Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/mNsFkKjHzQfYOkgTMda9CcZ-MT4.roa
File: mNsFkKjHzQfYOkgTMda9CcZ-MT4.roa (raw, json)
Hash identifier: M/gdvDHnDrhqievFFLGf7QWDvV7SvnpgKtGqTQamE3A=
Subject key identifier: 98:DB:05:90:A8:C7:CD:07:D8:3A:48:13:31:D6:BD:09:C6:7E:31:3E
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18FE
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mNsFkKjHzQfYOkgTMda9CcZ-MT4.roa
Signing time: Fri 17 Jan 2025 01:25:54 +0000
ROA not before: Fri 17 Jan 2025 01:25:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24373
IP address blocks: 45.252.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6398 (0x18fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=98DB0590A8C7CD07D83A481331D6BD09C67E313E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:58:6a:09:3b:81:95:41:ca:b7:db:69:2c:
68:b5:e9:de:de:27:31:73:03:16:ff:49:ba:6b:72:
58:0b:ae:95:70:e3:8f:90:50:45:85:c9:4c:ae:8e:
fb:d8:4e:47:8b:28:a0:ed:21:f0:b8:42:49:1f:1a:
b7:ea:bd:cb:51:1b:c2:a3:d7:27:f8:99:e9:3d:85:
c1:f7:b7:2d:65:e8:6b:66:80:53:21:5b:0b:cd:cb:
3c:73:02:d3:58:e6:f7:a2:20:75:0f:0a:a7:cc:39:
eb:d8:8a:20:9e:75:e6:8e:fb:70:e1:60:01:29:45:
30:50:9e:b8:0f:63:f1:d8:79:9b:21:f9:b3:93:6b:
34:30:3f:1e:8a:b7:3b:78:40:34:77:6f:f6:91:e6:
bb:d8:6b:fe:89:f8:0e:90:de:04:ea:d0:32:61:13:
db:ac:2a:d2:a1:ca:a2:e9:6a:fb:05:23:ad:2a:14:
76:03:07:8d:bb:06:6f:48:13:0b:1f:38:15:b7:6e:
63:52:b7:82:fc:45:3c:70:17:87:b6:4d:7a:85:38:
fc:95:8d:b4:6c:09:ef:6c:fa:99:93:e8:ce:78:3a:
16:84:6a:ac:03:16:d7:ee:20:be:73:be:4f:cf:97:
6a:45:fd:bf:fa:f4:e8:7d:e1:55:5c:9f:f7:1f:fb:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:05:90:A8:C7:CD:07:D8:3A:48:13:31:D6:BD:09:C6:7E:31:3E
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mNsFkKjHzQfYOkgTMda9CcZ-MT4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:fe:e1:41:22:f7:e5:75:b1:79:d0:70:43:4d:c0:ab:80:1e:
9b:a0:74:0c:cd:3d:be:13:0b:2c:a8:4c:09:7a:9d:3c:7f:d1:
90:75:1a:ce:34:36:29:eb:2c:a1:bf:57:27:89:3f:f8:18:63:
1a:17:25:be:08:c9:30:a8:ab:f7:fb:c4:23:6e:86:5b:53:d8:
6a:06:8c:e3:be:fc:58:dc:65:5f:5d:9b:44:86:2e:b4:49:98:
d4:92:96:1d:d0:ff:f1:5d:df:56:41:43:cd:18:bc:bc:b0:26:
03:18:dd:25:90:7e:d0:36:96:82:d0:ef:c9:20:5b:e8:57:22:
55:45:96:f6:b3:cd:d6:fb:50:3d:a9:3c:4d:46:36:f4:81:e7:
47:62:fc:3a:24:51:fa:35:7d:3f:6c:34:5f:ff:9e:2a:37:16:
9a:87:23:74:c6:a6:6e:aa:1b:52:f2:9a:3f:fb:5b:8c:c6:08:
9b:c4:04:bd:5d:ea:45:1e:06:07:f9:d3:6b:57:07:0a:ef:e9:
04:cd:c4:b0:86:b8:05:17:15:16:69:c9:66:c8:3a:f3:04:06:
aa:af:7f:4f:bb:42:89:4e:0f:a7:41:eb:b8:5a:5c:e3:9e:2e:
c9:9d:98:ea:0e:51:32:2d:4b:46:cd:0f:13:3d:d7:3d:01:02:
20:db:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:28 2025 by rpki-client