Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ukAE_mftFMHE8jqRCImSLk00nvM.roa
File: ukAE_mftFMHE8jqRCImSLk00nvM.roa (raw, json)
Hash identifier: 6IpbdFrMWGt+4uLAE4CyFa5AyBdEo06l8fW9QSEDGBk=
Subject key identifier: BA:40:04:FE:67:ED:14:C1:C4:F2:3A:91:08:89:92:2E:4D:34:9E:F3
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1499
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ukAE_mftFMHE8jqRCImSLk00nvM.roa
Signing time: Wed 11 Sep 2024 02:23:32 +0000
ROA not before: Wed 11 Sep 2024 02:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 59083
IP address blocks: 43.254.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5273 (0x1499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BA4004FE67ED14C1C4F23A910889922E4D349EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:f9:26:4c:10:c7:c9:a7:15:d2:0c:9f:b5:
87:2f:27:88:cb:ee:dd:83:51:64:14:75:3d:40:f2:
f0:f7:ab:b8:b7:24:c5:8c:03:26:a5:68:37:59:d1:
2b:1e:d5:ef:60:d8:ef:35:20:ad:74:dd:3b:49:92:
4b:d2:90:e3:02:45:15:f2:7f:16:58:af:23:30:20:
5b:7a:0a:e4:58:fb:10:5b:5e:eb:f7:45:1c:df:50:
a2:a4:f7:a3:a2:c8:8f:0e:ba:0a:30:25:5b:cc:a5:
7f:13:00:41:73:42:b9:b7:e5:76:16:01:e5:23:91:
56:4b:1c:11:15:22:4c:0a:4e:6c:7d:6f:07:00:f3:
34:aa:de:a1:91:6a:54:7f:4b:8d:3d:9a:db:71:c2:
e9:6d:62:d8:e9:0b:f5:29:53:50:9c:da:2b:97:0b:
f0:6e:fe:4b:87:aa:75:5e:df:58:d6:a1:64:6d:91:
52:e2:8a:7f:ed:a4:de:06:14:ad:81:82:a9:63:4b:
61:4f:6b:cc:45:ab:3a:bf:7c:e6:2f:bb:1d:ad:84:
6c:12:6c:83:fc:38:d7:48:91:4f:26:04:98:8c:21:
61:8b:34:a2:6b:6e:a8:a5:17:eb:ff:0c:73:70:6f:
cd:43:52:ab:2b:04:7b:55:48:cf:63:d5:6f:42:61:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:40:04:FE:67:ED:14:C1:C4:F2:3A:91:08:89:92:2E:4D:34:9E:F3
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ukAE_mftFMHE8jqRCImSLk00nvM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.152.0/22
Signature Algorithm: sha256WithRSAEncryption
88:90:02:d4:26:46:bc:09:63:13:5f:08:5f:91:22:f5:e2:64:
08:a1:51:6e:7f:a2:b7:76:08:6f:b4:31:8c:45:85:5a:28:26:
05:74:ac:9a:98:97:05:85:b4:67:db:2a:e2:54:fb:51:df:7a:
a8:fd:01:58:9d:68:6b:eb:6d:6f:06:5d:b6:dc:2c:d4:c7:0c:
4e:64:e3:46:ce:2e:88:b9:46:33:cf:86:70:d7:8b:3f:4a:4d:
34:e3:67:ed:24:39:d0:b3:83:e2:22:24:a6:7a:63:ed:77:df:
0c:11:fe:75:6b:04:0e:63:74:aa:1f:d2:70:d7:74:1e:c4:b5:
2e:6c:f6:b9:66:70:60:8b:10:0c:e4:bd:8f:d3:7f:03:3d:8c:
83:f4:f1:8b:03:62:4f:24:b4:b8:34:55:e1:c3:a0:5a:9c:e2:
9a:2b:07:cb:74:43:18:7d:be:53:32:85:59:a6:ee:b2:f6:44:
e8:9c:bd:1b:81:93:95:1b:84:5e:83:5d:f1:0d:3a:99:4d:6f:
c8:4b:81:bd:a2:cb:ee:91:c3:31:bf:01:17:14:dd:f3:d6:11:
dc:ca:75:ce:7f:b4:96:49:fa:c1:be:47:df:3a:27:fe:5d:83:
35:75:75:8c:28:8c:67:96:77:ed:63:91:08:d3:28:53:40:51:
f6:8f:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:49 2025 by rpki-client