Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/LUCASGKxQ8m7KeAs6oXyEMJkkgU.roa
File: LUCASGKxQ8m7KeAs6oXyEMJkkgU.roa (raw, json)
Hash identifier: wtWowELodbWa8ZNCqxTbDerpWgm8t5yN27gerVdT3dI=
Subject key identifier: 2D:40:80:48:62:B1:43:C9:BB:29:E0:2C:EA:85:F2:10:C2:64:92:05
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1572
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/LUCASGKxQ8m7KeAs6oXyEMJkkgU.roa
Signing time: Fri 17 Jan 2025 01:27:45 +0000
ROA not before: Fri 17 Jan 2025 01:27:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 180.223.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5490 (0x1572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2D40804862B143C9BB29E02CEA85F210C2649205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ca:71:9e:3f:2c:c3:ab:c5:30:ae:1d:bc:ef:
11:08:2a:13:3e:0b:ba:51:2f:bf:a8:4f:01:60:fd:
78:81:de:12:c6:51:b6:19:65:1e:31:c0:ca:03:bc:
10:48:c9:e9:31:1a:4f:f4:19:33:93:c3:ac:a0:05:
04:66:9e:cf:f6:97:1b:9d:20:6c:ca:6f:46:d5:62:
77:7b:8b:8d:dd:44:05:67:58:a3:d8:d0:0a:49:92:
7a:3e:bd:48:90:e5:ec:83:03:b3:d3:53:42:95:70:
67:29:b6:d5:ac:ce:b5:7c:61:c3:62:02:6e:56:03:
75:f8:f3:b3:6d:18:e5:ce:76:fb:4a:26:4b:19:65:
40:b8:5c:d7:bb:b4:15:8d:0e:bb:ba:b3:fa:84:ee:
c3:96:09:eb:a0:51:a8:f7:4e:89:8b:67:78:e7:6f:
31:95:95:b1:fc:2e:1d:32:54:f7:3f:dc:d1:97:52:
66:43:46:cd:4a:72:b2:ee:9c:3c:04:55:f6:5d:0c:
c3:a3:a8:33:e0:83:d0:27:7f:45:ac:98:5e:c6:1b:
2f:0d:6b:ac:80:b5:f7:1a:3b:55:60:b3:a3:0b:e9:
6c:84:56:99:c4:f3:19:8e:68:1b:b0:69:cd:4b:4e:
eb:dd:df:c3:67:c9:79:ba:12:b4:b4:81:04:c3:53:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:40:80:48:62:B1:43:C9:BB:29:E0:2C:EA:85:F2:10:C2:64:92:05
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/LUCASGKxQ8m7KeAs6oXyEMJkkgU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.120.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:68:0b:3a:e5:2b:6e:a3:9e:93:bb:a5:28:a1:07:1b:36:37:
94:db:a4:26:5f:35:d5:66:a8:b3:dd:ed:6f:66:84:86:a9:b5:
7f:43:b0:59:1b:d1:21:e4:eb:4d:cf:c7:94:e8:b5:23:75:e4:
47:d2:fa:c2:7a:cb:b9:c5:6d:7f:f8:76:b9:9a:59:ea:9c:06:
58:1f:d6:48:3f:58:a1:58:b3:f7:a6:37:88:1b:15:3c:3f:1e:
d1:10:3e:56:ba:71:47:1f:8b:5a:56:91:f4:d7:ed:5f:af:0c:
70:df:b7:6a:b4:8f:1f:7b:e9:fc:2f:79:aa:cb:83:01:3f:3f:
a9:f0:40:24:d7:f6:68:4f:55:1f:ec:52:95:11:2b:a9:fe:7d:
26:46:39:25:d2:d9:a8:cf:b6:07:77:8c:0f:5d:74:1d:fe:48:
03:12:74:3f:85:2a:0d:74:45:4d:1c:95:ba:24:f8:b1:94:5d:
38:86:fc:59:3f:1b:73:aa:85:8d:e9:76:c1:69:a5:d3:da:ad:
5f:19:d0:3e:cf:18:f1:ec:f9:24:0c:bd:78:68:f3:6b:e5:58:
eb:c5:09:42:f1:f9:ca:6d:ec:ad:2e:c6:f5:86:2c:13:bf:41:
c1:1a:91:a0:78:f2:c3:42:ad:67:aa:87:7f:79:c4:d0:12:28:
0b:7a:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:28:55 2025 by rpki-client