Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/soKJeUZnFtg31eeZcxL74xhwJv8.roa
File: soKJeUZnFtg31eeZcxL74xhwJv8.roa (raw, json)
Hash identifier: CS2Xi7Zo9aQimulKtItRKq+AbR0HAPc0pMn63HVFzgw=
Subject key identifier: B2:82:89:79:46:67:16:D8:37:D5:E7:99:73:12:FB:E3:18:70:26:FF
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CD0
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/soKJeUZnFtg31eeZcxL74xhwJv8.roa
Signing time: Thu 02 Jan 2025 13:58:30 +0000
ROA not before: Thu 02 Jan 2025 13:58:30 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 180.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7376 (0x1cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B2828979466716D837D5E7997312FBE3187026FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:e2:e2:fa:1c:8c:36:fc:9d:5e:8a:c0:1f:
d1:f9:cb:75:ef:96:5d:34:e1:fb:7a:06:23:bf:3a:
14:ff:c1:f4:9d:4e:8f:ab:d7:2a:d2:a9:2f:f4:73:
9f:b5:c8:95:15:aa:5b:8d:71:50:13:af:4f:56:7d:
f2:57:ba:7d:a8:47:d6:29:9d:c7:a8:3c:82:5e:6e:
bf:ff:28:a1:09:40:38:ff:b4:94:96:77:87:a9:3a:
dd:10:b1:5d:f1:23:d0:6e:9b:ab:62:1a:1b:10:3c:
d4:11:f8:50:97:1a:66:bd:89:72:eb:03:5d:6a:3d:
3f:95:27:8d:f4:98:7a:72:f3:94:f3:54:8d:00:25:
9e:2e:44:9f:9f:c5:29:be:1e:30:c9:94:88:26:7b:
7d:be:86:9b:50:2d:a9:6b:96:d7:de:09:a1:40:00:
ce:3f:3c:57:e7:8a:88:7a:6e:36:73:6b:44:9f:bc:
92:7d:0a:24:55:0a:f9:96:25:7d:e2:1a:2f:a0:3d:
1a:b7:ce:47:44:07:ff:f4:9e:ce:21:8b:d6:07:e6:
aa:aa:76:5e:8a:b7:82:b4:ab:bf:31:84:07:3c:68:
29:7a:e3:42:97:fd:b3:e8:33:14:ca:5b:12:38:57:
c4:18:b2:a3:04:40:68:79:02:1d:ef:92:34:2b:4c:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:89:79:46:67:16:D8:37:D5:E7:99:73:12:FB:E3:18:70:26:FF
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/soKJeUZnFtg31eeZcxL74xhwJv8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:93:84:09:40:57:b0:15:f3:1a:d9:bb:1c:80:64:8c:80:e0:
a0:c2:72:3d:e1:1e:04:73:91:34:f9:58:76:e0:9f:18:3a:c0:
02:c3:d0:8c:b6:8d:4b:11:e1:b8:2f:2c:f6:95:17:88:4d:fc:
04:01:9c:02:ec:19:6c:ce:49:25:fa:27:73:a1:0c:da:ef:83:
af:51:9b:f8:76:78:ab:36:fa:1b:27:c5:30:16:65:9e:b3:ea:
4b:9d:63:a7:d4:19:e4:e0:04:33:ac:12:44:bc:06:90:cd:1f:
7f:00:56:96:e3:fa:46:7d:43:62:59:c5:83:b0:b3:38:c3:57:
16:aa:18:50:e7:ba:74:7f:0c:f9:ad:78:28:6e:47:e9:bc:cc:
8d:d5:5e:ba:26:f6:b4:8f:8f:a2:5e:e7:ca:db:4c:91:31:57:
16:98:f4:8f:14:9c:9d:be:66:d8:52:f8:ed:0f:0a:f0:53:9b:
ab:20:c9:04:da:50:90:ce:98:1a:42:fb:5d:f0:97:5c:a3:9c:
a3:9f:68:79:ee:e0:3b:36:3e:ec:a2:e3:34:cd:59:33:3c:dd:
a8:00:15:45:cf:40:b7:84:a2:6f:36:2f:8a:13:5e:d3:7e:c4:
46:98:9a:ee:92:22:eb:44:40:6d:cf:d7:d5:74:b4:d6:1d:6b:
b9:0f:4b:71
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICHNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx
MzU4MzBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEIyODI4OTc5NDY2NzE2
RDgzN0Q1RTc5OTczMTJGQkUzMTg3MDI2RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgteLi+hyMNvydXorAH9H5y3Xvll004ft6BiO/OhT/wfSdTo+r
1yrSqS/0c5+1yJUVqluNcVATr09WffJXun2oR9YpnceoPIJebr//KKEJQDj/tJSW
d4epOt0QsV3xI9Bum6tiGhsQPNQR+FCXGma9iXLrA11qPT+VJ430mHpy85TzVI0A
JZ4uRJ+fxSm+HjDJlIgme32+hptQLalrltfeCaFAAM4/PFfnioh6bjZza0SfvJJ9
CiRVCvmWJX3iGi+gPRq3zkdEB//0ns4hi9YH5qqqdl6Kt4K0q78xhAc8aCl640KX
/bPoMxTKWxI4V8QYsqMEQGh5Ah3vkjQrTDanAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUsoKJeUZnFtg31eeZcxL74xhwJv8wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvc29LSmVVWm5GdGcz
MWVlWmN4TDc0eGh3SnY4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDALS4MA0GCSqGSIb3DQEBCwUAA4IBAQC8k4QJQFewFfMa2bscgGSMgOCgwnI9
4R4Ec5E0+Vh24J8YOsACw9CMto1LEeG4Lyz2lReITfwEAZwC7Blszkkl+idzoQza
74OvUZv4dnirNvobJ8UwFmWes+pLnWOn1Bnk4AQzrBJEvAaQzR9/AFaW4/pGfUNi
WcWDsLM4w1cWqhhQ57p0fwz5rXgobkfpvMyN1V66Jva0j4+iXufK20yRMVcWmPSP
FJydvmbYUvjtDwrwU5urIMkE2lCQzpgaQvtd8Jdco5yjn2h57uA7Nj7souM0zVkz
PN2oABVFz0C3hKJvNi+KE17TfsRGmJrukiLrREBtz9fVdLTWHWu5D0tx
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:35 2025 by rpki-client