Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/EPXJoA7shebX2lGfOch7bZHO6lk.roa
File: EPXJoA7shebX2lGfOch7bZHO6lk.roa (raw, json)
Hash identifier: cGr/+/z1yDFpu/uYkIDUKk5o7DMlPDKt7liyHvo2i4Q=
Subject key identifier: 10:F5:C9:A0:0E:EC:85:E6:D7:DA:51:9F:39:C8:7B:6D:91:CE:EA:59
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CAC
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/EPXJoA7shebX2lGfOch7bZHO6lk.roa
Signing time: Thu 02 Jan 2025 13:58:19 +0000
ROA not before: Thu 02 Jan 2025 13:58:19 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 180.184.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7340 (0x1cac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=10F5C9A00EEC85E6D7DA519F39C87B6D91CEEA59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:96:58:cd:3a:9c:9c:b7:90:e3:e5:0a:09:
1a:2e:94:3f:32:b6:58:ef:bf:0a:60:4b:dc:b9:f4:
8e:83:ba:42:58:52:78:31:0b:b0:79:50:ba:c9:2c:
00:22:03:e6:27:ee:3e:f2:60:d9:b4:c8:c6:b4:e8:
33:4b:72:fd:d1:6b:a8:19:20:33:7a:dd:24:d2:d2:
c0:43:4a:63:3a:bb:63:b3:90:dd:41:92:1b:b1:4e:
13:f4:47:fd:37:26:34:0e:5b:0b:d4:2c:7a:37:b6:
78:ef:33:2a:d2:18:98:77:5d:14:3e:9a:28:8a:0f:
44:0c:68:b6:0c:0c:ae:78:55:7a:d1:09:fb:a0:3c:
56:47:e4:e7:40:39:c8:33:c6:ba:86:de:6a:32:27:
82:55:28:bb:fe:3e:e3:97:96:c0:87:dc:dd:c1:3b:
61:03:99:e6:9e:07:d1:b9:bb:2f:78:c9:97:fe:eb:
e6:0a:1a:27:ae:ba:83:be:a2:3c:8c:f4:43:cd:56:
eb:22:13:32:ed:d0:7b:3a:6e:42:de:34:a9:c0:8a:
c7:7f:bd:90:2b:cf:4d:86:78:73:f7:e0:bc:53:00:
21:0b:31:ac:f6:5d:aa:35:36:a2:a2:9d:62:3f:c0:
80:43:ac:96:1c:3a:d3:3e:0f:17:37:83:48:7d:db:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:C9:A0:0E:EC:85:E6:D7:DA:51:9F:39:C8:7B:6D:91:CE:EA:59
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/EPXJoA7shebX2lGfOch7bZHO6lk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.152.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:2e:30:4c:19:75:81:55:64:46:4b:07:9d:f5:e7:af:83:2d:
f0:e6:55:57:d7:83:f6:b6:11:55:53:d1:6f:5d:3e:43:cd:0a:
21:6d:6b:6d:36:da:a6:e8:a0:c7:bf:bb:3c:6f:ee:c4:07:e5:
d6:77:10:75:44:67:2e:fe:62:cc:dd:87:b5:ef:9b:6c:d4:bd:
20:2a:e0:68:2e:0b:cf:69:df:de:ed:35:d6:1f:6f:0b:23:49:
3d:8b:7c:e5:a1:34:92:bd:1c:c4:2b:5e:97:b4:10:01:d9:f6:
f7:ff:d4:fe:ff:d9:20:a6:93:aa:fa:98:b9:9e:4c:ab:91:89:
26:98:95:b6:85:29:03:3f:13:38:69:06:47:50:26:ea:c8:9d:
db:53:3b:69:98:49:e3:ea:40:1d:96:44:9e:2c:7d:06:81:06:
44:46:30:6c:01:43:a8:30:ad:9e:9f:b4:05:92:41:d0:5f:10:
58:3c:34:5a:43:ee:58:95:ee:97:6f:7d:3d:93:ff:8f:b5:84:
c0:b4:d7:99:b8:ee:1c:23:07:b8:69:f2:4c:90:f6:22:c3:9c:
0f:a3:0e:e2:00:08:67:9c:b9:d9:40:80:52:ac:86:ba:89:fa:
2e:8a:97:78:65:36:e6:78:45:13:ab:12:15:4c:92:1d:1c:03:
d7:c6:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:32 2025 by rpki-client