Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/W1URaSazluROyyGrCRdwxFhYd9Y.roa
File: W1URaSazluROyyGrCRdwxFhYd9Y.roa (raw, json)
Hash identifier: MFQX03Vp/Q22Pl5Z2PCr1olysGH4LnFsVKx6mJcCNSQ=
Subject key identifier: 5B:55:11:69:26:B3:96:E4:4E:CB:21:AB:09:17:70:C4:58:58:77:D6
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 186A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/W1URaSazluROyyGrCRdwxFhYd9Y.roa
Signing time: Fri 17 Jan 2025 01:25:02 +0000
ROA not before: Fri 17 Jan 2025 01:25:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138527
IP address blocks: 45.252.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6250 (0x186a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5B55116926B396E44ECB21AB091770C4585877D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:5f:ef:1b:0b:70:45:86:a0:c0:a0:fe:7a:
f1:d5:98:f7:8b:1e:9e:a1:53:d7:15:a1:96:96:a9:
6f:c4:86:49:46:ab:2e:15:78:f7:9e:11:ad:a4:ec:
8c:ec:01:b3:5c:4f:f2:63:e2:05:26:aa:eb:51:af:
74:21:2d:cb:3d:49:f4:d4:b4:57:48:0a:37:6b:31:
c0:91:b8:fd:8a:a6:0f:01:c8:44:3f:28:ff:3c:d4:
18:1c:45:bd:74:4d:f1:05:b8:92:d1:90:81:68:b8:
09:24:31:17:d9:02:fa:cb:d4:97:4a:44:b8:70:a2:
77:21:93:39:9a:68:91:38:77:64:ef:6c:7d:20:c5:
47:4b:7d:e4:84:07:f1:8e:f0:ea:3a:50:cd:89:18:
cd:b0:8b:66:77:80:43:17:00:e5:62:04:49:dc:d8:
d5:bf:32:03:1f:7e:78:d1:98:91:69:78:3a:ca:66:
2d:4a:f6:96:3b:1e:1f:e4:f4:41:fc:40:7c:7d:3b:
f3:0e:50:79:d7:7e:99:67:0c:24:4b:23:a9:9d:ad:
b2:82:4a:14:53:8b:82:30:e3:58:e9:20:8b:66:c1:
71:db:c3:99:21:c4:43:74:99:fc:8d:6b:d4:06:d1:
ca:70:36:1d:7f:df:2b:f0:07:a2:8a:84:9c:62:c4:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:55:11:69:26:B3:96:E4:4E:CB:21:AB:09:17:70:C4:58:58:77:D6
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/W1URaSazluROyyGrCRdwxFhYd9Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.16.0/22
Signature Algorithm: sha256WithRSAEncryption
89:7c:95:4b:9e:09:02:19:1e:3c:b1:ca:6e:40:98:76:f3:d7:
55:1d:62:3c:ab:49:83:dc:a4:9d:1d:2d:b0:14:ed:9c:6e:ac:
ba:2c:00:ec:83:0b:5c:af:b8:a1:f1:07:36:a0:10:4d:1a:ff:
d0:eb:1d:e7:30:a6:63:fb:b4:77:ba:f7:d3:a7:f2:0c:56:5d:
43:b6:38:19:c3:51:0b:f5:fa:15:5b:d9:ce:aa:0e:80:f5:e4:
3c:31:f4:28:9b:ab:dd:ae:59:6a:da:12:b7:c9:3a:33:47:9e:
e9:45:cc:8d:65:0d:7f:95:03:10:a7:f9:78:db:86:2c:3b:fc:
1b:df:9b:f7:8e:0d:47:47:6b:cb:1d:f3:26:9f:cf:c5:e0:8e:
07:69:40:78:6b:b9:96:8d:69:23:61:66:e0:52:3e:e4:54:ab:
b3:ca:68:db:0a:55:33:ba:f8:3c:14:6c:58:91:b3:95:0d:87:
49:ef:1d:99:a4:64:02:64:e6:05:ff:e1:d1:cf:32:52:f9:dc:
f2:10:fd:3a:51:ba:21:14:6b:2b:96:be:83:dd:a8:da:a0:f9:
ad:c1:78:e4:ec:a9:c1:b0:ed:79:98:87:c6:21:33:5f:b9:5f:
ae:f9:70:35:ce:a4:de:7e:e9:6c:77:c7:7a:f0:b3:2c:f5:78:
2a:a9:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:59:43 2025 by rpki-client