Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/18KS5iIQxL6lUlsauyk7X8rMfEw.roa
File: 18KS5iIQxL6lUlsauyk7X8rMfEw.roa (raw, json)
Hash identifier: rHsJlzHQ3gRwPJ3n/LUiFjs0ZOofpjpP4rVKXGr7eSM=
Subject key identifier: D7:C2:92:E6:22:10:C4:BE:A5:52:5B:1A:BB:29:3B:5F:CA:CC:7C:4C
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CB9
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/18KS5iIQxL6lUlsauyk7X8rMfEw.roa
Signing time: Thu 02 Jan 2025 13:58:23 +0000
ROA not before: Thu 02 Jan 2025 13:58:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138421
IP address blocks: 180.184.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7353 (0x1cb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D7C292E62210C4BEA5525B1ABB293B5FCACC7C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:ae:82:52:07:d2:72:bd:33:2d:fe:fb:79:
b2:dd:58:b6:d3:c8:d2:6b:52:5a:3d:ec:89:23:ee:
fb:5c:25:ac:0b:5e:16:84:d1:13:ff:73:fa:f3:4c:
1e:85:3f:00:8f:85:93:a7:a4:4f:6a:0b:c2:6a:19:
32:c8:86:59:f0:4e:ad:63:4d:e9:a7:5a:ba:fb:f7:
c9:0a:43:f4:bb:8f:18:06:b7:dc:0c:b8:a8:74:17:
3e:71:8e:22:18:39:03:1f:e7:be:9c:6c:74:fb:88:
20:00:c1:41:78:e2:ba:0f:24:a4:2f:71:81:c3:25:
40:2e:92:fc:0b:8c:eb:7b:55:2a:05:61:84:41:61:
08:75:fb:e3:29:7a:02:8c:4a:fb:50:6b:c1:70:2e:
2c:7b:0d:34:25:c7:43:2d:d1:df:09:63:1d:fe:e0:
93:59:69:07:db:4c:db:a9:c8:62:53:d4:3e:7f:ab:
8a:4a:3b:69:8d:7a:16:70:40:d0:d0:af:1c:d7:0e:
63:ad:36:c8:a5:99:f6:88:07:dc:38:34:1e:23:52:
74:ec:49:04:e9:59:f8:d1:79:05:99:f6:d9:d6:23:
f1:86:17:df:38:71:62:ac:30:69:e2:7f:93:4a:c4:
b7:53:33:f1:12:18:e5:60:df:a0:e2:ed:8b:93:ca:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:92:E6:22:10:C4:BE:A5:52:5B:1A:BB:29:3B:5F:CA:CC:7C:4C
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/18KS5iIQxL6lUlsauyk7X8rMfEw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.144.0/21
Signature Algorithm: sha256WithRSAEncryption
79:6e:4f:fa:ba:a9:93:7b:eb:09:58:5a:eb:5d:fd:87:57:a3:
a5:dd:16:d5:bd:61:2f:b2:92:a3:64:2f:ba:5c:f8:02:65:7d:
62:62:a6:df:9a:7c:bd:94:d6:0b:66:d9:22:9d:68:a0:a5:f4:
e3:96:7c:be:e7:9a:fd:7d:57:a6:c2:49:f6:d9:ae:04:3c:dc:
ca:21:5c:97:16:d4:f7:be:d9:30:f0:1f:b8:d6:cd:c7:79:4c:
eb:f4:d1:9e:30:b1:8e:54:73:89:f8:0f:1b:ae:67:4d:07:55:
4f:6f:49:dd:98:9a:e0:22:b1:44:44:83:fd:64:74:5e:7d:57:
4d:cb:03:b6:3e:88:44:2a:68:30:12:ed:70:1c:c3:4a:27:d9:
b4:b7:df:cc:a3:ed:e9:2d:5d:ba:3b:41:1a:03:3a:5a:0c:37:
15:9b:84:5b:76:67:b5:16:c0:ca:05:45:2d:6d:6c:ab:85:53:
8b:42:f2:97:e4:ba:60:e5:0a:71:76:54:27:8a:60:10:d6:e4:
fc:b6:1b:f0:f6:ec:48:49:21:24:d4:82:80:3c:36:a1:d8:f0:
a7:72:0e:4f:15:d2:12:46:92:f2:d6:32:f6:54:1a:28:df:24:
c7:95:1d:b6:81:98:8f:44:9c:50:bc:32:a8:d1:8f:ca:4d:5c:
28:0e:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:31:38 2025 by rpki-client