Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/u66zgs_lsM-1TQMEEh2BGCk1Bj8.roa
File: u66zgs_lsM-1TQMEEh2BGCk1Bj8.roa (raw, json)
Hash identifier: SC6dA3gnt+2THZg7IN+IYusvMXIzkhh5ULA4M/nibGk=
Subject key identifier: BB:AE:B3:82:CF:E5:B0:CF:B5:4D:03:04:12:1D:81:18:29:35:06:3F
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 1BB9
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/u66zgs_lsM-1TQMEEh2BGCk1Bj8.roa
Signing time: Thu 28 Nov 2024 14:39:21 +0000
ROA not before: Thu 28 Nov 2024 14:39:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4766
IP address blocks: 45.126.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7097 (0x1bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Nov 28 14:39:21 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BBAEB382CFE5B0CFB54D0304121D81182935063F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:dd:ca:cc:a0:6e:84:0d:c0:2c:92:f7:1c:
a3:d4:9d:ae:59:32:af:15:1f:bf:75:62:58:78:ae:
0f:0c:9c:ee:16:b5:dd:af:2a:3e:80:af:96:b0:05:
6b:6d:75:a6:f7:88:4f:9d:8e:5f:a6:99:cb:20:a2:
82:76:57:7c:b5:56:00:f8:0e:b6:81:30:9f:78:93:
4d:36:0d:25:15:97:80:a2:58:ea:18:77:f1:ad:8f:
3a:73:6f:84:6f:f3:00:25:ef:99:d9:78:21:00:1e:
2c:bc:b8:42:0c:d8:cc:c5:43:b8:80:1b:49:d5:5b:
fa:36:6f:5d:e8:02:9f:cd:ab:c0:8a:1b:5a:cb:e2:
c7:d6:ef:5b:0c:d8:62:90:69:08:df:fb:ea:91:dc:
b4:24:21:78:1c:39:93:1b:3f:c6:0c:d7:07:25:32:
11:09:34:56:89:da:01:a1:fa:c0:ce:79:cf:ff:9c:
6d:2c:30:6b:bb:49:dc:e9:98:ad:ee:e1:66:00:0b:
06:12:14:b3:e5:d1:d8:e6:9e:ba:40:bf:bd:9f:86:
a5:f5:a5:9e:e6:91:f1:6e:c2:17:40:c2:7f:72:8d:
e2:86:de:3f:7e:d7:70:9e:0b:4d:02:78:e6:50:d3:
bf:13:68:bf:8d:be:1f:87:c0:d0:46:b5:fd:a7:91:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:B3:82:CF:E5:B0:CF:B5:4D:03:04:12:1D:81:18:29:35:06:3F
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/u66zgs_lsM-1TQMEEh2BGCk1Bj8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:ef:58:cf:bd:85:24:6e:1d:be:2b:db:ee:57:d0:cb:59:28:
b2:c9:74:ba:1c:bc:46:a1:ce:89:b8:fd:44:dc:8e:18:f3:91:
b1:ae:ec:f3:dc:ac:79:92:b5:16:7b:cd:eb:e6:34:54:39:7c:
97:30:a4:8a:12:68:fb:c2:59:04:ae:02:71:27:eb:db:0f:22:
92:19:aa:f0:04:e3:00:ec:71:c5:08:da:24:75:4b:87:ac:18:
72:71:e1:54:12:4e:be:97:e4:16:dc:00:bc:18:91:52:92:e6:
af:89:22:2f:f6:35:a5:89:bd:b4:ec:a1:95:3d:71:d9:07:36:
fb:f4:55:c6:9b:81:0b:52:75:cc:4c:5d:75:cd:67:ab:44:5a:
ae:b9:68:45:a8:a5:41:1c:07:88:ed:4f:e6:be:24:94:28:8c:
e9:22:5f:f6:30:a5:89:4c:a1:9a:e3:46:a2:5a:ac:62:cf:17:
3c:17:f0:53:bc:5a:a1:3c:c8:b2:1c:4c:cd:34:31:85:ee:5b:
78:88:e9:c0:99:cf:82:06:c4:06:6d:db:d0:c8:f6:ea:4b:39:
4e:df:70:d4:c9:a2:06:5b:50:19:0f:08:10:96:ae:18:d0:a9:
77:31:c0:c5:37:34:66:c4:07:28:39:57:40:8d:1a:c4:92:16:
a9:76:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:22 2025 by rpki-client