Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/8_t58H2To8oNaVQN4cHX28mUULU.roa
File: 8_t58H2To8oNaVQN4cHX28mUULU.roa (raw, json)
Hash identifier: Qi1kZV8ERPG9jBgycFdVOgtZj8ZVGj9LcRBrzK6kidA=
Subject key identifier: F3:FB:79:F0:7D:93:A3:CA:0D:69:54:0D:E1:C1:D7:DB:C9:94:50:B5
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1639
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8_t58H2To8oNaVQN4cHX28mUULU.roa
Signing time: Tue 18 Feb 2025 00:53:21 +0000
ROA not before: Tue 18 Feb 2025 00:53:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 180.223.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5689 (0x1639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 18 00:53:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F3FB79F07D93A3CA0D69540DE1C1D7DBC99450B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:20:17:c4:49:61:0c:b7:52:1c:36:99:70:ba:
b4:84:83:7a:2c:48:66:27:0f:54:05:bd:4a:f5:70:
bf:ee:97:f6:3f:3f:5b:8a:1b:40:71:91:81:55:8d:
5b:57:b1:d0:fd:55:72:f1:28:77:c7:c4:ca:70:59:
84:3b:dd:b1:8b:94:7a:8f:89:15:fb:bd:b5:d7:62:
e8:75:72:6f:22:5a:d8:f7:83:1c:ba:8a:98:af:52:
29:2f:8d:56:ef:24:b2:d9:4d:43:ec:2a:19:97:51:
ab:98:7e:12:e4:c7:5b:1d:68:0f:43:f9:98:28:ce:
7b:24:03:4e:3e:69:be:d7:20:a7:18:3e:93:2d:68:
c9:e5:a4:f6:5b:53:e0:e7:cd:4b:92:3d:ce:7a:e6:
3f:b6:fa:25:87:9b:be:7e:cd:60:f8:1d:7a:db:3b:
a8:1e:11:c9:a9:1d:2c:99:0a:96:50:cb:65:ae:c9:
f3:b8:15:08:61:cb:be:c0:3b:d5:6b:ab:d0:cb:c0:
de:b0:72:33:d7:98:18:64:24:95:7a:2b:4d:d7:43:
ed:52:09:a3:aa:fa:3e:33:47:90:84:61:b5:75:e8:
9a:c2:fb:09:04:53:13:df:a8:70:96:33:4b:d8:fb:
31:62:49:5b:e7:dd:c8:84:4b:39:b8:b7:64:0a:e5:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:79:F0:7D:93:A3:CA:0D:69:54:0D:E1:C1:D7:DB:C9:94:50:B5
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8_t58H2To8oNaVQN4cHX28mUULU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.212.0/22
Signature Algorithm: sha256WithRSAEncryption
56:51:3b:47:78:e5:09:44:12:91:bb:b5:ee:ac:43:3c:21:9a:
e2:03:12:f1:cc:ce:8b:de:4c:c5:ea:fc:e1:8f:02:59:a8:32:
75:1f:f8:ac:9b:ed:d5:20:e0:f3:95:fa:5f:3a:ab:a7:df:5d:
36:38:81:20:1a:84:78:6d:c4:70:95:dd:4a:5c:ec:b2:5c:8f:
58:21:63:7c:58:7a:42:32:9d:83:b0:2a:4d:a1:01:d8:1e:b1:
ec:6e:29:a2:5b:d9:e9:ec:c4:c4:79:b6:9a:b9:03:0e:fe:fd:
7e:92:13:8f:0f:1f:6e:8c:55:f9:86:e3:8f:d2:da:9f:db:ac:
24:7b:fb:6f:b1:94:3a:19:5a:36:9a:b6:4b:6d:8c:06:54:d7:
43:b2:9d:a8:9b:1c:d2:81:fd:ce:91:42:bf:da:1d:f7:e2:08:
d8:87:22:da:cc:d9:e5:67:64:83:86:9f:ff:4e:f9:52:9a:9b:
39:1c:b3:a4:22:67:05:26:6a:22:9d:18:a8:be:ad:89:5a:63:
1f:f5:24:4f:d1:44:7c:14:b5:b8:75:22:10:cb:e5:af:64:66:
28:d7:47:49:93:cf:8b:0a:57:3f:54:a4:48:af:48:a0:e0:09:
d5:96:fe:f0:69:47:0f:a5:5e:92:02:db:a6:a1:96:42:f5:98:
72:e0:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:03 2025 by rpki-client