Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/KofTQezOKO0tRcxGvhhrzeIHajI.roa
File: KofTQezOKO0tRcxGvhhrzeIHajI.roa (raw, json)
Hash identifier: 7czSbGHciu/s/5L42o3q2c0zkZWTCYUIkVFVzPR58PY=
Subject key identifier: 2A:87:D3:41:EC:CE:28:ED:2D:45:CC:46:BE:18:6B:CD:E2:07:6A:32
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CB6
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/KofTQezOKO0tRcxGvhhrzeIHajI.roa
Signing time: Thu 02 Jan 2025 13:58:22 +0000
ROA not before: Thu 02 Jan 2025 13:58:22 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 180.184.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7350 (0x1cb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2A87D341ECCE28ED2D45CC46BE186BCDE2076A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:cf:20:85:3e:87:48:3f:2f:d1:8e:e0:b5:
57:8c:25:8d:f0:b6:d6:2e:f8:29:4d:9b:a1:f4:e8:
fb:2f:b6:12:30:1e:18:41:98:b2:5f:f7:b4:09:c9:
43:f1:5c:80:19:d1:72:1c:2e:67:b7:e4:40:54:47:
79:6d:77:90:54:80:d3:72:22:cc:fe:cf:6d:6a:bd:
ae:59:50:72:17:8b:bb:0b:64:fe:1b:c5:44:4f:e0:
86:91:ef:ed:de:50:bf:45:dd:1e:0c:25:ec:21:b3:
17:d8:80:d8:ce:f6:98:59:35:4f:2d:02:3c:e5:4e:
f0:35:f9:83:3b:20:2b:37:2f:da:69:a2:38:5b:33:
71:7b:db:14:f2:63:6d:71:2f:03:27:74:d6:a3:a5:
12:68:d2:5e:da:31:38:7a:92:f7:80:82:94:6d:ee:
74:92:fc:85:ef:c6:09:e5:83:35:6a:41:90:3d:05:
a5:c3:44:fc:ec:87:b3:e0:d6:b1:95:35:1b:a5:89:
51:ef:47:77:ee:d1:fb:8d:c6:e7:21:ec:fd:fe:92:
05:74:e6:95:e3:84:00:ef:1d:f8:9c:37:d0:6d:16:
e2:34:47:32:d5:38:4b:f6:8e:e4:84:da:36:59:b4:
11:77:e0:2c:ca:08:e7:80:ec:6f:9a:b7:9b:6c:d1:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:D3:41:EC:CE:28:ED:2D:45:CC:46:BE:18:6B:CD:E2:07:6A:32
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/KofTQezOKO0tRcxGvhhrzeIHajI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.144.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:f0:28:d7:0c:92:b1:1f:0d:ff:f3:c4:ea:9d:21:b5:a6:0e:
44:35:a8:6e:4c:ee:bb:b7:43:65:cd:34:65:00:6a:dd:9c:18:
f0:e4:c8:5a:2e:ee:4c:65:20:2d:a8:1d:0d:9b:b4:01:10:43:
ec:89:3d:9e:cd:43:2a:73:d9:d0:ce:01:a9:8b:80:7d:7d:ef:
4d:68:85:1e:8c:c4:bf:17:df:be:fe:36:a1:bd:28:e4:a3:47:
9a:fd:cf:2b:b9:06:34:ca:02:e4:bd:e0:f5:6e:02:1c:88:80:
8a:bd:34:4c:0a:d6:52:f1:90:97:23:3b:53:b5:e5:d8:89:34:
53:18:33:19:24:a1:a5:a0:ac:34:ed:9e:dd:af:d3:df:11:81:
e4:d2:75:38:09:32:19:30:4b:9f:10:fb:9e:79:01:be:83:3b:
16:cf:3e:4d:01:62:fc:b8:7d:89:b6:2b:6b:00:cf:14:28:55:
bb:5a:d4:f7:f0:54:89:2c:3f:f2:78:9b:8c:81:be:05:b1:ff:
6b:a2:ae:68:d8:c5:c1:7a:ef:47:2d:1d:d4:1c:0d:9e:02:6b:
66:24:05:64:a5:72:90:d7:3c:ef:04:9d:57:0a:93:6f:17:da:
68:0b:3b:dd:40:8d:41:b6:fc:f0:22:14:2b:35:3a:af:a3:9b:
db:ab:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:23 2025 by rpki-client