f:a2:3e:f5:2d:f7:05:a8:c5:8f:80:04:59:17:
c3:dc:aa:f3:27:4e:db:16:2f:5f:e5:24:e0:fb:80:
d9:d9:9a:4d:16:38:cd:0b:eb:16:b1:4a:74:67:5d:
9e:c7:20:a5:84:ce:5b:2d:2d:29:42:cd:3d:69:b7:
c4:bf:17:8e:46:1f:5b:b5:36:55:cc:b0:a9:01:a4:
d0:6a:a6:73:ae:1c:90:5c:6d:ef:00:77:fe:8f:71:
9e:d3:b3:86:08:d4:37:59:0a:16:e9:c5:99:3e:02:
30:85:ed:ef:dd:dd:71:4e:24:20:1d:5c:7e:42:05:
08:2d:45:b3:9b:b0:64:56:2f:de:6c:b5:5f:ec:07:
46:71:f6:9c:db:c7:69:d0:e4:be:f7:34:57:42:7c:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:A5:F7:DA:6D:9F:46:2A:DC:02:10:D5:C7:4A:C1:A3:F3:56:40
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/As6l99ptn0Yq3AIQ1cdKwaPzVkA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.44.0/22
Signature Algorithm: sha256WithRSAEncryption
26:98:a1:cb:91:6b:8b:bb:3b:85:ff:ff:84:d9:ab:aa:d6:0c:
60:4a:95:ba:85:23:70:c9:ec:30:0a:19:52:91:df:aa:0c:00:
d8:e9:70:a9:69:64:58:92:dd:73:c7:f1:c8:30:6d:91:1e:ae:
03:3c:3b:3c:f2:b1:58:e7:f0:8d:54:c9:17:17:82:4e:e4:ba:
dd:63:b9:6b:79:d5:17:ef:3a:24:b2:7d:52:19:b0:c5:1c:e4:
cb:a4:62:3a:b6:19:d2:2a:64:01:ee:dc:f9:88:ef:62:01:de:
69:c1:31:16:13:1e:8f:2e:46:60:d5:ae:8f:15:65:f0:7c:54:
fc:c6:8b:51:7a:08:e1:c4:28:26:1a:58:05:d3:71:ca:83:9f:
37:0c:bb:c8:f3:85:25:32:a7:e5:b8:85:ae:52:5c:2b:4a:16:
f1:ad:3a:40:17:c8:5a:9d:3f:60:80:77:27:54:7a:28:9c:19:
61:70:e2:ca:b2:f5:d3:6a:47:81:0f:a6:a1:1a:03:d6:76:38:
34:78:de:13:33:4f:eb:e0:7a:13:c2:36:21:63:e2:5b:fa:a7:
d4:1f:46:94:54:61:1f:d8:5a:41:b0:16:de:33:62:16:e5:7e:
9b:08:42:ef:83:1c:a5:53:d5:b0:c3:80:60:f7:e6:87:24:af:
aa:74:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:19 2025 by rpki-client