Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/UQ7hpj9SMSmkdKewU3L2WUV5mTU.roa
File: UQ7hpj9SMSmkdKewU3L2WUV5mTU.roa (raw, json)
Hash identifier: yqrLzdhAyPFsqCL981qcaiHl3hsbs+6viVu3bhzJ808=
Subject key identifier: 51:0E:E1:A6:3F:52:31:29:A4:74:A7:B0:53:72:F6:59:45:79:99:35
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 160F
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UQ7hpj9SMSmkdKewU3L2WUV5mTU.roa
Signing time: Sat 12 Oct 2024 02:02:02 +0000
ROA not before: Sat 12 Oct 2024 02:02:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 45.252.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5647 (0x160f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Oct 12 02:02:02 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=510EE1A63F523129A474A7B05372F65945799935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:8b:04:83:ae:0a:4e:7f:71:19:17:28:8c:
21:26:c0:af:da:c8:1b:fe:21:a5:56:ae:30:c2:34:
ae:70:e7:ba:87:b4:80:05:a4:03:4d:8b:42:81:6c:
c7:61:e2:c9:ea:ab:91:58:f6:c2:ab:ec:23:d9:18:
b6:8b:9b:6e:f9:4a:59:cb:58:f5:67:85:e8:fb:1d:
a6:88:fa:dd:6d:17:ec:2f:c5:d0:d2:11:e3:77:ca:
3a:03:95:fc:f2:da:4e:5a:f3:7f:6d:64:08:65:16:
a2:8d:04:06:4e:6d:1a:31:63:89:f1:7a:2b:09:c4:
7a:67:a1:b3:41:3e:dd:5d:7b:16:3a:0c:42:2c:e4:
7f:c9:8f:b6:30:77:8a:2e:cd:74:d3:05:15:6a:ac:
a2:cd:12:66:0e:c7:1d:44:73:3c:72:1f:ef:47:6e:
62:0a:e6:40:5e:c9:57:74:b5:41:e0:1e:af:18:f5:
5b:c3:78:21:86:8c:b7:1a:6f:ff:3a:6f:9f:bf:88:
bd:ea:29:aa:17:f0:02:67:01:56:80:05:3c:b6:a1:
6d:7d:d0:3a:26:33:18:44:6e:f5:07:14:c3:8b:b5:
cf:51:33:69:ed:f5:94:74:a0:11:9d:a4:27:fa:5d:
a3:93:50:f4:aa:34:45:e4:e0:01:ab:3f:b8:b0:7e:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0E:E1:A6:3F:52:31:29:A4:74:A7:B0:53:72:F6:59:45:79:99:35
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UQ7hpj9SMSmkdKewU3L2WUV5mTU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:78:ff:3d:e0:9d:38:db:74:29:66:2a:c2:47:21:cd:cf:4a:
a7:7b:02:8f:5c:91:f0:3a:d9:af:72:97:5d:4c:c7:0f:c9:2b:
40:c2:79:8a:24:79:78:ee:63:2f:9c:ec:a1:0c:8f:07:4a:21:
7e:ed:56:d7:c9:05:62:b6:8f:bd:79:2b:81:dc:54:b5:a5:aa:
65:12:70:72:21:75:75:27:92:06:90:6d:57:68:67:5f:33:59:
e2:b2:61:5c:84:e8:5d:40:bf:b1:e6:81:39:c7:17:8f:01:de:
17:13:8b:b9:6c:72:51:5b:ad:33:9e:15:14:c1:cb:e7:3c:bb:
da:3f:e6:f2:0f:03:a2:1e:47:70:09:7d:b9:52:23:76:3c:a5:
ad:6a:09:c9:a3:1d:bf:78:f9:39:68:dc:2b:c2:07:68:ed:96:
79:02:f4:fd:a0:66:78:ba:f2:d3:cf:fa:4b:0b:f4:c6:3e:72:
94:e0:1d:3c:ac:1b:a3:7c:c4:88:a2:ab:8f:d0:b3:c5:bd:78:
e3:9f:f3:2e:10:f2:28:f8:e0:3a:70:a1:49:73:54:6f:aa:0d:
bf:14:f4:d3:f1:d1:85:62:68:cc:9f:63:39:82:14:85:21:93:
26:47:89:4c:22:25:06:07:8d:cf:3b:ae:9a:b9:3d:d3:d4:6e:
87:44:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:15 2025 by rpki-client