Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/hu7fPe6J5JUaliyOtZpOr3Jio1Y.roa
File: hu7fPe6J5JUaliyOtZpOr3Jio1Y.roa (raw, json)
Hash identifier: zz8Yn1YAtZN8RT0omllVKHwfw+qxYpOJrOYEpGrFDX4=
Subject key identifier: 86:EE:DF:3D:EE:89:E4:95:1A:96:2C:8E:B5:9A:4E:AF:72:62:A3:56
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CB0
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/hu7fPe6J5JUaliyOtZpOr3Jio1Y.roa
Signing time: Thu 02 Jan 2025 13:58:20 +0000
ROA not before: Thu 02 Jan 2025 13:58:20 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138421
IP address blocks: 180.184.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7344 (0x1cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=86EEDF3DEE89E4951A962C8EB59A4EAF7262A356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:33:93:af:88:2f:40:74:4f:c9:cf:02:2e:
de:c8:da:4b:8d:db:d6:f9:b7:a9:2b:52:da:6f:43:
ef:c2:87:14:d5:07:78:20:74:cf:17:5f:a6:61:5d:
6c:f4:3d:16:1a:5b:ab:53:60:6f:56:38:82:b2:4c:
84:af:9e:1e:09:dd:0b:6c:2f:ec:39:89:c0:3c:e9:
a1:5e:12:e6:89:9c:22:09:1d:aa:3c:c6:9d:46:aa:
7f:e3:da:2a:5d:09:4b:83:b1:0d:be:f4:9a:79:81:
25:3b:1d:34:d7:de:69:63:39:62:cb:67:3f:e5:e5:
30:83:24:dc:60:2f:c3:20:fb:b1:39:9b:a8:b9:64:
bc:d3:3c:87:6f:9a:4b:c9:dc:b0:fe:8b:0a:15:72:
fe:70:22:31:34:3d:ae:3f:7e:d0:78:5f:d5:da:13:
d6:a5:06:e9:4f:d1:0a:2b:8a:f9:fe:e0:a7:7a:9f:
eb:82:54:28:49:67:6c:b9:8d:5e:51:fe:9e:4c:7a:
b3:1d:e0:18:2d:bd:9d:ac:50:f4:55:cc:f2:f7:1d:
ad:75:10:19:71:a2:17:83:66:28:2e:d0:be:4e:4b:
38:73:b1:91:98:71:cb:d7:f9:a4:7f:ef:5b:69:30:
b3:4a:5c:cd:a8:1f:a7:0a:c6:d6:08:dd:6e:4c:59:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EE:DF:3D:EE:89:E4:95:1A:96:2C:8E:B5:9A:4E:AF:72:62:A3:56
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/hu7fPe6J5JUaliyOtZpOr3Jio1Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.152.0/22
Signature Algorithm: sha256WithRSAEncryption
85:77:18:44:d6:77:00:e8:b9:a8:c9:06:51:77:85:1d:f1:b6:
86:b0:42:6d:bd:a5:1e:90:50:67:7b:ba:af:69:1b:49:a2:6a:
d7:7d:a1:c4:c9:54:bb:ee:6c:1c:66:4d:d1:50:19:f8:1c:b9:
a9:88:c5:2d:f5:7d:5f:69:42:76:4d:53:85:aa:d1:06:26:51:
a1:ef:01:81:93:7c:be:e2:46:2b:86:f2:fe:81:99:c6:34:19:
50:5b:a3:dd:0c:1b:66:fc:24:d3:5c:22:dd:25:c7:e5:41:b0:
7b:c7:c0:be:1a:5b:fb:ee:9c:4b:c5:aa:6b:59:28:db:68:1e:
65:07:0c:fc:3c:d5:eb:89:62:68:1c:0d:51:43:dd:94:5e:13:
eb:29:23:82:db:cc:9a:72:50:b0:3a:81:f9:3a:46:94:92:cd:
07:df:14:49:b7:b7:6d:22:e2:c9:1a:7d:35:c8:5c:31:f3:e4:
9b:fb:2d:7d:f1:20:94:15:6e:95:90:5f:2e:f1:49:47:13:40:
67:74:15:c2:ad:f7:8e:af:05:38:c7:ed:ee:63:a0:ae:6b:16:
ea:b0:16:12:ef:f0:24:23:09:dd:58:18:f4:fa:50:8c:b2:38:
1b:89:eb:6a:2c:93:13:65:db:73:7f:96:f5:4a:5a:0d:00:d8:
1c:02:70:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:20:36 2025 by rpki-client