Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/-oarKBaNq-cyK8DlGZcLwP_bfpA.roa
File: -oarKBaNq-cyK8DlGZcLwP_bfpA.roa (raw, json)
Hash identifier: 4R0mR0kOsfcyggr5ekr6OCydQ4hlqLwdmLga0aCq/SY=
Subject key identifier: FA:86:AB:28:16:8D:AB:E7:32:2B:C0:E5:19:97:0B:C0:FF:DB:7E:90
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1573
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/-oarKBaNq-cyK8DlGZcLwP_bfpA.roa
Signing time: Fri 17 Jan 2025 01:27:45 +0000
ROA not before: Fri 17 Jan 2025 01:27:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7018
IP address blocks: 180.223.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5491 (0x1573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FA86AB28168DABE7322BC0E519970BC0FFDB7E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:4c:0b:e9:c9:cc:f0:52:ae:77:f7:67:4b:
f0:9c:40:be:9d:2f:4e:1c:64:f4:3f:ab:7c:dc:90:
5f:f4:cf:2a:ca:54:a5:5c:e3:82:30:5b:bd:a6:1b:
bc:42:f8:89:4f:14:1c:13:9c:ac:25:dc:34:fd:2b:
a6:d4:77:2d:07:48:c4:ac:f0:f1:50:ce:d7:79:6a:
33:39:da:9c:24:0a:1b:41:ba:6f:db:f8:9c:99:31:
f6:0f:63:92:0a:86:67:58:13:5b:77:73:fd:a4:73:
5b:f8:b4:5e:14:7f:65:2f:1e:5a:9c:a6:ed:e9:24:
b3:ce:85:11:e6:ac:3a:4d:55:6f:88:4b:64:db:73:
41:50:e9:39:3f:53:66:57:eb:a0:50:ba:34:7f:84:
38:35:6b:da:9d:24:c3:ad:2e:76:3d:8b:f8:a5:3e:
bb:0b:2d:82:b0:e8:29:18:44:da:f9:da:be:a6:a8:
e7:9d:01:65:b0:46:d1:a9:c4:76:2b:34:6a:98:f8:
69:8e:6c:87:4f:e0:44:cc:ea:58:50:b7:06:26:e4:
51:b4:7c:83:8d:b8:e0:91:5c:47:d6:ea:e0:5d:a2:
68:2f:e7:a9:13:77:90:56:48:93:0f:79:56:94:42:
62:e1:db:2b:94:18:17:9a:3d:0c:21:8e:db:81:4d:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:86:AB:28:16:8D:AB:E7:32:2B:C0:E5:19:97:0B:C0:FF:DB:7E:90
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/-oarKBaNq-cyK8DlGZcLwP_bfpA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.80.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:2a:67:cc:6b:3d:b4:17:ff:f0:53:94:be:de:fc:df:71:82:
78:dd:ad:fc:b2:d6:ea:07:9e:91:9f:8e:e0:a3:bf:ec:48:76:
b3:09:3a:2f:73:b6:f7:dc:58:80:d0:38:71:8b:84:0a:3e:4e:
60:3d:43:0f:a4:8a:1f:a5:13:48:f7:23:4c:06:0a:9c:8b:4a:
cd:23:90:22:52:98:5c:dd:71:74:5b:e1:2e:12:d2:28:21:f8:
8b:ea:3a:fa:b2:6a:bc:55:9e:1c:b1:de:6c:c3:09:e3:db:aa:
a8:d1:ff:ed:8a:84:56:a6:59:5f:96:64:c1:d9:72:31:66:d9:
b9:b1:cf:2c:58:16:70:39:87:55:61:8b:6d:d3:48:a0:5c:77:
b2:b9:f3:21:37:c8:03:f4:1b:b0:47:05:47:92:ed:6c:74:ea:
0e:69:1a:71:34:78:ea:57:5a:7c:9d:5a:dc:4e:5f:02:74:e9:
32:48:b8:88:0a:c7:73:e7:a2:46:18:2d:72:75:bf:be:82:25:
89:34:f3:28:81:06:85:3b:45:58:0f:69:96:b9:cd:f9:f9:77:
35:f8:55:b4:f6:6e:4d:d3:b3:89:dc:19:39:33:16:2a:f8:0d:
98:4e:9a:dd:d8:c4:b8:e6:28:cb:c0:6c:43:90:8e:be:2b:e0:
fe:64:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:10 2025 by rpki-client