Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/VcgRDNiW1LQ6C7hMPbDCZmhvFzc.roa
File: VcgRDNiW1LQ6C7hMPbDCZmhvFzc.roa (raw, json)
Hash identifier: acrxxP2Y/ShFIKag67E/RkiAcyvYl+V1TGo4/Rb2BfE=
Subject key identifier: 55:C8:11:0C:D8:96:D4:B4:3A:0B:B8:4C:3D:B0:C2:66:68:6F:17:37
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1728
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/VcgRDNiW1LQ6C7hMPbDCZmhvFzc.roa
Signing time: Fri 06 Dec 2024 04:48:52 +0000
ROA not before: Fri 06 Dec 2024 04:48:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 45.252.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5928 (0x1728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Dec 6 04:48:52 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=55C8110CD896D4B43A0BB84C3DB0C266686F1737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:c5:ec:01:0a:4b:dd:1d:8b:ce:6b:67:82:
15:05:af:c7:f8:d1:a7:0b:eb:4f:4b:9f:99:20:aa:
3a:3e:e1:3a:9a:3e:ab:49:e3:14:79:22:54:23:cd:
29:a8:ba:ce:5b:e5:4c:79:b6:35:88:66:0c:01:fb:
30:72:39:ef:7d:2e:a4:99:f7:60:6f:0e:13:0a:01:
bd:59:c7:57:e3:22:c7:de:f3:36:a6:86:df:2e:04:
6b:ea:83:3d:9e:83:1e:f8:e4:f3:f9:8e:a2:7e:9e:
c4:3b:92:09:63:41:b5:37:c3:34:3c:9d:8d:ec:fd:
39:d8:24:c3:e7:fc:eb:65:e6:46:02:db:f8:55:8a:
dc:90:c3:92:a0:44:e4:8c:5a:4c:e6:91:f8:36:ca:
c5:10:14:21:ad:67:47:d0:c2:66:03:82:29:86:62:
43:0e:bd:8e:59:a8:9b:62:39:f3:66:07:85:09:eb:
c3:68:dc:76:6e:c9:e8:2e:42:45:09:e3:6c:00:e0:
14:b2:a8:5c:70:75:c6:ed:43:23:bb:bf:7e:c3:81:
51:16:1f:59:91:7c:78:f9:1b:61:f8:e4:cc:ea:e9:
f5:01:b2:73:7b:95:e5:32:51:1a:8e:1f:db:a1:d3:
9a:91:c9:07:7b:b8:38:0d:46:7e:c8:43:93:a3:90:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:11:0C:D8:96:D4:B4:3A:0B:B8:4C:3D:B0:C2:66:68:6F:17:37
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/VcgRDNiW1LQ6C7hMPbDCZmhvFzc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.84.0/22
Signature Algorithm: sha256WithRSAEncryption
49:29:59:ce:6b:8d:bf:a7:27:51:4f:00:3c:49:ad:74:f4:76:
69:20:48:9e:0b:ca:f8:a5:cb:5b:31:4b:20:37:ec:25:04:60:
42:3a:0b:0c:4f:95:87:a1:65:ed:d3:b6:bd:81:e0:22:cf:21:
ec:78:3b:69:f8:1f:2e:92:46:9a:f6:d6:66:d1:19:15:61:18:
ae:4f:4e:e4:38:ef:cd:ac:19:9c:e8:d4:20:03:52:ed:09:23:
1e:a7:bb:cd:14:fb:94:85:5c:0f:88:9f:35:f0:4f:e3:24:39:
e0:ac:06:f7:ae:a7:3b:a9:6e:15:43:c1:ab:2e:75:c7:1b:f6:
25:a2:ea:e8:92:a2:a6:2b:46:3d:6a:c8:4d:aa:30:86:e2:c7:
d0:a3:5c:5a:13:8a:bf:9a:5e:e3:c7:dd:55:1c:cc:db:ce:a0:
6f:d3:d3:38:26:93:62:07:7f:1c:4c:23:cc:d3:b7:c9:2b:72:
9e:8c:7a:62:0a:d7:0b:3f:1d:78:a0:c9:9c:2f:4d:00:ab:a1:
94:e8:30:f6:f7:fb:7d:5d:4f:82:71:aa:cd:93:6d:b3:99:f9:
66:62:79:c0:3a:34:97:6e:00:4c:34:99:e3:c2:ed:1e:c0:ac:
82:d6:55:a2:6a:89:f3:74:e4:a1:de:b9:2e:a9:71:0c:c7:96:
3a:7e:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:08 2025 by rpki-client