Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/IsDuA-fKmb_1sAhd8HvVcMBeJU0.roa
File: IsDuA-fKmb_1sAhd8HvVcMBeJU0.roa (raw, json)
Hash identifier: r80i5u8UsJu9zwxiOq89cvZQUwZGQZXbX1gvGgg3qxs=
Subject key identifier: 22:C0:EE:03:E7:CA:99:BF:F5:B0:08:5D:F0:7B:D5:70:C0:5E:25:4D
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1838
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/IsDuA-fKmb_1sAhd8HvVcMBeJU0.roa
Signing time: Fri 17 Jan 2025 01:24:45 +0000
ROA not before: Fri 17 Jan 2025 01:24:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 45.252.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6200 (0x1838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=22C0EE03E7CA99BFF5B0085DF07BD570C05E254D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:9d:2f:21:b0:cd:43:c7:b2:d4:49:de:a6:
1f:fd:91:fb:d7:f4:f7:aa:40:c6:fa:0d:d9:48:1a:
08:2b:0a:92:ac:87:25:9d:a3:05:87:40:da:19:dd:
fa:53:70:d9:f8:c2:ce:bc:8b:dd:04:16:c9:1f:1b:
4f:f8:31:c1:25:d3:97:99:b0:d6:ca:e9:21:96:53:
20:cf:7d:2f:e3:01:5f:0d:55:13:24:f0:9c:fc:24:
e6:9e:72:1d:39:a0:84:13:eb:72:0c:79:d8:1e:08:
fd:34:c0:83:fb:57:be:6b:ab:bd:18:b6:01:72:0d:
67:62:5a:69:2b:4c:13:1c:89:6a:08:12:ab:ea:0c:
04:5b:40:d1:59:c1:81:ce:5a:10:36:ff:20:fe:b1:
2d:6c:e5:f4:39:e4:93:05:d9:c9:8e:13:e1:30:07:
5d:88:c4:4e:8b:8b:db:9b:f1:74:d6:98:da:d4:4b:
88:45:f9:bb:7b:3d:3e:4b:05:ea:b2:f9:1f:37:87:
63:c2:b2:8c:c6:3b:25:58:f4:ad:5a:9c:88:ec:62:
59:87:cc:a5:e1:ba:fc:cd:31:15:e4:c7:0f:72:75:
df:66:4b:e0:23:4d:47:01:22:e0:dd:d0:f4:09:c5:
ae:8b:64:6c:84:da:fb:14:97:dd:ab:bb:c2:77:c4:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C0:EE:03:E7:CA:99:BF:F5:B0:08:5D:F0:7B:D5:70:C0:5E:25:4D
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/IsDuA-fKmb_1sAhd8HvVcMBeJU0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.24.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:59:af:f6:d9:9e:7b:75:f5:7e:5e:6d:01:f8:86:7e:74:e4:
36:75:d5:1f:14:8d:ee:d1:c8:19:ea:0e:36:01:16:3f:ad:96:
3f:65:ee:69:af:f4:8a:90:d2:09:47:b9:33:e1:1d:66:dd:37:
d9:21:b5:25:6d:26:a9:76:e2:d1:31:08:55:7a:ec:cc:e6:dd:
13:e0:cb:aa:84:7a:b8:c6:73:e3:2e:e2:3f:ec:a1:e3:9a:29:
aa:ab:61:26:df:12:e7:f2:50:2e:dc:da:01:fe:2a:85:4b:d1:
db:87:ef:fd:4e:7c:5c:1a:90:ea:4b:b4:c6:9e:f4:55:49:32:
6e:98:fa:c7:93:79:99:84:07:db:e8:2b:f0:f2:b9:cb:6c:5d:
1c:53:de:76:31:bf:37:af:da:c4:b7:c6:0f:c9:16:56:be:1a:
d7:5b:69:9a:48:1b:4c:43:83:8a:bb:cb:e2:18:15:f0:0a:27:
80:c7:8d:03:1c:66:51:e9:60:28:e4:56:3b:39:34:61:c3:4f:
dd:ad:64:e5:af:b5:97:aa:78:ac:cd:a3:f9:f6:36:85:c7:fe:
27:41:55:ac:1d:76:7a:fa:67:51:89:18:f7:c7:97:ed:5c:88:
5b:26:be:a4:d5:6d:76:d4:77:96:e7:1e:41:50:cc:77:cb:b9:
bd:e2:27:21
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIyQzBFRTAzRTdDQTk5
QkZGNUIwMDg1REYwN0JENTcwQzA1RTI1NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP150vIbDNQ8ey1Eneph/9kfvX9PeqQMb6DdlIGggrCpKshyWd
owWHQNoZ3fpTcNn4ws68i90EFskfG0/4McEl05eZsNbK6SGWUyDPfS/jAV8NVRMk
8Jz8JOaech05oIQT63IMedgeCP00wIP7V75rq70YtgFyDWdiWmkrTBMciWoIEqvq
DARbQNFZwYHOWhA2/yD+sS1s5fQ55JMF2cmOE+EwB12IxE6Li9ub8XTWmNrUS4hF
+bt7PT5LBeqy+R83h2PCsozGOyVY9K1anIjsYlmHzKXhuvzNMRXkxw9ydd9mS+Aj
TUcBIuDd0PQJxa6LZGyE2vsUl92ru8J3xAAfAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUIsDuA+fKmb/1sAhd8HvVcMBeJU0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0lzRHVBLWZLbWJfMXNB
aGQ4SHZWY01CZUpVMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIt/BgwDQYJKoZIhvcNAQELBQADggEBANxZr/bZnnt19X5ebQH4hn505DZ11R8U
je7RyBnqDjYBFj+tlj9l7mmv9IqQ0glHuTPhHWbdN9khtSVtJql24tExCFV67Mzm
3RPgy6qEerjGc+Mu4j/soeOaKaqrYSbfEufyUC7c2gH+KoVL0duH7/1OfFwakOpL
tMae9FVJMm6Y+seTeZmEB9voK/DyuctsXRxT3nYxvzev2sS3xg/JFla+GtdbaZpI
G0xDg4q7y+IYFfAKJ4DHjQMcZlHpYCjkVjs5NGHDT92tZOWvtZeqeKzNo/n2NoXH
/idBVawddnr6Z1GJGPfHl+1ciFsmvqTVbXbUd5bnHkFQzHfLub3iJyE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:42:30 2025 by rpki-client