Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/EtvM7C5WOxvmkDlwtG7Fa5ss8OA.roa
File: EtvM7C5WOxvmkDlwtG7Fa5ss8OA.roa (raw, json)
Hash identifier: EaFhRtV4BnHwsAAGBRzJI+c2XQ4NkZ1cVUnDAdOElvI=
Subject key identifier: 12:DB:CC:EC:2E:56:3B:1B:E6:90:39:70:B4:6E:C5:6B:9B:2C:F0:E0
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18E8
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EtvM7C5WOxvmkDlwtG7Fa5ss8OA.roa
Signing time: Fri 17 Jan 2025 01:25:46 +0000
ROA not before: Fri 17 Jan 2025 01:25:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24373
IP address blocks: 45.252.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6376 (0x18e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=12DBCCEC2E563B1BE6903970B46EC56B9B2CF0E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:4c:b3:ea:d6:ee:89:a4:64:c3:0d:af:44:
86:20:b9:59:ff:07:be:f6:f1:a2:4d:07:52:f7:ef:
a1:8b:f7:ab:8b:01:10:40:1e:d6:d0:e5:76:9f:63:
22:b0:a8:ce:31:5b:cf:f5:0c:35:bf:d8:50:6f:a4:
eb:8c:a9:db:c0:e6:38:c2:51:94:99:54:2e:50:f2:
b0:f9:9c:57:bf:26:19:38:60:d6:e3:35:63:ad:16:
08:56:ed:6c:1f:0a:db:08:61:65:e0:92:af:ca:4b:
1b:5f:02:8f:89:58:14:8e:b7:f6:3d:f5:4e:1d:ae:
b6:93:7f:28:1c:86:90:c6:1c:31:39:db:eb:99:c1:
c2:76:f3:c0:0b:bc:73:8e:56:2a:4d:e2:c6:4c:ed:
c6:cd:25:1a:40:2d:e4:aa:af:8f:7f:dc:68:0b:11:
3f:31:1a:aa:28:7c:dc:41:5a:37:0b:8d:f2:69:17:
85:0f:e6:f5:fd:41:3c:63:2f:a9:50:7e:7e:57:56:
90:0b:a5:65:5b:c1:18:74:8b:cb:69:40:a2:64:ec:
94:69:aa:ec:bd:05:bc:17:9e:97:36:99:b2:ec:2b:
7a:db:f8:30:02:20:61:6e:6a:e9:31:98:a6:43:66:
be:93:53:3b:cf:3a:7c:65:73:a5:70:88:69:0d:e0:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DB:CC:EC:2E:56:3B:1B:E6:90:39:70:B4:6E:C5:6B:9B:2C:F0:E0
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EtvM7C5WOxvmkDlwtG7Fa5ss8OA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.40.0/22
Signature Algorithm: sha256WithRSAEncryption
87:5c:2e:25:3d:26:e1:d1:ff:d9:0c:19:7d:00:eb:64:7d:39:
2e:34:8d:9d:c6:cd:36:71:68:77:89:c8:1c:ba:55:00:4b:03:
a4:d0:0c:22:11:a4:46:7f:d7:c5:ab:f8:08:2b:b5:41:b8:c9:
0f:ef:93:2d:3d:5f:7f:d0:fc:4e:22:d2:2e:74:8d:d9:57:9b:
ef:8c:04:c5:83:af:de:10:74:98:ea:d9:f6:38:cd:15:78:22:
1e:dc:2a:aa:8e:15:e7:4b:06:bb:b7:43:a5:0e:b9:d2:22:e3:
9a:f2:3f:66:87:7f:b3:db:16:fd:89:be:d8:9b:ce:8b:33:3d:
32:7d:b5:c5:f4:de:4b:a4:5e:74:c8:fc:25:fe:b6:2d:3d:81:
98:6b:5c:e8:4c:4a:9a:aa:c2:e1:60:4d:4b:20:23:27:36:2f:
02:2b:42:34:12:64:d1:22:f6:e5:5f:dd:9b:9c:40:4b:b1:96:
4b:de:d8:0d:80:9c:fb:01:4c:b5:85:d8:34:42:17:2d:d1:e5:
31:bd:a5:9a:ff:1b:10:1d:a9:ed:07:0a:4a:66:ab:dc:e9:a1:
33:0b:ed:4d:41:00:18:74:3f:57:3d:fe:84:cc:ab:32:c2:46:
47:f7:29:10:97:c1:8f:12:2d:4a:f0:31:11:9e:a3:b1:f3:8c:
38:e2:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:10 2025 by rpki-client