Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/8SmGRlTlCy-GVDJpaOrk6aoXFik.roa
File: 8SmGRlTlCy-GVDJpaOrk6aoXFik.roa (raw, json)
Hash identifier: d1fKrULhXVx/Z/wCgerizdbxLkRHVzGhmQc90ooiOG0=
Subject key identifier: F1:29:86:46:54:E5:0B:2F:86:54:32:69:68:EA:E4:E9:AA:17:16:29
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CC9
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/8SmGRlTlCy-GVDJpaOrk6aoXFik.roa
Signing time: Thu 02 Jan 2025 13:58:27 +0000
ROA not before: Thu 02 Jan 2025 13:58:27 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 58542
IP address blocks: 180.184.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7369 (0x1cc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F129864654E50B2F8654326968EAE4E9AA171629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:e9:0a:05:53:01:5e:84:92:86:a9:c8:b4:
dc:4f:97:7c:cb:9e:63:dd:d8:fe:73:a1:26:75:82:
2b:70:87:25:70:6c:4a:8f:53:b8:5d:4d:cd:ee:bb:
01:fa:e2:fb:91:10:10:f7:6c:76:c9:68:be:b4:b1:
0a:18:83:1b:31:d2:66:8e:2b:a8:77:61:79:ab:0d:
72:dd:04:db:10:18:55:33:f0:5f:a2:45:af:c3:00:
a2:25:2d:15:ef:08:21:8f:e9:93:9d:21:29:c0:c4:
ae:4e:71:58:dd:5e:97:64:d1:0a:6d:67:b4:36:65:
84:9a:ba:da:70:40:e7:3f:ce:4a:5a:c3:32:40:ec:
3c:c8:d8:d4:d5:eb:1a:3c:88:2d:cf:91:2b:e8:90:
6d:90:60:0e:cd:b4:be:d4:d9:5c:6e:79:61:1e:f0:
01:cd:10:1c:93:ce:d6:4c:ea:85:30:98:38:f5:bc:
58:cd:f0:64:66:11:4e:0c:03:d5:82:36:05:fe:dc:
3f:24:02:88:60:50:cd:87:69:79:ac:dd:2b:29:e6:
e1:54:b9:31:aa:dc:f3:30:56:00:11:0a:2a:28:df:
1d:d4:c8:26:00:93:7e:0b:c7:63:f5:e2:53:54:a6:
83:b1:cd:72:2f:ec:51:c2:03:76:c9:81:3c:16:0d:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:86:46:54:E5:0B:2F:86:54:32:69:68:EA:E4:E9:AA:17:16:29
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/8SmGRlTlCy-GVDJpaOrk6aoXFik.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.24.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:08:b3:05:60:7f:ce:32:a8:bc:90:ad:b2:27:05:3b:d3:72:
30:59:3e:87:4e:ff:4c:cf:65:99:ae:40:a6:77:f9:13:27:ad:
18:19:71:cc:17:5a:ce:bb:d9:eb:5d:ab:e7:b8:09:fe:2a:1f:
ca:36:8d:c7:4d:3b:91:a6:eb:71:0c:95:97:e2:85:72:48:e4:
e7:8e:ab:b5:5b:80:73:84:3e:43:3c:2c:97:4f:7d:2a:59:49:
c2:b0:c5:35:68:aa:21:38:58:6f:9c:b0:45:43:dd:8f:29:89:
4c:ad:9e:9a:6a:e2:a5:9e:6d:fe:1c:bc:b8:e9:5f:be:08:d6:
78:92:75:ef:1f:34:93:1f:e1:0e:60:b3:4f:51:b6:79:4f:58:
53:46:80:74:b8:84:a5:0e:d7:e4:ea:6d:c3:a7:53:5d:02:68:
e6:3f:f4:e3:b8:cc:67:12:85:1e:39:e3:8a:39:71:20:a0:8e:
a2:3c:ed:d8:a4:84:fd:aa:60:59:22:31:42:42:d1:48:b9:ed:
c0:80:88:7d:dd:44:31:64:de:87:f8:44:8f:c8:48:b1:02:1d:
d8:28:8f:04:1c:ea:28:4a:6d:9d:ce:70:6b:e2:21:5b:ef:0a:
d7:42:c8:cf:2c:c6:e2:db:2d:e6:b4:3a:67:db:fe:61:d2:1a:
29:e3:49:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:21:23 2025 by rpki-client