Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/_MtzjNitONdbQbC41IfGV65z-oA.roa
File: _MtzjNitONdbQbC41IfGV65z-oA.roa (raw, json)
Hash identifier: 2XunPCHAUDgtlW/+bFiHpO1/yazElI4wpcEp3CSOBM4=
Subject key identifier: FC:CB:73:8C:D8:AD:38:D7:5B:41:B0:B8:D4:87:C6:57:AE:73:FA:80
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CBD
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/_MtzjNitONdbQbC41IfGV65z-oA.roa
Signing time: Thu 02 Jan 2025 13:58:24 +0000
ROA not before: Thu 02 Jan 2025 13:58:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 180.184.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7357 (0x1cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FCCB738CD8AD38D75B41B0B8D487C657AE73FA80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:85:62:8d:bf:5c:ca:10:fa:2e:4d:21:c8:
d5:bf:6a:7a:79:ca:d2:1c:1f:f3:67:17:5b:a7:cf:
44:ee:af:a3:13:28:ad:f4:bf:0f:aa:69:38:60:8b:
52:c8:df:44:58:18:5c:c3:7e:63:c8:79:79:e6:38:
0b:ab:4f:41:90:ab:50:1f:3e:6a:85:8e:85:9f:bd:
c4:20:7d:e7:b2:6c:bd:62:98:76:25:6f:ee:2c:2c:
4b:49:18:01:7e:ef:ec:68:a9:8a:23:06:9f:84:e0:
4d:91:ad:41:0a:48:8b:bc:04:a1:d1:93:5b:92:cb:
b8:e6:ac:dc:f9:12:12:ec:36:30:01:2d:63:d1:0b:
2a:36:f3:67:c0:80:19:17:98:0d:6a:7c:8b:1e:af:
cf:c4:15:c2:5f:04:a9:f5:51:26:2f:a9:e2:6e:cf:
47:0f:5b:2f:d8:ae:d5:c3:93:a6:ca:0f:e8:21:48:
40:c8:95:4f:8a:d7:87:c9:4e:49:85:ac:19:84:6d:
8c:f0:13:df:e5:da:36:15:31:50:7a:dc:10:db:e1:
e9:10:4d:34:8f:cd:55:c9:75:78:79:a4:3a:19:71:
89:b1:7c:e6:5a:16:dd:95:51:b4:f0:72:56:cb:1a:
7d:f8:c3:2d:f9:1c:ee:a9:9c:ef:21:d7:85:30:c8:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:73:8C:D8:AD:38:D7:5B:41:B0:B8:D4:87:C6:57:AE:73:FA:80
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/_MtzjNitONdbQbC41IfGV65z-oA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.56.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:2c:cf:c7:b5:52:0d:96:50:ae:1d:40:75:c3:0b:67:09:01:
ac:e1:11:21:d3:20:38:02:11:4c:f2:dd:7f:83:cc:7f:9c:d1:
3c:50:37:f7:80:84:da:d9:ae:0e:49:b9:a5:2d:0c:2b:89:75:
69:88:bb:9e:30:af:19:1c:4e:d7:f8:ef:5e:a9:85:ed:e2:cf:
f8:66:6f:fe:9d:76:82:ad:50:e2:2c:bd:0d:72:3a:05:e2:dd:
c8:81:4c:f0:ac:a7:6d:cd:e4:78:7c:67:ca:6e:f8:d5:c2:44:
91:21:a7:67:21:ac:c5:b2:93:99:a7:ef:47:dd:1f:f2:3f:e6:
46:f0:d6:0f:03:37:58:77:b1:dc:c5:7a:69:e6:90:c9:8e:91:
c8:e4:4a:b3:ae:83:8b:d4:ce:21:51:d8:a2:19:0e:c8:70:27:
cb:ea:f1:e9:ac:7d:55:29:ec:cd:47:38:6f:c1:70:c5:c7:77:
cd:a6:45:c5:39:c0:4f:8e:27:1d:bc:3a:fc:e2:bb:5f:35:89:
96:46:4b:af:1a:28:38:58:03:a3:6f:29:4f:39:c0:94:d1:8b:
c0:80:f1:85:a9:3a:b0:ca:5c:44:09:4a:bd:c1:80:13:87:7e:
18:90:5f:b0:57:ad:15:41:2e:10:96:86:2d:c9:fa:f4:62:e1:
d9:a9:cd:a7
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx
MzU4MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZDQ0I3MzhDRDhBRDM4
RDc1QjQxQjBCOEQ0ODdDNjU3QUU3M0ZBODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKQoVijb9cyhD6Lk0hyNW/anp5ytIcH/NnF1unz0Tur6MTKK30
vw+qaThgi1LI30RYGFzDfmPIeXnmOAurT0GQq1AfPmqFjoWfvcQgfeeybL1imHYl
b+4sLEtJGAF+7+xoqYojBp+E4E2RrUEKSIu8BKHRk1uSy7jmrNz5EhLsNjABLWPR
Cyo282fAgBkXmA1qfIser8/EFcJfBKn1USYvqeJuz0cPWy/YrtXDk6bKD+ghSEDI
lU+K14fJTkmFrBmEbYzwE9/l2jYVMVB63BDb4ekQTTSPzVXJdXh5pDoZcYmxfOZa
Ft2VUbTwclbLGn34wy35HO6pnO8h14UwyFWXAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU/MtzjNitONdbQbC41IfGV65z+oAwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvX010empOaXRPTmRi
UWJDNDFJZkdWNjV6LW9BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7S4ODANBgkqhkiG9w0BAQsFAAOCAQEAPSzPx7VSDZZQrh1AdcMLZwkBrOER
IdMgOAIRTPLdf4PMf5zRPFA394CE2tmuDkm5pS0MK4l1aYi7njCvGRxO1/jvXqmF
7eLP+GZv/p12gq1Q4iy9DXI6BeLdyIFM8Kynbc3keHxnym741cJEkSGnZyGsxbKT
mafvR90f8j/mRvDWDwM3WHex3MV6aeaQyY6RyORKs66Di9TOIVHYohkOyHAny+rx
6ax9VSnszUc4b8Fwxcd3zaZFxTnAT44nHbw6/OK7XzWJlkZLrxooOFgDo28pTznA
lNGLwIDxhak6sMpcRAlKvcGAE4d+GJBfsFetFUEuEJaGLcn69GLh2anNpw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:53 2025 by rpki-client