Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/0uE1nTZWK7MFHae-Bykd-3vaeeQ.roa
File: 0uE1nTZWK7MFHae-Bykd-3vaeeQ.roa (raw, json)
Hash identifier: jhqW7Cm/YRW1/zfRUT3XUk8mOHySIYiMc2R5HPLI2O4=
Subject key identifier: D2:E1:35:9D:36:56:2B:B3:05:1D:A7:BE:07:29:1D:FB:7B:DA:79:E4
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1558
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/0uE1nTZWK7MFHae-Bykd-3vaeeQ.roa
Signing time: Tue 14 Jan 2025 06:39:08 +0000
ROA not before: Tue 14 Jan 2025 06:39:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 23532
IP address blocks: 180.223.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5464 (0x1558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 14 06:39:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D2E1359D36562BB3051DA7BE07291DFB7BDA79E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:45:ba:3c:8a:31:88:36:09:7f:9c:bd:55:
ff:34:16:70:1c:51:e4:7d:3e:cb:4a:32:c7:d4:22:
94:36:56:5e:a4:6d:70:1d:9f:57:48:80:5a:54:17:
01:13:90:73:bb:f0:3a:7d:b6:3c:a9:d1:03:cb:d2:
58:3f:4f:fb:44:9c:18:87:42:9b:1d:f9:d7:cb:21:
75:62:4c:10:8a:28:8a:04:79:95:13:a3:68:bf:ef:
67:67:02:7f:7d:3e:8a:c8:e3:2f:10:d7:c8:a6:3f:
cf:24:27:ce:ec:d9:97:3a:9c:b6:87:e8:44:8c:79:
b1:e6:fb:13:2a:32:33:0f:b5:8c:08:bc:1a:22:83:
bc:29:d7:f8:ca:0c:7e:4a:b7:ff:f2:02:a9:40:7c:
ab:25:3b:1e:3f:5d:59:44:6b:16:2f:d7:26:ce:95:
9a:1e:a1:0d:fc:2d:2f:71:6d:a9:c7:16:50:4f:87:
d5:7f:88:0f:d9:90:4e:1c:33:fc:97:35:af:4e:9a:
64:4f:c9:05:ce:13:c3:c6:eb:12:af:4f:14:ca:49:
d2:00:fc:5c:29:ca:38:3f:41:7a:3d:5a:cc:45:7a:
fe:8f:aa:a9:16:30:2c:17:a1:af:c3:2e:be:cc:8e:
2d:82:3b:7d:64:fe:d0:56:be:74:d1:de:c0:0c:42:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E1:35:9D:36:56:2B:B3:05:1D:A7:BE:07:29:1D:FB:7B:DA:79:E4
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/0uE1nTZWK7MFHae-Bykd-3vaeeQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.148.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:36:17:98:c2:4e:d9:ab:0a:2a:a4:03:48:e3:ae:4c:78:ed:
53:fd:ac:73:72:9d:41:34:9a:53:63:c8:96:62:a8:7b:7c:18:
6e:c7:44:b5:af:68:a8:ea:e9:22:89:2d:2f:de:97:52:29:f4:
68:19:80:7e:12:27:72:92:77:5d:26:4f:38:ac:1d:dc:a4:27:
96:c3:30:e1:74:82:e9:0e:1b:3f:0d:c2:e1:51:b1:ce:9e:40:
65:f7:b4:b3:70:74:5f:9f:a2:cd:ab:1f:5d:27:a0:7d:f7:b2:
71:d7:4e:32:c7:fa:9c:b7:3a:ee:c5:ab:d9:03:6d:79:45:94:
4d:d3:a6:89:3f:cf:64:46:a1:1b:47:30:16:a7:30:a4:eb:55:
e2:3b:0a:6a:4a:15:c9:95:79:8f:a7:f6:50:3f:75:f3:1a:f0:
3b:61:35:2e:be:eb:f9:54:a0:23:bc:e6:99:a4:d7:b4:cd:9e:
81:b7:77:21:2b:aa:cc:f4:cc:1c:74:0b:c2:08:1a:1c:46:17:
6b:b3:5d:96:cb:a6:89:44:16:85:33:f3:ff:15:47:d2:64:43:
0b:04:2b:0d:72:5f:7d:b9:d0:2d:45:cb:9d:a0:10:aa:a8:7c:
e9:04:ea:96:81:fb:34:6e:38:59:22:d8:7a:79:d1:3b:47:09:
d7:36:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:57 2025 by rpki-client