Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/skDXWyyzv0Lj1KvgNCBvi2FUFcw.roa
File: skDXWyyzv0Lj1KvgNCBvi2FUFcw.roa (raw, json)
Hash identifier: HIzGV285TxasR5i0TQi5pKyFAroFWvKaLNRXopy1JKA=
Subject key identifier: B2:40:D7:5B:2C:B3:BF:42:E3:D4:AB:E0:34:20:6F:8B:61:54:15:CC
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CA4
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/skDXWyyzv0Lj1KvgNCBvi2FUFcw.roa
Signing time: Thu 02 Jan 2025 13:58:17 +0000
ROA not before: Thu 02 Jan 2025 13:58:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138421
IP address blocks: 180.184.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7332 (0x1ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B240D75B2CB3BF42E3D4ABE034206F8B615415CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:c0:08:e9:e9:87:88:28:30:74:b1:6b:c8:
e0:0e:cd:77:df:77:27:44:21:3a:92:5e:2f:3e:d7:
4a:47:8f:c1:e3:f7:eb:a0:92:dd:41:84:9e:88:96:
08:31:1b:d9:3d:6d:f9:b4:39:ec:27:28:a8:9b:66:
7d:df:0f:a3:d3:a5:03:e8:1a:bd:10:f2:bd:57:a0:
84:fd:a1:30:2b:31:65:e3:6f:a6:fd:d0:b8:88:fc:
8b:88:3a:43:b2:45:b9:c5:47:b2:18:db:1f:29:41:
49:32:2d:31:38:10:45:86:13:50:d6:90:3a:9d:6c:
93:79:b3:2d:77:23:03:f5:15:78:9f:b1:a8:1a:e7:
34:53:43:d5:21:eb:11:82:7e:53:83:62:07:6e:bc:
78:4b:dd:e8:86:4a:01:ab:14:af:3c:80:a2:7f:15:
8c:4d:b5:d5:7e:a7:84:39:a5:ec:1a:ac:9f:46:87:
0c:29:dd:c5:49:13:9a:3d:65:3e:c4:98:42:66:09:
8c:45:95:bd:79:35:e7:e5:78:8c:83:9e:e6:1d:73:
5d:ee:5c:91:34:89:1a:be:a4:19:86:67:f0:f6:08:
8f:4e:09:40:8b:50:51:82:a5:55:a3:b4:db:e9:01:
ab:22:87:92:76:67:3b:00:e3:f7:17:d6:78:7c:a3:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:40:D7:5B:2C:B3:BF:42:E3:D4:AB:E0:34:20:6F:8B:61:54:15:CC
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/skDXWyyzv0Lj1KvgNCBvi2FUFcw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.184.0/22
Signature Algorithm: sha256WithRSAEncryption
51:91:e2:b0:8e:f8:1a:66:35:41:46:0a:87:32:8b:b5:13:e3:
d0:35:c7:01:9e:fa:af:c3:4e:6b:28:81:89:ac:ed:06:35:5a:
e0:32:8f:1f:19:e3:4d:63:f6:aa:ed:2f:eb:09:5c:28:15:23:
b1:88:7d:55:a4:e2:45:b9:31:51:a8:63:3c:1f:eb:80:20:d1:
9d:36:30:82:57:32:31:f4:1a:f8:c3:0d:5e:bb:56:82:f9:93:
10:d7:c3:40:e5:51:98:0b:17:33:2a:48:18:36:98:0e:6b:70:
b1:ec:42:23:82:07:0e:8d:bc:9d:28:6c:8a:09:43:08:96:41:
3a:91:99:4e:33:5e:b7:bb:62:24:01:97:ee:43:db:b8:57:54:
62:2a:11:a1:bf:8a:a5:84:08:fc:6a:1b:c6:dd:74:86:df:69:
0c:d0:b3:ed:c4:e6:65:68:66:3f:7a:54:f7:79:17:9b:7e:60:
ff:6f:12:01:ad:05:dc:d3:55:00:d0:71:78:d5:a5:dd:01:af:
42:8c:34:6b:a1:ba:e8:c3:40:96:ae:b6:a5:c7:dc:6b:e6:9b:
b9:41:af:82:2e:54:d4:0a:7e:3b:be:6d:72:f0:fc:d5:2c:bb:
61:7f:c5:86:09:b6:62:cd:77:e6:06:a8:36:31:c5:19:13:bf:
99:9b:32:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:06:12 2025 by rpki-client