Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/efpsjY28RmdIcPN1a4-PNWbXgdQ.roa
File: efpsjY28RmdIcPN1a4-PNWbXgdQ.roa (raw, json)
Hash identifier: jkzbSxCKr93kIoMHSV1PXjnUOoxi9p6eTaDp436m6xg=
Subject key identifier: 79:FA:6C:8D:8D:BC:46:67:48:70:F3:75:6B:8F:8F:35:66:D7:81:D4
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1807
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/efpsjY28RmdIcPN1a4-PNWbXgdQ.roa
Signing time: Fri 17 Jan 2025 01:24:28 +0000
ROA not before: Fri 17 Jan 2025 01:24:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24373
IP address blocks: 45.252.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6151 (0x1807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=79FA6C8D8DBC46674870F3756B8F8F3566D781D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:bc:37:06:69:35:f7:87:e3:52:35:02:78:
00:5a:53:93:65:e3:10:54:82:ff:43:38:fb:2d:b2:
a1:3c:5d:c5:99:29:fe:32:d6:c1:5f:a5:32:59:b2:
a8:c9:30:03:bd:a9:7c:6b:61:36:5e:c6:20:b4:93:
a0:03:3b:48:75:5b:74:a9:cd:91:7b:c1:c4:c1:fd:
00:5b:79:e2:39:87:be:5d:03:95:d2:5e:21:f0:b9:
0d:17:4d:4d:19:92:bf:4a:5a:31:c4:1a:89:a0:d2:
6a:55:e0:d0:b0:b0:ec:09:87:8e:5b:ce:db:c2:55:
49:d5:db:a1:c2:12:af:d2:1e:ee:92:a8:3c:b4:8e:
0a:9c:d4:22:dc:6c:16:08:ff:53:09:b0:31:6b:ce:
ea:46:a3:da:c6:45:5b:f4:bf:43:09:04:de:d6:b5:
75:d7:a1:2d:ac:bb:ac:91:9c:76:c0:e4:a1:92:9c:
45:09:1a:4e:5d:40:46:2c:ff:bf:c6:7a:c9:90:68:
73:dc:b2:47:6c:5b:27:6f:45:5b:b7:fb:fa:47:a1:
0b:4a:a9:27:82:22:d4:36:5a:99:ca:de:73:c4:db:
bd:f9:e6:08:87:97:63:a2:f1:f6:91:fc:fe:eb:59:
40:b9:98:2b:69:ae:7c:8f:94:51:67:5e:f4:92:09:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FA:6C:8D:8D:BC:46:67:48:70:F3:75:6B:8F:8F:35:66:D7:81:D4
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/efpsjY28RmdIcPN1a4-PNWbXgdQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.48.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:0f:79:80:f6:f3:e1:0f:36:51:f0:58:b4:a7:7f:51:bd:78:
43:89:4a:f1:11:dd:f6:b6:cd:dd:53:da:68:3e:7e:3f:27:2d:
5e:de:e5:5c:b8:5d:f8:76:ca:c2:0e:95:54:ed:27:3f:d3:21:
f4:7c:bf:da:2b:86:bb:e6:c1:7e:c6:fa:f0:7f:4c:f0:35:f8:
6f:5d:a3:6e:de:a0:b5:8a:e4:41:ae:61:ca:78:62:ef:24:e5:
66:fc:7d:8f:8b:75:40:06:0d:ca:aa:99:48:aa:8c:a3:ab:25:
74:2d:74:72:0f:c8:a1:a3:a3:cc:ca:f7:3a:4f:21:ab:ff:92:
64:2e:4d:be:7a:3f:72:a6:8e:63:6c:7f:38:6b:ae:91:e8:5b:
01:76:03:df:e7:59:12:e2:a9:82:b0:2b:de:d9:7a:a1:51:53:
f1:4c:c7:2d:8d:ea:41:6d:bd:77:e0:80:c5:04:c6:cb:47:17:
68:0b:20:8d:b8:17:0f:f4:3d:4c:a8:a6:ea:e1:d4:f3:b7:d0:
f8:e9:8f:c9:f9:82:c7:36:9b:d0:bd:e2:9b:c2:2a:25:3c:ae:
d4:25:c8:2a:54:48:30:b6:f8:77:6b:19:9e:65:31:1e:87:df:
9f:ce:cd:b4:8b:b9:24:cb:0f:14:0f:28:ae:b0:7f:62:b9:16:
62:eb:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:33 2025 by rpki-client