Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xbAwlOzumO2ww7zvJoDV-AgKlCs.roa
File: xbAwlOzumO2ww7zvJoDV-AgKlCs.roa (raw, json)
Hash identifier: Z8mLqu8+6qo+IhSESb6snn0cVXM1qIabK63vwzVg1+k=
Subject key identifier: C5:B0:30:94:EC:EE:98:ED:B0:C3:BC:EF:26:80:D5:F8:08:0A:94:2B
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 05
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xbAwlOzumO2ww7zvJoDV-AgKlCs.roa
Signing time: Wed 01 Jun 2022 07:07:33 +0000
ROA not before: Wed 01 Jun 2022 07:07:33 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 138527
IP address blocks: 45.252.8.0/22 maxlen: 24
45.252.12.0/22 maxlen: 24
45.252.16.0/22 maxlen: 24
45.252.20.0/22 maxlen: 24
45.252.24.0/22 maxlen: 24
45.252.28.0/22 maxlen: 24
45.252.32.0/22 maxlen: 24
45.252.36.0/22 maxlen: 24
45.252.40.0/22 maxlen: 24
45.252.44.0/22 maxlen: 24
45.252.48.0/22 maxlen: 24
45.252.100.0/22 maxlen: 24
45.252.144.0/22 maxlen: 24
103.6.228.0/22 maxlen: 24
103.198.224.0/22 maxlen: 24
103.198.232.0/22 maxlen: 24
103.198.236.0/22 maxlen: 24
103.198.240.0/22 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jun 1 07:07:33 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=C5B03094ECEE98EDB0C3BCEF2680D5F8080A942B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:8a:dd:d6:46:65:9b:68:60:af:c3:f3:9e:
b7:61:e0:b7:ae:aa:db:f0:6d:79:50:c0:6f:8d:9b:
91:8e:a9:6c:6e:02:00:93:29:4a:74:08:d2:42:a8:
1f:58:a9:ae:45:81:26:b9:1b:78:66:07:03:83:46:
8f:a3:91:2c:cf:e8:cd:92:08:ef:00:16:52:2a:25:
6d:68:0b:61:a4:19:0e:35:16:bc:a4:6d:b8:73:01:
9f:ac:e1:0b:2a:6a:4a:ed:27:45:d3:87:85:92:00:
82:32:b4:c5:54:3b:55:a4:04:37:96:58:1b:b0:20:
16:25:a7:81:3e:8f:63:81:a4:08:20:d4:c1:a7:a7:
c3:68:bd:17:25:c8:11:b8:88:8b:5e:98:57:cc:41:
7b:8a:e0:ea:13:9d:ed:0a:0a:74:09:16:65:3a:cd:
ba:34:a9:ee:7b:53:44:21:66:fb:c4:7c:8f:a2:37:
f5:1c:79:7e:c6:4f:b9:20:8d:08:bb:b9:db:92:99:
ff:a9:53:96:e1:11:e0:8d:57:a6:53:ec:27:2c:5e:
1c:9b:46:9e:ed:66:0b:ae:07:84:19:87:96:ce:c3:
81:12:5f:6c:a5:2e:ae:52:11:ea:ff:b3:6c:19:24:
3a:59:68:89:0a:cd:bc:7f:bf:6d:11:15:a8:b2:fe:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B0:30:94:EC:EE:98:ED:B0:C3:BC:EF:26:80:D5:F8:08:0A:94:2B
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xbAwlOzumO2ww7zvJoDV-AgKlCs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0-45.252.51.255
45.252.100.0/22
45.252.144.0/22
103.6.228.0/22
103.198.224.0/22
103.198.232.0-103.198.243.255
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
af:06:07:5e:c5:44:82:d5:b2:cf:de:fd:dc:1d:9e:e9:61:6c:
b4:4f:ae:cf:cd:42:28:4b:86:59:30:91:a4:0a:d6:d7:c4:2f:
ed:8b:1e:33:d9:ba:eb:03:70:5b:9e:ee:fe:96:4c:22:ed:6a:
6c:6e:15:00:2f:b2:05:5e:fb:01:51:eb:59:72:71:f3:e6:72:
b7:aa:f7:df:84:5a:9e:9b:bf:cd:f4:1e:79:dc:10:9e:8c:22:
8b:c7:6e:38:29:5f:80:64:81:e6:05:aa:e9:04:c6:60:b3:a3:
63:0c:e1:7e:4d:f4:36:cc:db:4e:87:8a:3e:4b:28:c2:68:b6:
ee:49:be:f2:b0:58:2b:e9:a4:17:95:f9:32:51:d3:02:39:2b:
d7:f4:2c:4f:47:11:8b:d0:b7:eb:53:dc:5f:79:79:27:78:99:
93:cb:a0:b9:29:29:47:a9:a2:4f:bb:f0:c3:73:e9:60:d4:5b:
30:48:3e:f3:5d:d0:4f:ad:e9:91:9c:60:ce:ce:9e:e2:b1:31:
92:d0:71:38:d4:25:44:c0:20:11:ab:7e:49:bc:87:8f:e4:f8:
c4:31:73:28:b1:f2:85:86:b9:13:6c:06:12:f7:fa:6d:23:6b:
6e:ed:fe:93:3c:51:02:cc:6d:05:73:55:63:7d:3f:c2:b7:65:
f8:aa:7e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org