Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/33k5It7mcf95N7PCiNwan6YcTL4.roa
File: 33k5It7mcf95N7PCiNwan6YcTL4.roa (raw, json)
Hash identifier: 9o4ii5A2rE9/IL06uovELBUkUEVgU45D3bCmfDyMVcM=
Subject key identifier: DF:79:39:22:DE:E6:71:FF:79:37:B3:C2:88:DC:1A:9F:A6:1C:4C:BE
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 135F
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/33k5It7mcf95N7PCiNwan6YcTL4.roa
Signing time: Wed 09 Oct 2024 00:44:13 +0000
ROA not before: Wed 09 Oct 2024 00:44:13 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 180.223.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4959 (0x135f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Oct 9 00:44:13 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DF793922DEE671FF7937B3C288DC1A9FA61C4CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:1f:ae:fc:b6:e8:58:db:8d:34:45:1a:15:
1d:d3:ab:b6:f7:ee:7c:40:7f:52:bc:9c:86:8a:93:
c5:a1:43:ad:01:0c:fa:6e:66:e1:f8:48:29:1c:6a:
c9:db:c3:25:dd:3e:77:8b:d1:47:3d:33:aa:d3:5c:
e6:f0:a2:70:93:ee:25:af:15:37:80:ac:f6:fa:9b:
41:c6:c7:44:f1:e4:40:a9:f3:04:50:81:dd:a3:06:
88:e3:b2:a8:0d:52:8c:39:68:8d:53:06:9c:0f:c0:
7d:1b:30:c2:23:ec:2a:bc:e7:52:88:8f:d4:e2:5a:
3f:1f:06:04:04:46:86:a2:15:59:88:f1:ac:4f:a1:
8f:94:83:ce:30:77:33:44:de:76:0f:d5:9c:5d:4c:
e7:53:64:13:2e:67:dc:d6:8d:1f:94:78:6f:62:5e:
ff:95:2e:c6:18:6b:6d:29:fe:1a:03:ac:35:e2:7c:
58:f8:b8:1a:0d:60:14:f3:8f:0e:de:04:88:6f:ec:
67:68:5f:2a:c6:41:0d:47:96:f0:8f:7c:c3:2b:57:
3c:46:e9:46:99:b4:ef:79:55:55:aa:7a:ba:4e:58:
0e:90:37:30:5c:91:55:1e:38:25:f6:93:de:9b:57:
13:95:68:28:1c:4d:dd:7a:5b:41:44:a2:bb:e1:d9:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:79:39:22:DE:E6:71:FF:79:37:B3:C2:88:DC:1A:9F:A6:1C:4C:BE
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/33k5It7mcf95N7PCiNwan6YcTL4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:6b:11:ff:73:22:89:9a:33:c4:fd:88:62:9f:22:62:59:c7:
44:24:8b:97:21:fd:8e:cc:44:2b:7e:d7:b5:e2:af:b1:e8:39:
82:c1:c1:10:04:ac:4f:b8:3b:10:49:66:f4:0a:fc:3f:5c:9d:
b4:0d:d5:ee:09:21:79:3e:8d:89:9c:b0:ed:0d:a6:db:a7:d2:
c4:52:c8:75:98:c4:9c:b0:fb:b5:57:fa:b1:ac:36:e4:c8:7f:
6f:39:49:8e:17:af:1e:c8:b5:5d:b2:89:04:15:26:52:4e:21:
b0:1a:79:f7:c6:a1:d8:0c:02:51:d9:aa:b8:aa:52:61:a6:93:
40:44:56:5b:a0:48:cf:44:ed:d9:33:5f:78:89:04:09:07:da:
b1:a2:78:94:da:7e:6b:f1:3d:1c:52:75:4c:70:7d:d7:03:56:
bd:eb:ea:9d:0b:69:13:78:ad:9e:16:cd:4f:95:9a:24:d1:07:
91:7e:f9:e4:29:96:16:4e:ed:29:ea:13:55:ca:05:fa:ee:31:
41:18:1c:bf:6c:59:22:f8:95:57:9d:e1:26:1c:cb:e1:7f:b5:
63:ef:30:ab:30:b2:3a:dd:69:a1:a0:ba:2d:51:07:9f:d7:6f:
73:d0:0a:40:99:9b:66:59:4a:93:7c:a1:0a:34:a0:a3:cb:78:
90:1c:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:15 2025 by rpki-client