Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/AmfvUsmlYCU_1jo749subqIR8To.roa
File: AmfvUsmlYCU_1jo749subqIR8To.roa (raw, json)
Hash identifier: i2I8o2q4c+iJDLpn7+GyKb7pmkYIcLITo1FD0ORmfU8=
Subject key identifier: 02:67:EF:52:C9:A5:60:25:3F:D6:3A:3B:E3:DB:2E:6E:A2:11:F1:3A
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1637
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/AmfvUsmlYCU_1jo749subqIR8To.roa
Signing time: Tue 18 Feb 2025 00:53:21 +0000
ROA not before: Tue 18 Feb 2025 00:53:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 180.223.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5687 (0x1637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 18 00:53:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0267EF52C9A560253FD63A3BE3DB2E6EA211F13A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:1c:98:42:5b:27:05:d7:19:f7:09:bf:c4:
3b:80:7f:ac:ea:74:0d:13:71:5b:25:71:44:98:50:
97:19:d3:2b:60:49:95:0d:c1:f2:c7:e6:c0:ee:3b:
c7:16:c1:2e:a7:2b:ac:dc:0c:34:2d:02:6f:b7:55:
5f:22:c8:06:a2:c7:fe:7e:f4:69:57:52:9d:2f:de:
08:a3:6e:a1:86:a7:04:c7:8c:47:e0:ae:71:87:65:
7f:d8:78:ce:81:ec:64:10:82:db:42:19:66:d7:39:
eb:74:ed:b5:cb:cb:e2:ad:76:9d:06:56:b0:d8:88:
fb:03:4e:f6:43:2a:9a:54:ba:38:2d:55:ff:e4:54:
04:3e:07:12:ab:9e:e3:8c:b6:e5:f9:9c:22:e0:89:
87:81:77:5a:a3:c4:af:61:ce:35:2b:83:c7:fc:76:
e5:95:a9:44:24:31:7b:24:45:29:4f:f5:58:6c:9a:
96:a8:d4:66:eb:f6:77:b6:81:5e:26:08:8d:b7:bf:
90:25:7a:95:9f:0e:f7:9d:96:e6:6e:73:41:ae:63:
ef:da:c0:59:72:58:77:e8:cd:f7:56:20:67:8a:03:
fd:7a:8b:19:d1:82:d4:23:f5:58:23:4a:4a:d8:d4:
36:49:33:45:77:eb:76:35:55:20:b6:ce:09:e7:4b:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:67:EF:52:C9:A5:60:25:3F:D6:3A:3B:E3:DB:2E:6E:A2:11:F1:3A
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/AmfvUsmlYCU_1jo749subqIR8To.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:5a:22:b9:cf:25:11:a5:90:23:41:ad:07:e4:e2:d1:a7:a3:
ef:98:dc:c6:ec:42:ac:1e:34:3c:ef:4f:f8:0d:78:4e:df:38:
8c:e4:d9:75:bf:a3:98:ae:a1:9e:4e:2c:b3:26:68:4f:ce:72:
17:6c:d9:1f:93:f9:d4:07:fa:b5:f3:ba:a5:95:40:7c:13:77:
a9:96:25:39:89:60:46:f2:70:cc:7f:9c:b7:2e:1c:6e:a6:23:
e2:43:5a:6d:ee:da:ef:d7:9a:8c:e2:38:e2:4c:dc:da:e8:c6:
16:7f:82:1a:bb:4e:21:2b:61:f4:bf:a3:b4:84:10:42:07:38:
56:af:32:c5:af:f1:a7:3a:6d:79:c2:d5:9c:6d:e7:47:ac:41:
a6:41:ee:5d:2d:6c:8b:0a:e2:15:c6:5d:e3:33:b4:43:89:fa:
d5:f1:72:a6:c0:3b:ad:2b:f1:95:cd:d8:89:0e:e1:99:18:0e:
69:1a:7e:02:2d:e4:ba:1e:49:ea:b3:5f:68:13:23:68:d6:19:
63:25:51:9c:2d:3d:0c:97:cf:6c:a1:53:88:69:fc:d2:35:ba:
09:80:a8:55:bf:14:41:58:15:14:4a:56:54:5d:1c:0b:d5:8b:
9f:f9:40:de:ce:40:80:e0:dc:d4:fe:a7:b6:a4:0e:91:3d:e6:
b8:64:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:21:46 2025 by rpki-client