Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/8HQq_DD7DrKv8ohvWHMhoUfPPVQ.roa
File: 8HQq_DD7DrKv8ohvWHMhoUfPPVQ.roa (raw, json)
Hash identifier: pUbIuB2y07S8kxwz80n1C/SzyAjIS4DFLpLYVUvEAkY=
Subject key identifier: F0:74:2A:FC:30:FB:0E:B2:AF:F2:88:6F:58:73:21:A1:47:CF:3D:54
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 162C
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8HQq_DD7DrKv8ohvWHMhoUfPPVQ.roa
Signing time: Sun 16 Feb 2025 03:31:05 +0000
ROA not before: Sun 16 Feb 2025 03:31:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 18811
IP address blocks: 180.223.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5676 (0x162c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 16 03:31:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F0742AFC30FB0EB2AFF2886F587321A147CF3D54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:fb:2c:ee:7f:97:81:30:d0:57:21:29:94:
0a:ef:a1:88:88:40:a8:c9:36:af:2c:7e:de:16:40:
f8:82:9f:91:a3:01:e0:b9:0c:b6:92:bb:94:d2:d3:
74:79:4d:02:54:03:e4:7f:b6:cb:eb:6f:19:98:9e:
72:c7:7a:58:cc:7e:cb:b2:82:80:2e:a5:1a:56:f4:
c1:97:5b:b3:5b:ec:03:b8:ba:f3:e2:08:33:a7:06:
97:69:bd:79:d1:32:e2:12:57:3f:28:e1:42:2b:f9:
a3:0a:0d:21:82:fa:8c:98:d7:29:e2:22:8a:b0:44:
61:a2:50:a5:99:75:4c:3e:91:31:a8:1e:8c:d0:ad:
be:70:d2:90:1d:b0:c2:a7:66:4b:c4:f0:f7:52:f9:
0f:95:9d:2b:92:0b:35:3c:7e:a6:83:09:48:35:ca:
41:9e:e7:78:02:7e:7f:4f:34:6b:4f:1c:a7:0f:68:
28:4c:ce:f7:d2:2b:09:70:db:c2:93:1f:9b:8b:ca:
39:3e:00:c3:5d:37:42:8e:80:1c:70:1c:8b:53:bb:
20:6e:1e:fb:af:50:e6:ed:4a:78:a4:31:80:15:a5:
20:24:88:45:f2:97:20:c7:ba:65:55:f6:cf:89:a2:
27:04:49:a3:4e:ba:71:bb:63:2f:27:88:f7:e6:9e:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:74:2A:FC:30:FB:0E:B2:AF:F2:88:6F:58:73:21:A1:47:CF:3D:54
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8HQq_DD7DrKv8ohvWHMhoUfPPVQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
68:fd:64:63:d8:c5:33:9f:ae:02:b8:89:48:19:9f:fa:e3:6b:
e9:05:b3:71:17:08:f6:cd:65:96:9f:28:f1:2f:22:8c:d0:3e:
d9:58:af:80:bd:24:f2:b1:1c:25:55:52:50:42:5f:5f:ab:92:
26:1f:26:bc:c4:2c:72:20:bf:66:d1:a5:95:c2:22:2c:f7:a4:
6e:26:93:50:95:51:ad:58:a3:c6:0c:04:ac:07:fb:99:ff:d6:
3e:4e:ad:be:b9:70:42:67:53:d1:5b:9d:c9:7b:d7:a7:d8:d7:
5a:bc:d4:c3:8f:ba:06:8b:c4:ce:3d:2f:18:52:4a:42:5d:35:
a7:9e:1d:f1:0d:28:6e:3f:7a:01:e2:24:3c:08:b0:e3:56:23:
8e:e6:73:88:fb:80:22:b6:da:f3:20:00:c3:30:65:fc:03:69:
17:3e:f6:3d:b9:f9:61:a7:ed:9b:fb:8c:f8:4f:bb:b4:05:51:
f3:3b:d0:f4:59:bb:cf:54:62:29:fe:0d:1c:93:9e:17:ec:2c:
39:7f:9c:71:38:00:a4:e9:6d:cf:f5:41:c6:10:19:c4:53:9d:
49:e2:8c:95:33:96:12:46:c5:a8:ce:64:17:bf:8c:d3:58:66:
62:95:a1:32:33:0e:e7:c4:04:0d:b8:58:e0:73:e9:fd:18:51:
1b:03:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:43 2025 by rpki-client