Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/5-e_dWRwLOBRKT5IjQnlDohWE_Y.roa
File: 5-e_dWRwLOBRKT5IjQnlDohWE_Y.roa (raw, json)
Hash identifier: 645ZAWuL9+IBERhefAoIrug4bDVKHl7LSWQ9S3CG7Ds=
Subject key identifier: E7:E7:BF:75:64:70:2C:E0:51:29:3E:48:8D:09:E5:0E:88:56:13:F6
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1628
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/5-e_dWRwLOBRKT5IjQnlDohWE_Y.roa
Signing time: Sun 16 Feb 2025 03:31:04 +0000
ROA not before: Sun 16 Feb 2025 03:31:04 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 10103
IP address blocks: 180.223.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5672 (0x1628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 16 03:31:04 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E7E7BF7564702CE051293E488D09E50E885613F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:cb:35:1b:56:a6:04:72:28:fe:b1:5f:d4:
33:75:23:99:5e:cf:13:33:2f:ac:11:c1:92:28:2e:
c7:07:af:fa:74:38:27:b1:38:30:bb:a4:42:e4:34:
b1:eb:0b:5c:51:eb:e3:74:3c:84:65:64:f0:f8:59:
f8:a3:bf:3f:7a:7e:ea:68:03:d0:2c:78:73:05:3f:
69:12:53:12:eb:50:b1:24:45:75:37:10:5e:6a:15:
37:f4:f4:a7:a5:e0:5e:79:84:8b:b7:6f:ae:83:4f:
64:57:ea:94:52:2a:6f:64:fc:7c:19:6b:a9:1b:19:
cf:c7:19:dc:db:eb:80:2e:34:d5:19:e9:4f:fb:ee:
26:e9:f5:f1:24:1a:e5:84:81:d8:95:bb:a2:b7:88:
81:bd:5a:ec:40:e6:ce:f6:c7:79:54:93:91:6d:29:
59:64:5d:17:c2:c2:a5:4c:36:50:fe:d8:56:b8:c1:
af:f3:35:89:dd:83:6b:6a:20:44:1c:75:e8:05:fd:
3e:be:d0:d9:41:cb:06:b0:25:ba:07:20:bf:50:f2:
10:a0:fd:c3:1c:cf:7b:2a:fa:27:02:4a:43:dc:35:
bf:ef:6b:81:59:83:59:0d:65:17:87:7f:24:f9:e2:
15:42:bd:e8:5f:8a:95:bd:07:76:73:7d:67:bf:28:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E7:BF:75:64:70:2C:E0:51:29:3E:48:8D:09:E5:0E:88:56:13:F6
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/5-e_dWRwLOBRKT5IjQnlDohWE_Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
17:fb:04:71:b1:97:34:45:e1:f8:ee:fe:43:47:f7:04:01:c7:
1c:ef:fd:27:09:93:4b:82:9d:3a:6c:1b:63:ad:02:9e:6f:fa:
10:b5:fc:95:3b:3e:6a:75:06:69:3f:fd:c2:af:ba:39:61:1e:
6c:4c:81:36:c8:7e:0e:bb:02:34:d7:96:3a:de:f7:51:41:bf:
90:7e:ad:94:77:5c:8b:12:f0:d0:45:1e:86:04:b6:3a:9b:a0:
00:06:f0:5a:fb:9f:9d:5a:3f:81:81:ef:37:9f:b6:58:43:32:
59:96:7a:97:e9:7a:d2:f8:e2:06:26:b6:73:7f:f7:86:5e:c5:
1c:a1:1e:2f:32:6d:3f:3b:e4:8f:b6:a4:2a:42:6e:65:f6:a2:
5a:05:0b:60:46:28:e8:b2:bf:e8:57:79:86:b4:19:78:97:e8:
2d:43:60:0c:7b:8a:ed:b7:2a:1c:a6:00:81:8b:db:ec:0c:61:
79:c0:f0:df:5e:a7:b9:8e:9a:64:87:6e:fb:9a:df:bf:49:8a:
fb:50:9c:6d:88:45:04:91:87:84:f4:e2:3d:65:eb:bb:e6:3e:
df:41:71:83:b7:a1:54:70:55:ab:39:02:fb:19:3c:0d:20:f9:
49:f6:31:c8:03:22:0f:1a:6d:1d:86:28:4b:12:86:8f:fb:0b:
19:3e:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:31 2025 by rpki-client