Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/p4s-Fi4ykpShdUlu9lIGVYwMayI.roa
File: p4s-Fi4ykpShdUlu9lIGVYwMayI.roa (raw, json)
Hash identifier: 5JuNE6NbGrRxBafx7y+64l//NY55f5G6EuilYPCcTUc=
Subject key identifier: A7:8B:3E:16:2E:32:92:94:A1:75:49:6E:F6:52:06:55:8C:0C:6B:22
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18E1
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/p4s-Fi4ykpShdUlu9lIGVYwMayI.roa
Signing time: Fri 17 Jan 2025 01:25:44 +0000
ROA not before: Fri 17 Jan 2025 01:25:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138527
IP address blocks: 45.252.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6369 (0x18e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A78B3E162E329294A175496EF65206558C0C6B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:15:52:28:eb:c4:19:50:e1:52:5c:d1:70:
eb:53:6f:88:eb:40:ff:40:6a:5c:9d:de:5e:f7:3d:
0c:31:6c:15:1e:73:df:b5:6c:ba:aa:01:55:e4:a2:
6f:28:7d:23:34:fb:a2:ab:7f:b0:9c:b8:d1:27:46:
e7:21:d3:31:a8:f6:4e:c4:bf:56:52:f4:7b:13:86:
b3:8e:93:5a:43:71:4d:df:a1:ea:b8:7b:5f:30:b5:
37:91:09:74:f4:c4:50:a2:9d:4a:ca:4b:cb:93:60:
44:9f:57:32:a5:5e:d0:ee:88:b8:69:f8:c5:47:f7:
b5:f8:2e:df:cf:d4:1f:c6:8e:dd:eb:28:86:0a:c1:
8f:e3:87:2e:fe:e2:2d:0e:1d:41:e0:6c:c6:e4:56:
86:dd:65:cd:4a:c9:2d:81:56:1b:f8:5f:55:51:65:
a5:74:6a:e5:bf:9f:c9:54:2b:b5:9e:cd:c8:2a:be:
e3:a8:ad:c8:bd:c8:e3:bd:22:88:f4:e6:36:8a:29:
76:16:73:1a:2b:2a:d9:cb:3c:bb:a9:6e:1a:2a:b5:
55:eb:1b:b2:f8:58:a4:1d:ab:cf:6e:9a:0a:89:1a:
2a:3f:22:6a:45:3c:29:8c:17:46:42:5b:3c:8b:44:
f6:ae:fc:b3:8d:02:cd:5a:f2:d0:2a:3d:5e:92:b2:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8B:3E:16:2E:32:92:94:A1:75:49:6E:F6:52:06:55:8C:0C:6B:22
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/p4s-Fi4ykpShdUlu9lIGVYwMayI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:53:fd:7f:bd:cf:d1:d1:50:14:93:03:80:17:ec:be:71:95:
7c:0e:e6:5c:70:e2:62:c2:b5:98:c5:fa:df:9d:df:28:49:99:
84:c2:46:0e:75:54:64:58:d7:1b:74:31:57:73:50:b8:b5:a0:
0a:1f:be:8c:67:53:3d:90:74:d3:78:45:7f:b5:bf:9a:ea:90:
01:9d:f3:92:ee:d8:3a:48:75:91:d5:eb:ee:17:5b:40:17:4f:
0a:bc:75:c9:f2:9f:c4:3d:e2:73:29:16:86:76:b8:6e:2c:d4:
a7:09:5a:a3:9b:25:2c:0b:93:7e:e9:f6:96:f5:6b:9f:21:5c:
67:1e:71:a2:d4:5e:71:29:1d:dd:fa:b5:de:6d:1a:53:92:8a:
b2:78:4a:5b:50:32:bd:f3:62:d2:4a:fe:1a:17:a4:9e:4a:a8:
35:a0:6f:af:8b:c9:4e:7f:e2:94:cb:d6:94:a6:db:97:0b:68:
1d:a7:ea:da:df:82:36:ab:66:bc:0e:8c:71:a9:21:cf:57:a7:
2c:5c:b7:c4:bd:74:30:93:91:d8:05:9d:89:a5:61:81:e5:b9:
2b:41:bb:3c:d5:59:7a:bb:ad:ca:16:80:15:ac:6e:9a:cf:43:
8d:77:59:0b:2b:28:ef:a5:b7:21:af:d2:14:62:e4:06:aa:32:
9b:a9:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:49 2025 by rpki-client