Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/oPARlDCZnt7MBuAyrYtMbO7B0Eo.roa
File: oPARlDCZnt7MBuAyrYtMbO7B0Eo.roa (raw, json)
Hash identifier: 1AXdpQ8ri3Yw7eXmMLapXlkjmgKBIuAQ7Bgx3cYZJxE=
Subject key identifier: A0:F0:11:94:30:99:9E:DE:CC:06:E0:32:AD:8B:4C:6C:EE:C1:D0:4A
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1727
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oPARlDCZnt7MBuAyrYtMbO7B0Eo.roa
Signing time: Fri 06 Dec 2024 04:48:52 +0000
ROA not before: Fri 06 Dec 2024 04:48:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 45.252.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5927 (0x1727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Dec 6 04:48:52 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A0F0119430999EDECC06E032AD8B4C6CEEC1D04A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:4b:40:0b:6b:ff:20:64:bb:31:57:64:1c:
e5:2a:79:30:32:5d:fb:b4:44:86:15:36:0a:ff:74:
15:db:ec:26:89:c1:e8:13:27:88:0e:6b:d4:7f:5b:
d8:c1:2f:53:91:3d:9a:d2:d2:97:6a:7e:b1:30:49:
5e:8b:da:58:de:c3:8c:a5:eb:ea:8f:35:dc:3b:c4:
60:8f:56:9a:ee:04:75:2b:e5:6a:af:40:30:c6:dd:
c6:20:c7:78:31:62:93:24:8d:37:ca:b2:7d:55:cd:
f8:43:6d:39:c8:7b:c7:dc:3f:a5:58:a3:d4:c4:d3:
f5:36:25:fe:c9:82:e7:76:91:4b:f5:b5:21:cf:43:
ad:e0:be:af:6a:70:44:8a:3c:59:76:4a:97:b6:7a:
b6:f1:da:be:fb:d8:ca:99:c7:d2:61:88:12:c6:41:
5a:77:9f:a7:e3:c0:f9:14:e4:92:6e:2c:9c:d6:c5:
46:0a:bf:4e:73:0f:25:0d:9c:34:7d:01:77:f9:da:
6d:b9:e9:2d:68:b8:4a:83:5c:65:37:01:c6:e2:de:
70:41:c4:65:78:16:2f:18:c9:f9:c6:0e:b8:a7:90:
ba:25:f4:1e:68:2a:8e:fc:cb:4e:61:df:b6:ef:b8:
f2:e1:05:dd:f7:c1:88:8e:2c:e2:80:db:8c:e2:ac:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:11:94:30:99:9E:DE:CC:06:E0:32:AD:8B:4C:6C:EE:C1:D0:4A
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oPARlDCZnt7MBuAyrYtMbO7B0Eo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.84.0/22
Signature Algorithm: sha256WithRSAEncryption
71:b9:f8:b5:50:c5:07:2d:68:25:db:f8:0a:81:82:ae:a5:fb:
cc:f8:e1:33:d4:eb:7a:63:b0:79:fb:9a:bf:ed:2f:48:00:0c:
91:c7:ec:48:52:6f:93:6d:6b:5a:1d:f8:df:b0:5e:c3:3d:da:
04:48:78:7a:0a:d3:24:75:9e:f6:df:a2:8d:52:41:1a:29:6c:
f7:a8:91:0b:ee:2d:83:33:9b:dc:b3:79:10:f9:9d:0d:51:21:
f8:77:bf:c3:bb:92:0d:8f:2a:cc:ce:5e:67:90:40:d3:6b:17:
55:22:f2:ac:41:32:ae:ea:c6:17:65:09:8e:29:04:59:27:d7:
f2:7a:46:14:33:09:81:84:6f:73:1e:9a:26:b4:2e:1c:02:ea:
78:d4:92:85:b2:2f:5c:da:b7:01:f8:81:cd:5c:1e:bb:31:0a:
1e:88:b8:24:a4:0c:53:a6:24:25:3f:46:a9:a0:e2:2e:d3:ec:
dd:5c:7a:1d:4d:34:f6:43:79:dc:95:07:5b:b9:b5:2c:5a:09:
ca:2f:8e:ff:2e:93:81:d1:c5:c6:40:cb:f9:e2:b0:7d:fc:5f:
07:88:c8:27:66:e5:46:f7:d3:ed:6a:3f:9f:d6:2c:65:54:ec:
35:3d:59:fa:06:bb:41:62:6a:11:49:b1:32:56:88:7f:b8:a2:
73:e2:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:38 2025 by rpki-client