Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/hU0Bff5By85I2UoSvaRXNSSgus0.roa
File: hU0Bff5By85I2UoSvaRXNSSgus0.roa (raw, json)
Hash identifier: OWrLViyyKCPdTKlBoEiZornb2jyZSkbPySEmclMsfUQ=
Subject key identifier: 85:4D:01:7D:FE:41:CB:CE:48:D9:4A:12:BD:A4:57:35:24:A0:BA:CD
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 16D6
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/hU0Bff5By85I2UoSvaRXNSSgus0.roa
Signing time: Wed 20 Nov 2024 02:11:28 +0000
ROA not before: Wed 20 Nov 2024 02:11:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 45.252.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5846 (0x16d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Nov 20 02:11:28 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=854D017DFE41CBCE48D94A12BDA4573524A0BACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:52:b8:d3:86:76:7a:69:13:42:ec:90:ce:
3a:21:40:94:9d:3e:ff:b6:49:f9:2b:77:4f:12:fa:
24:2a:ce:9e:9b:2c:fa:af:4a:0e:f9:5b:be:3b:73:
b8:84:4d:81:a1:b5:72:c0:f4:98:a4:43:dc:d5:06:
f8:8a:a0:18:2b:97:d8:b1:b7:4a:4a:72:6f:b9:f6:
44:dc:c4:3b:3d:a5:40:f1:c8:3e:98:d1:69:c4:d0:
6e:1a:c5:db:e5:a3:d1:cd:fd:e5:a0:d9:4c:4d:d9:
c3:22:10:40:72:67:9c:4a:d1:af:7b:02:25:b8:e5:
15:fa:24:3b:d2:cd:5b:71:7a:c7:de:84:1c:6d:d0:
bb:61:54:23:30:f4:eb:2f:e9:a2:87:84:5d:6e:70:
f8:80:46:c0:a3:52:8c:34:36:d8:be:cf:b8:6c:42:
1b:c4:71:b4:e6:3d:88:3a:4e:b9:52:0b:14:e6:b9:
7d:c5:b4:1b:fb:ca:5a:4e:20:83:3a:ed:65:32:02:
95:15:30:17:2c:2f:7a:31:5b:e0:4d:fc:ff:c0:49:
5b:08:00:99:b6:04:2e:e6:22:c7:0a:12:52:8a:7d:
4d:12:70:38:7a:a4:ef:ef:7b:0d:12:9d:24:99:e0:
ec:91:33:51:67:6f:4b:cf:3c:d7:c8:1c:20:eb:27:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:01:7D:FE:41:CB:CE:48:D9:4A:12:BD:A4:57:35:24:A0:BA:CD
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/hU0Bff5By85I2UoSvaRXNSSgus0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.84.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:f6:9e:81:8f:b2:99:65:09:51:92:d2:65:b2:6c:ea:bd:5e:
bd:5c:90:76:3a:be:44:69:71:ff:14:de:b3:e4:7c:68:63:93:
8e:8c:13:1f:63:98:c9:07:35:b7:b9:ea:78:41:e6:d5:5a:f2:
7c:dd:50:20:de:26:ab:50:b7:25:d8:f1:1c:d0:7c:3a:22:af:
17:56:3a:0f:f6:01:89:cd:17:87:2f:25:33:57:56:7c:09:ee:
98:4c:a5:dc:a8:96:a2:0a:d7:ca:d6:35:0a:52:c1:a3:5f:0a:
63:ce:29:81:ce:ed:f8:a5:f4:2b:a8:c4:bb:4a:f7:ac:bb:eb:
60:9d:9f:13:60:85:05:47:78:61:21:b6:8e:4b:c0:a1:4e:c4:
81:09:20:be:b5:2e:da:0a:bb:13:8f:29:fd:7d:01:b7:3b:59:
93:7e:8a:26:45:b1:0c:da:e4:34:68:5e:f0:d9:66:67:30:d5:
a7:c2:73:ac:e8:f8:9f:e5:10:fc:9e:59:11:11:f3:66:ce:e1:
52:35:8d:40:f6:4b:f5:b8:8d:a5:40:ca:dc:14:c3:68:86:d1:
2d:fb:15:42:46:83:f7:c9:0c:8a:ea:db:5a:5f:d0:88:bb:8b:
00:b1:d6:49:7c:4c:bb:2a:a6:b2:7c:bc:d1:95:9c:17:43:e9:
db:37:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:10 2025 by rpki-client