Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/Azoc-91zXDLxvv3xBd-PKdLYdqU.roa
File: Azoc-91zXDLxvv3xBd-PKdLYdqU.roa (raw, json)
Hash identifier: nxU+CDKTYCIRA4+qrT4bkptlCZnZ/PUr7AkT/2uVV6E=
Subject key identifier: 03:3A:1C:FB:DD:73:5C:32:F1:BE:FD:F1:05:DF:8F:29:D2:D8:76:A5
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CC5
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Azoc-91zXDLxvv3xBd-PKdLYdqU.roa
Signing time: Thu 02 Jan 2025 13:58:26 +0000
ROA not before: Thu 02 Jan 2025 13:58:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 58542
IP address blocks: 180.184.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7365 (0x1cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=033A1CFBDD735C32F1BEFDF105DF8F29D2D876A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:b5:bf:0e:aa:6e:f7:18:e2:ad:12:77:57:
d8:16:4a:25:e2:1a:83:d6:47:8d:ae:cb:df:e7:8b:
76:a1:00:ed:7f:30:a8:d8:d9:3f:22:2d:92:0d:18:
bf:00:9a:9c:a0:95:1d:37:e0:0d:1d:61:d0:e9:93:
22:34:94:1c:e6:ab:b8:32:6c:ab:16:03:51:36:1d:
fd:06:69:cd:f6:7a:86:4e:b5:fa:59:38:3a:b6:67:
00:fa:a2:da:19:8a:df:34:83:32:e3:62:0c:7e:33:
b0:12:e7:72:bb:18:05:fc:e1:ba:ac:12:61:ac:25:
33:c2:54:4a:0f:00:09:92:c6:62:a4:17:ca:f0:54:
c1:63:9e:7e:d4:af:cc:5f:b0:9d:67:45:a2:74:b7:
3c:80:ea:eb:48:de:4f:ce:00:49:63:ab:ed:2e:d2:
a5:ac:5a:96:61:57:05:bb:3b:42:1f:17:ff:33:b7:
ce:e3:3b:ca:6e:a4:b9:34:97:e7:3c:9d:df:02:f7:
0b:ad:ba:4a:e1:ad:2d:8b:8c:5b:42:35:d5:c6:d5:
22:26:00:4a:a6:3c:5a:e8:4a:f4:f9:7a:38:4e:5a:
6d:ab:52:bb:58:c1:2c:a7:04:5d:d2:0e:4b:10:6d:
23:50:0d:03:bc:9b:ca:d2:ca:29:7e:0a:78:80:62:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:1C:FB:DD:73:5C:32:F1:BE:FD:F1:05:DF:8F:29:D2:D8:76:A5
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Azoc-91zXDLxvv3xBd-PKdLYdqU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.56.0/21
Signature Algorithm: sha256WithRSAEncryption
43:e3:ba:7f:fe:5c:9b:45:2e:26:e6:02:9f:40:58:d7:ca:f0:
6a:36:63:49:13:7b:e3:15:02:10:72:05:8a:82:4d:b7:7e:22:
41:b9:33:75:dd:f0:12:27:ab:15:0e:aa:e9:e0:81:27:a8:1e:
b3:24:e9:2a:8b:64:a8:13:a0:a5:85:54:9b:a2:db:ee:12:4e:
23:59:ee:45:60:5a:1d:48:93:8f:fa:3f:7c:12:9e:eb:34:bc:
14:dc:83:fd:17:f4:31:54:29:33:9e:34:43:1f:be:ef:59:32:
3a:9f:d5:60:d1:46:1b:3d:15:7c:58:58:4c:50:f3:4a:56:2f:
51:b6:ba:47:5d:22:b2:7b:95:ce:33:8d:c7:b3:d9:1f:dc:7c:
16:df:88:2d:20:30:8d:4f:e1:01:a1:88:9c:38:38:e8:53:8b:
82:77:1c:5b:cb:7d:2d:a3:22:71:84:bd:23:16:2e:f7:a5:ad:
11:f4:3c:6d:00:80:40:b2:45:96:fd:3e:d8:9b:79:3c:c4:64:
e8:7b:bb:cc:2d:20:1e:32:ef:ec:ef:dc:54:08:4c:f1:49:70:
96:fc:f3:b0:30:10:1b:fe:23:01:a1:96:c7:86:f7:33:37:3c:
4b:9d:23:e4:c2:7b:70:9c:80:4d:1b:f0:b4:31:d6:b1:2a:7a:
af:e5:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:21:23 2025 by rpki-client