Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/oXvvSxay7RKOjsgE0r4ojw_tVao.roa
File: oXvvSxay7RKOjsgE0r4ojw_tVao.roa (raw, json)
Hash identifier: Wfl/EC+DNVx6cHnF7OOWkafcHYCUx6SBDqKdZRdszaM=
Subject key identifier: A1:7B:EF:4B:16:B2:ED:12:8E:8E:C8:04:D2:BE:28:8F:0F:ED:55:AA
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18F4
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oXvvSxay7RKOjsgE0r4ojw_tVao.roa
Signing time: Fri 17 Jan 2025 01:25:52 +0000
ROA not before: Fri 17 Jan 2025 01:25:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 45.252.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6388 (0x18f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A17BEF4B16B2ED128E8EC804D2BE288F0FED55AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:13:b4:4b:b6:59:70:03:12:ff:7a:7c:b0:
2a:78:56:59:20:9e:a7:b3:65:df:db:9b:a4:c4:1e:
a9:cb:1b:6c:59:e6:75:a1:85:0f:67:52:3b:a7:68:
7b:76:2e:16:29:7e:0f:1f:24:f5:80:55:55:00:1c:
ec:bc:4a:85:0f:95:bd:e2:62:aa:c0:e8:fa:58:11:
f0:5f:f9:42:17:73:55:5d:ab:32:9d:5f:1d:05:b3:
5e:cb:58:fb:58:06:c1:75:77:ba:76:06:8b:b9:25:
18:36:35:35:26:b6:b8:06:95:c7:a8:6d:32:bb:60:
a3:74:7f:6c:dd:a4:dc:61:84:7d:e5:d6:97:49:60:
ee:6c:51:65:56:e3:9d:b2:85:b9:06:2b:e9:24:47:
2f:8d:55:6e:93:45:53:94:ba:f6:92:f6:dc:82:9f:
4a:75:12:9a:42:8e:67:df:c9:91:c2:d5:c7:26:66:
d6:d9:15:ed:aa:b1:ff:38:89:04:ed:3a:e2:16:61:
50:fc:7c:8b:65:fb:18:69:10:95:97:d7:24:ba:c9:
97:7b:7c:fa:a7:51:43:70:7c:0b:4f:3c:2e:d3:76:
72:f0:01:ab:a0:ac:9f:d2:d3:e7:b3:0a:5f:23:7e:
2b:c0:5f:54:00:fb:56:b5:54:64:50:ff:86:86:4d:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7B:EF:4B:16:B2:ED:12:8E:8E:C8:04:D2:BE:28:8F:0F:ED:55:AA
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oXvvSxay7RKOjsgE0r4ojw_tVao.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.100.0/24
Signature Algorithm: sha256WithRSAEncryption
37:59:6b:c3:0a:aa:57:73:12:9c:68:ec:27:42:73:f6:64:94:
66:48:20:38:85:b8:a7:d7:84:5d:3a:14:b5:d0:d1:71:dc:4a:
49:63:de:3b:b4:a3:1d:4e:f9:34:4b:db:cd:9b:ff:81:a6:84:
64:22:57:0d:fd:ea:fc:27:28:96:a9:b3:66:a8:9c:6b:0a:59:
c2:1c:ce:3a:81:62:a9:55:d2:21:45:ee:c3:8a:41:0d:8d:b0:
ce:47:97:4f:b4:f4:eb:58:6f:ad:51:2d:f0:59:fd:58:84:3c:
a6:6e:a8:cd:60:b5:50:91:73:6a:8d:56:3e:ff:3c:02:2e:22:
b9:0e:65:d0:92:36:e6:03:a1:36:cf:61:10:0d:84:24:6f:36:
9f:97:19:83:94:00:13:2d:a9:a8:a4:56:29:06:ad:49:ac:e2:
7c:7a:06:29:25:44:5e:9e:b8:d6:a8:90:1c:a4:6f:a1:2a:98:
0d:6b:c3:7d:7a:3d:16:58:dd:58:1a:58:ae:df:d5:24:f0:17:
96:c5:4a:ef:80:8e:bb:9d:6b:a8:1b:00:0d:1b:73:8a:d0:e9:
1f:1a:ba:7b:61:bd:e2:80:ad:8c:7e:5b:d7:3a:13:47:da:31:
d9:f5:31:d6:e0:a1:3b:d6:83:6c:10:78:55:71:4a:79:c3:2f:
ad:98:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:13 2025 by rpki-client