Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ItoUPdYPi9A9xTaog3UP3IWmjC8.roa
File: ItoUPdYPi9A9xTaog3UP3IWmjC8.roa (raw, json)
Hash identifier: o1gw1qFOr5ea54P/l41tHKyYtWiZlFgP6le+Id7mjjE=
Subject key identifier: 22:DA:14:3D:D6:0F:8B:D0:3D:C5:36:A8:83:75:0F:DC:85:A6:8C:2F
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1800
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ItoUPdYPi9A9xTaog3UP3IWmjC8.roa
Signing time: Fri 17 Jan 2025 01:24:25 +0000
ROA not before: Fri 17 Jan 2025 01:24:25 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 45.252.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6144 (0x1800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:25 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=22DA143DD60F8BD03DC536A883750FDC85A68C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:5e:f4:1a:fc:a3:46:04:1d:2b:a5:1e:e4:
9d:c4:93:2b:3e:89:4f:0e:d7:65:4e:fb:17:d2:56:
1c:c2:dc:e8:62:ad:a8:f9:2b:77:12:7d:9b:85:f9:
60:c9:ac:25:ab:64:b3:8f:64:41:30:9e:6a:5b:c8:
c9:c3:3b:23:3a:1e:dd:2b:ef:ee:38:39:2f:3d:40:
11:7b:14:be:a6:12:73:81:91:1f:8a:bf:46:a4:3d:
3b:17:d4:0a:3a:ff:b9:38:f3:73:22:1e:67:eb:48:
8d:e3:a5:de:aa:13:18:80:6e:20:a2:dc:c8:7d:1e:
14:ec:81:46:7e:9b:c9:86:e2:bf:72:59:5d:30:25:
f1:b1:b2:c0:86:94:1b:d6:45:fa:d6:9e:52:33:e2:
13:b4:81:7e:e9:01:35:26:11:43:ed:57:a6:73:3c:
85:e4:0e:49:0a:07:28:c5:f6:7b:fb:25:98:22:0a:
3d:31:4a:5c:66:dc:a1:04:fc:db:fa:32:50:64:b5:
32:d0:ac:22:ad:13:27:16:ce:4f:6a:b5:a7:a7:6e:
ad:27:2e:fd:86:41:5c:50:4f:5b:72:f0:9d:96:43:
8c:07:0d:2f:cc:06:2e:58:e3:36:9f:92:71:c9:eb:
65:32:39:2b:ce:3f:02:d1:ed:dd:67:1f:5b:f2:f6:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:14:3D:D6:0F:8B:D0:3D:C5:36:A8:83:75:0F:DC:85:A6:8C:2F
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ItoUPdYPi9A9xTaog3UP3IWmjC8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:de:1c:0c:a9:19:bd:94:9e:84:91:47:0d:19:82:9a:81:ab:
24:0c:72:44:78:04:ee:71:88:f6:7c:9a:47:e0:91:a7:b6:49:
ed:16:b6:01:31:ef:3c:e7:82:88:85:6f:25:c2:2e:c1:52:a6:
4f:94:07:66:54:8f:03:ec:e0:93:ad:66:ee:73:d2:fb:0f:dd:
5c:6d:ac:5c:c0:00:ec:00:1e:cf:2a:6d:75:38:11:0d:32:dc:
c8:0d:b5:be:f8:62:c0:91:95:02:48:54:73:d8:4a:98:bf:6f:
e0:4d:13:9c:e8:f8:60:77:22:6c:d3:1e:a4:04:13:85:26:cf:
0b:01:04:79:ba:f7:b8:2c:b1:2c:5c:43:2a:2d:47:e7:8d:e0:
8f:ee:4a:db:0e:87:09:1c:3f:a9:7a:43:ad:45:d9:17:47:8e:
37:c1:d1:9f:ef:ad:34:6a:7d:36:15:8d:bb:20:04:6b:c7:3a:
c7:67:39:e0:9d:96:c9:be:70:f7:b6:17:8b:bf:07:19:71:6a:
83:af:b3:7b:4c:f4:a2:c1:50:4b:d5:39:47:1a:4b:10:eb:16:
74:34:0b:c7:a6:e6:57:7c:32:6c:4d:9c:f3:28:1e:72:21:70:
37:1c:99:22:33:55:a6:b6:05:65:7c:98:49:ad:29:72:32:bd:
10:2c:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:19 2025 by rpki-client