Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Yxz_fctiuV9iMb3Bhd-Gk45fHjo.roa
File: Yxz_fctiuV9iMb3Bhd-Gk45fHjo.roa (raw, json)
Hash identifier: G8U6WpOoXxyCIvR3Qov2kIsl7D1dAnMsD7qgdAWLkBU=
Subject key identifier: 63:1C:FF:7D:CB:62:B9:5F:62:31:BD:C1:85:DF:86:93:8E:5F:1E:3A
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1909
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Yxz_fctiuV9iMb3Bhd-Gk45fHjo.roa
Signing time: Fri 17 Jan 2025 01:25:59 +0000
ROA not before: Fri 17 Jan 2025 01:25:59 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24373
IP address blocks: 45.252.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6409 (0x1909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=631CFF7DCB62B95F6231BDC185DF86938E5F1E3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:71:0d:7f:56:43:61:d6:c2:5f:6a:1f:1f:76:
f7:83:dd:a0:ad:94:d8:da:02:fd:be:a9:08:26:eb:
12:94:92:d0:3f:eb:8e:0c:de:cf:10:40:d8:40:18:
0a:dc:1a:2e:7b:36:ed:3c:3a:09:5d:08:cf:f0:5c:
34:d9:9f:f7:94:d8:17:5e:0f:b7:86:3f:1b:39:39:
18:03:cb:9c:cd:1e:e1:35:30:51:c3:f3:64:68:05:
12:77:5a:a8:af:7a:66:0b:0a:12:ef:a3:9c:31:c6:
35:c6:5e:74:b0:f3:c8:3e:85:f4:20:f5:8a:c1:89:
0d:d9:69:2f:94:5b:60:82:5f:42:60:a9:75:e2:b4:
96:32:f5:c0:5a:3d:de:05:f7:45:2e:6a:50:1e:ae:
1a:ab:25:ce:94:03:bf:b7:20:5e:9f:26:86:13:c8:
7c:47:1c:bf:e1:29:2d:31:43:bd:a0:98:b1:47:7c:
3e:7f:54:88:a2:24:f3:ea:bd:ac:1f:d5:16:7a:17:
77:2e:56:5d:7f:98:c3:03:12:90:63:5c:3b:c6:35:
a5:a2:40:a1:7e:22:5b:6c:84:55:e5:a8:bb:59:db:
65:aa:6d:44:19:46:21:05:cd:9b:93:78:44:70:83:
69:7d:6b:69:49:19:65:2f:d4:ac:c4:ec:e1:fa:59:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1C:FF:7D:CB:62:B9:5F:62:31:BD:C1:85:DF:86:93:8E:5F:1E:3A
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Yxz_fctiuV9iMb3Bhd-Gk45fHjo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.144.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:d7:be:9c:e3:c4:75:7b:9a:d4:88:e7:fc:a3:cc:3c:b3:4f:
9c:74:e7:09:16:2e:98:63:70:6d:6d:62:7a:16:9f:91:e1:a5:
a2:d8:00:81:bd:15:6c:79:65:a2:48:83:ba:61:4d:64:d1:98:
84:33:08:fd:02:aa:d6:1d:c8:24:93:03:31:b9:25:db:88:61:
d7:bb:43:15:c6:5f:09:60:6f:12:b3:9c:90:20:96:a8:70:11:
86:ef:25:9f:93:3a:55:08:f1:0d:40:ca:91:70:ae:61:70:37:
1f:55:3d:c6:f0:4b:7e:31:10:f0:93:82:9f:60:26:ca:86:36:
b8:51:3a:3a:bb:27:c4:ef:b0:5c:b7:73:00:d2:8e:b6:99:d8:
7c:e2:24:5d:f0:d6:20:b9:c4:9f:50:0a:d8:d0:4e:2d:7f:f8:
ef:ee:85:9c:8f:54:bd:6b:ea:33:ae:4e:f6:9e:14:12:fe:59:
f5:b7:d6:94:5c:e4:50:b0:e4:74:54:1a:23:f1:07:8e:cb:d9:
48:7b:51:93:74:8d:7a:d4:a9:6f:30:c4:18:68:1b:5a:43:16:
a0:3d:10:53:dd:ba:2e:d6:d6:3a:94:2e:34:05:b3:e4:be:b4:
6c:d3:71:f7:27:c6:da:df:ab:a3:e1:56:51:c6:27:a6:5a:57:
94:da:c5:5e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1NTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYzMUNGRjdEQ0I2MkI5
NUY2MjMxQkRDMTg1REY4NjkzOEU1RjFFM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDscQ1/VkNh1sJfah8fdveD3aCtlNjaAv2+qQgm6xKUktA/644M
3s8QQNhAGArcGi57Nu08OgldCM/wXDTZn/eU2BdeD7eGPxs5ORgDy5zNHuE1MFHD
82RoBRJ3WqivemYLChLvo5wxxjXGXnSw88g+hfQg9YrBiQ3ZaS+UW2CCX0JgqXXi
tJYy9cBaPd4F90UualAerhqrJc6UA7+3IF6fJoYTyHxHHL/hKS0xQ72gmLFHfD5/
VIiiJPPqvawf1RZ6F3cuVl1/mMMDEpBjXDvGNaWiQKF+IltshFXlqLtZ22WqbUQZ
RiEFzZuTeERwg2l9a2lJGWUv1KzE7OH6WbRnAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUYxz/fctiuV9iMb3Bhd+Gk45fHjowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1l4el9mY3RpdVY5aU1i
M0JoZC1HazQ1Zkhqby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIt/JAwDQYJKoZIhvcNAQELBQADggEBAMHXvpzjxHV7mtSI5/yjzDyzT5x05wkW
LphjcG1tYnoWn5HhpaLYAIG9FWx5ZaJIg7phTWTRmIQzCP0CqtYdyCSTAzG5JduI
Yde7QxXGXwlgbxKznJAglqhwEYbvJZ+TOlUI8Q1AypFwrmFwNx9VPcbwS34xEPCT
gp9gJsqGNrhROjq7J8TvsFy3cwDSjraZ2HziJF3w1iC5xJ9QCtjQTi1/+O/uhZyP
VL1r6jOuTvaeFBL+WfW31pRc5FCw5HRUGiPxB47L2Uh7UZN0jXrUqW8wxBhoG1pD
FqA9EFPdui7W1jqULjQFs+S+tGzTcfcnxtrfq6PhVlHGJ6ZaV5TaxV4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:21 2025 by rpki-client