Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/6-5JDz1xnDr3HyTVDSPghvUanyk.roa
File: 6-5JDz1xnDr3HyTVDSPghvUanyk.roa (raw, json)
Hash identifier: Q/w2V2gxvGv0VWCEuVLmgmMCtJx9XtJr8mscXlzsNUs=
Subject key identifier: EB:EE:49:0F:3D:71:9C:3A:F7:1F:24:D5:0D:23:E0:86:F5:1A:9F:29
Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Certificate serial: 1058
Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/6-5JDz1xnDr3HyTVDSPghvUanyk.roa
Signing time: Sat 14 Sep 2024 07:29:55 +0000
ROA not before: Sat 14 Sep 2024 07:29:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 63719
IP address blocks: 45.255.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4184 (0x1058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Validity
Not Before: Sep 14 07:29:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EBEE490F3D719C3AF71F24D50D23E086F51A9F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:42:67:10:5d:57:38:89:15:d5:90:b9:c6:
9a:f9:ea:c9:74:8c:81:19:6c:de:62:d2:66:d5:44:
38:bb:bf:1e:e2:2e:90:db:65:26:2c:c6:a2:6f:98:
41:88:6a:9e:bf:22:ad:5a:7e:99:60:40:10:fb:20:
93:35:6d:cf:3d:ef:3a:7d:09:da:97:6a:dc:08:27:
1e:42:44:c1:08:a7:5d:f7:a9:39:a9:b8:b5:bd:01:
d7:69:a8:da:c9:4c:99:ca:5c:b6:70:80:b0:71:2f:
c3:3c:b5:b0:35:ad:00:ed:c2:76:ce:b7:f8:3a:08:
c5:3f:12:9c:12:c5:a4:70:18:49:cf:f1:96:98:1c:
34:61:84:7a:a8:b0:16:6f:6e:04:5d:22:09:d1:19:
ea:d0:69:ad:65:5c:f9:93:7b:92:d8:0d:6f:97:8e:
b7:0a:30:c8:71:79:0b:31:8f:38:75:36:42:8a:b9:
49:99:f4:ff:1a:b6:76:18:ec:6f:d7:20:53:89:ce:
f4:4b:00:a5:28:e6:8d:1c:4f:d6:9b:6b:5e:2c:dc:
74:91:b1:f2:b7:63:78:ab:6a:05:70:b9:04:37:52:
86:e8:67:10:55:e7:09:e0:3e:2b:da:1c:fb:c9:2b:
54:a0:86:ec:d0:2e:7d:88:62:47:c9:fd:54:7b:58:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:49:0F:3D:71:9C:3A:F7:1F:24:D5:0D:23:E0:86:F5:1A:9F:29
X509v3 Authority Key Identifier:
keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/6-5JDz1xnDr3HyTVDSPghvUanyk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.255.152.0/22
Signature Algorithm: sha256WithRSAEncryption
69:60:55:bd:7b:69:ad:fc:1d:b2:1a:d0:d4:fc:a6:fe:1a:8f:
b9:5d:a3:d4:48:24:b0:f3:4c:b3:01:bd:86:59:ad:f0:53:a1:
85:fd:06:f5:21:40:df:cc:77:b3:61:54:b1:c2:3c:6c:70:ea:
8f:e4:3a:b1:30:a9:89:b5:a6:c4:7b:4c:58:b7:09:0c:77:b9:
e0:7e:54:68:4b:5a:66:f5:d2:1a:fd:a1:0c:02:35:64:cc:0a:
f1:56:1c:83:37:ad:3f:ba:bc:78:65:f9:1b:3c:10:d4:f5:df:
fb:7e:7c:aa:6c:80:49:2c:05:86:2d:77:34:76:6c:7c:de:ad:
21:93:e8:b1:9e:7a:04:c9:81:4e:19:75:58:2b:07:e8:dc:bc:
4f:3c:b7:12:d5:cf:08:2a:e6:c3:15:44:d7:37:4a:bd:d4:83:
09:02:30:e5:46:45:84:4b:db:f8:f7:7c:35:68:de:2e:f0:51:
73:29:90:be:43:f3:29:df:ec:e5:b2:ad:de:82:c3:6d:86:61:
30:ff:67:dd:9d:30:9b:72:a5:9c:23:63:54:cb:32:67:05:b2:
cf:3a:b1:b8:c7:6c:b7:b0:82:81:2c:04:eb:c7:25:0c:b6:45:
84:73:0a:a1:9c:28:87:f4:be:20:48:fe:0c:04:5d:81:2e:91:
34:48:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:40 2025 by rpki-client