Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nwsW2ATeY8tUz3_tumHqJ-W4I34.roa
File: nwsW2ATeY8tUz3_tumHqJ-W4I34.roa (raw, json)
Hash identifier: RBpY3lCg0Rx4XdUrQKBDTw5OaQI8UXP8rzElFvms9Jg=
Subject key identifier: 9F:0B:16:D8:04:DE:63:CB:54:CF:7F:ED:BA:61:EA:27:E5:B8:23:7E
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18C9
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nwsW2ATeY8tUz3_tumHqJ-W4I34.roa
Signing time: Fri 17 Jan 2025 01:25:34 +0000
ROA not before: Fri 17 Jan 2025 01:25:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138527
IP address blocks: 45.252.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6345 (0x18c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9F0B16D804DE63CB54CF7FEDBA61EA27E5B8237E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:03:e2:0a:ba:e0:93:9a:4b:eb:c6:72:f9:
c4:5d:55:04:46:aa:b0:89:1f:9b:1b:bc:0f:71:be:
ec:b1:81:80:cd:1c:35:c9:2c:73:00:69:53:cd:4c:
e0:28:2b:da:e2:6d:b5:4c:22:51:08:25:17:ef:45:
fc:8b:e1:f9:34:a9:a4:a8:5d:ce:10:19:47:b8:5e:
c7:9f:ee:2f:a8:29:52:60:c0:9a:01:1e:1d:4e:b5:
2b:79:92:36:f0:a5:83:e8:3a:c0:70:30:cd:46:93:
46:3f:1f:b0:d7:c0:ef:58:e9:60:ed:de:79:c7:98:
36:a1:2d:d3:eb:11:24:0e:7f:56:c5:4d:b7:21:01:
a2:5e:00:dc:01:14:3e:f0:56:6d:2f:65:d4:94:ee:
87:08:20:87:2c:cc:31:eb:f7:a9:50:de:b2:01:e3:
8d:0f:15:79:56:d7:39:7c:37:13:f9:f6:9c:3c:f0:
1f:36:fa:fd:d5:d9:40:5b:bd:12:f5:e0:f4:69:29:
0c:49:e2:0b:b8:8a:3b:d6:53:91:ad:fb:ff:50:e3:
9d:cd:e1:dc:e1:44:7e:07:e7:0c:2f:ae:8c:70:34:
f8:5e:ba:dd:21:a3:21:ad:61:19:2a:5d:72:6b:6a:
e7:93:94:af:9f:1f:dd:b2:a4:92:26:e1:6f:ae:92:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:16:D8:04:DE:63:CB:54:CF:7F:ED:BA:61:EA:27:E5:B8:23:7E
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nwsW2ATeY8tUz3_tumHqJ-W4I34.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:72:bb:3a:b5:91:3a:fa:93:26:37:8e:4b:b3:2a:87:80:cd:
08:9f:c4:e5:c6:83:07:15:cd:2a:51:8b:cb:97:71:08:28:a7:
23:f8:5a:f6:3f:66:cf:55:1d:f9:fd:bb:ba:d1:37:55:61:25:
57:0f:7c:fe:c0:da:39:d5:da:b1:9d:78:a4:f2:8b:97:65:54:
69:9b:9e:c5:b8:03:33:aa:9c:b2:43:d2:56:7d:4d:96:f0:7e:
26:62:e5:cb:4e:2d:de:fc:82:c0:cd:92:9d:f7:53:a3:6f:86:
dd:e3:d5:0c:69:16:9b:5e:b8:dc:ae:08:ba:00:dc:ce:9b:da:
12:be:4b:58:d8:ed:c5:b6:67:fe:d8:2a:32:77:40:ca:c2:d7:
78:fa:45:c2:d2:98:bc:ed:08:f9:30:2a:40:69:42:6b:e7:1c:
82:95:7b:ae:8c:02:bd:e1:b1:9e:8c:65:d9:d9:10:aa:35:0e:
aa:87:b9:85:f4:6f:82:a3:69:a1:fe:b0:1c:8c:03:44:a0:ee:
18:6b:52:6d:6a:c6:f4:9c:b4:d7:8c:5d:66:d2:73:61:c7:f7:
93:91:96:27:56:37:8e:6f:d6:d5:14:27:38:f1:da:f1:d2:93:
51:af:32:24:77:6e:31:ff:49:f3:e3:95:6c:19:89:81:bb:82:
6f:b2:31:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:20:10 2025 by rpki-client