Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/9CIys0KmRBCm7sYZy8sSCaeZGGk.roa
File: 9CIys0KmRBCm7sYZy8sSCaeZGGk.roa (raw, json)
Hash identifier: 0+roc2AekaggKrCxaZufiMPypK2W00+KHNLCppKG41Y=
Subject key identifier: F4:22:32:B3:42:A6:44:10:A6:EE:C6:19:CB:CB:12:09:A7:99:18:69
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1507
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9CIys0KmRBCm7sYZy8sSCaeZGGk.roa
Signing time: Mon 30 Dec 2024 04:21:09 +0000
ROA not before: Mon 30 Dec 2024 04:21:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 180.223.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5383 (0x1507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Dec 30 04:21:09 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F42232B342A64410A6EEC619CBCB1209A7991869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:b2:25:1c:47:39:8e:75:87:97:a8:e8:20:
5a:25:8b:df:e2:d3:fd:20:7a:00:b1:91:af:57:92:
53:d7:cf:91:ae:da:01:5c:7b:76:9e:97:98:0b:3d:
97:9c:01:9d:98:e8:d2:df:d3:ce:04:d0:4b:0d:a9:
b6:df:21:91:b6:a2:1b:80:6a:51:20:cc:02:2f:5a:
6a:80:e1:51:24:26:3a:d4:d2:62:75:22:e6:73:06:
bf:87:f8:1e:a9:4d:89:9f:31:18:51:64:6c:1c:90:
47:e6:7e:4a:9c:9f:bb:4b:69:a6:d3:be:fd:38:a3:
17:84:fb:df:24:14:ec:38:ec:9a:db:48:09:47:54:
82:44:ef:04:1c:68:66:9d:1b:75:cd:56:4d:58:3a:
75:37:f7:2b:2e:d8:38:79:7c:91:2f:d5:27:55:d8:
3b:66:da:c1:bf:91:6f:1c:a7:4b:1f:f8:b7:e2:db:
e1:81:85:b7:4a:8a:60:05:71:d2:4b:02:89:6a:8b:
a1:fa:66:a8:f4:0e:1c:4c:b3:4d:f0:ac:60:c3:b9:
b9:b5:26:9a:50:62:18:9a:6f:dc:07:ee:47:8d:fa:
c2:4e:c3:b8:ac:bb:ba:19:62:8f:a1:d4:1d:d5:d9:
f1:17:91:f7:96:c5:50:bf:5a:53:25:d2:f9:12:15:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:32:B3:42:A6:44:10:A6:EE:C6:19:CB:CB:12:09:A7:99:18:69
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/9CIys0KmRBCm7sYZy8sSCaeZGGk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:c7:c0:dc:e6:66:92:56:4f:78:82:ce:04:ff:da:7f:23:0e:
72:f2:f7:41:8a:bf:c1:23:de:5f:9d:cc:2d:86:02:d4:a7:d8:
1d:da:a1:e1:38:e7:82:7e:f8:89:8e:93:0e:70:f3:81:86:7d:
3f:1d:0c:76:bc:ec:9f:35:9e:d5:75:48:28:fc:ac:3a:99:ab:
f9:ae:68:38:15:37:18:84:3b:cc:97:1c:d7:0f:e7:9c:e8:2d:
ef:85:00:5b:78:74:b2:db:e0:4a:54:b1:28:c5:54:e2:55:d5:
f4:5f:d7:b9:75:d6:65:4b:b6:33:48:64:bb:f4:a6:b9:e4:4f:
99:cc:30:96:3c:63:68:fa:53:0d:4f:c0:7a:a8:a4:43:51:88:
35:db:55:fc:80:77:86:00:e2:4d:3d:e0:5a:80:f6:d6:cf:c7:
84:85:c9:84:28:1c:a5:d5:2a:de:44:ec:69:0b:bf:4d:56:a6:
95:5e:64:34:68:5b:bb:da:14:61:8e:f1:63:75:d9:70:34:85:
64:47:86:42:d1:51:8f:a7:44:64:04:b9:69:55:59:cc:cf:81:
52:2e:fa:bd:e0:35:2c:ed:d4:76:19:8f:ce:b2:df:e1:93:f7:
51:91:9a:88:17:da:95:24:77:cc:59:86:a3:5e:2f:2a:63:16:
93:82:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:07:03 2025 by rpki-client