Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/F1YojpyGroHDj-V-Sq4BhLxcaUA.roa
File: F1YojpyGroHDj-V-Sq4BhLxcaUA.roa (raw, json)
Hash identifier: 2x088bxvbb0H1FOh1zs7KjWTwW6M73EQfAEhWHxKNik=
Subject key identifier: 17:56:28:8E:9C:86:AE:81:C3:8F:E5:7E:4A:AE:01:84:BC:5C:69:40
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CA5
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/F1YojpyGroHDj-V-Sq4BhLxcaUA.roa
Signing time: Thu 02 Jan 2025 13:58:17 +0000
ROA not before: Thu 02 Jan 2025 13:58:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 180.184.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7333 (0x1ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1756288E9C86AE81C38FE57E4AAE0184BC5C6940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:1b:5f:06:e6:a1:36:e0:1a:b1:5c:c8:f9:
86:2b:26:38:aa:59:ef:21:99:18:f6:c1:b9:e9:29:
5e:ca:71:2b:9b:77:6e:ac:e6:51:18:44:c7:2f:f7:
4b:78:77:10:56:12:8a:91:e1:aa:28:c2:ed:af:30:
42:e0:77:b2:fe:01:ab:ed:34:21:7b:93:a2:40:6b:
f0:f9:91:03:ca:69:e3:0e:a2:7d:78:d7:c9:98:46:
cf:d8:0d:1f:87:cc:b0:66:32:eb:17:09:47:48:b0:
4b:35:5e:f0:27:f5:ee:af:66:b5:ae:e5:af:06:e6:
47:d5:79:5b:98:00:de:e0:a9:4c:06:13:98:4a:a1:
45:08:5e:87:08:05:b2:ef:9f:a5:77:5e:79:02:71:
13:67:94:fa:e7:19:da:88:eb:ed:e8:7f:ec:05:2b:
22:c8:a7:6e:5c:c5:ab:a7:b5:f1:90:78:ff:98:54:
fe:12:e1:fd:11:c0:76:1f:41:ee:cd:3e:dc:1d:38:
33:01:56:5a:6d:1b:e1:4e:7d:fd:2f:f8:81:af:ca:
db:af:96:83:f7:6f:1e:db:b9:79:25:99:22:25:61:
d4:22:a9:c7:08:11:74:ae:3f:7a:51:41:a9:16:79:
d1:65:8c:6a:ac:b7:5c:c5:33:05:aa:68:47:98:2c:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:28:8E:9C:86:AE:81:C3:8F:E5:7E:4A:AE:01:84:BC:5C:69:40
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/F1YojpyGroHDj-V-Sq4BhLxcaUA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.24.0/21
Signature Algorithm: sha256WithRSAEncryption
95:4b:a5:e6:fa:d6:1e:f8:79:b0:23:b2:58:68:69:b2:4d:b3:
f7:79:34:95:a6:70:c6:1e:18:96:de:83:66:33:6a:cd:32:97:
27:d9:5c:6f:45:d8:ca:fe:71:0f:66:c6:f8:e0:28:a7:c6:5c:
2b:a2:25:94:f1:54:3b:72:68:86:db:3e:93:8c:c5:75:c0:f8:
ba:e6:46:a7:7f:97:9d:6a:20:6e:c4:a8:9a:f6:21:f1:84:a8:
e1:dd:08:9f:36:4a:83:ab:0a:33:9d:44:7a:2a:82:62:ca:d5:
35:0c:3d:5f:40:a3:62:42:64:e7:8a:05:a8:ca:3a:92:13:fc:
52:41:50:88:f1:6d:90:c5:c4:e7:c3:9b:d1:22:99:36:58:b1:
7a:d7:85:c4:96:9a:f5:a6:88:dc:fd:3c:9a:80:e5:9a:3f:c4:
ce:eb:a9:75:a8:a3:23:3f:6b:dc:33:fb:d2:9c:5b:c9:af:c0:
9f:46:58:d9:12:64:95:52:08:52:6a:e0:88:1e:b9:ea:2a:cd:
9d:2a:35:25:f5:7d:df:39:1d:ae:e4:1d:d2:7b:10:87:e0:db:
75:28:b0:0a:a3:55:9b:a7:76:a7:f0:a0:b1:15:71:2e:e3:38:
af:7d:07:30:1b:dc:2c:ff:f5:15:25:71:a0:81:2a:f2:e5:30:
50:05:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:36:12 2025 by rpki-client