Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Bnsgwz0NrWnuMZnGKxUarfEV3Cc.roa
File: Bnsgwz0NrWnuMZnGKxUarfEV3Cc.roa (raw, json)
Hash identifier: o3HCIULYJAKhN91DPxFcvye3T9hhBAkNXS1KCPNs9mQ=
Subject key identifier: 06:7B:20:C3:3D:0D:AD:69:EE:31:99:C6:2B:15:1A:AD:F1:15:DC:27
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1568
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Bnsgwz0NrWnuMZnGKxUarfEV3Cc.roa
Signing time: Fri 17 Jan 2025 01:27:42 +0000
ROA not before: Fri 17 Jan 2025 01:27:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7018
IP address blocks: 180.223.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5480 (0x1568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=067B20C33D0DAD69EE3199C62B151AADF115DC27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:24:9e:8d:74:8c:3d:e3:2f:60:bc:ab:b0:
d5:28:78:02:ef:5d:d7:47:cb:48:5e:74:b8:ef:6c:
dd:f6:49:9b:2f:37:d7:5d:ac:72:25:89:6e:1d:57:
91:d5:82:55:f9:f9:f4:0a:81:0a:71:41:f7:40:3a:
0e:5e:af:a8:8a:56:c1:85:59:40:9a:cb:de:74:8e:
31:c6:85:6a:be:23:ec:ce:a4:35:70:b0:1c:ec:de:
c2:cb:c3:e2:75:67:b2:e3:d3:2e:ea:7a:73:a8:0b:
c2:5b:57:47:48:e3:02:e9:bd:20:3b:e1:92:8f:f1:
a7:c2:4f:51:e7:f0:ab:13:0d:5a:fd:ec:74:92:8d:
55:b0:51:bb:d6:31:b1:90:e1:30:ea:64:56:b7:fe:
67:52:c6:02:0e:c0:20:ad:e7:35:7e:09:ef:3b:77:
5f:62:04:29:f3:8c:5a:c6:2d:ad:9f:aa:c3:87:84:
c4:17:5d:c8:db:0f:6e:67:9a:42:12:67:ba:a3:c9:
3b:ee:93:c9:31:4b:05:27:53:9c:8b:63:13:7d:f8:
15:e6:56:9d:54:94:1b:8d:53:38:c9:9d:01:11:0c:
d0:34:fc:ec:b1:00:57:81:1f:86:e0:e5:50:9f:8b:
0a:b9:7b:72:04:e3:e5:2e:8b:98:07:32:43:5c:1d:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:20:C3:3D:0D:AD:69:EE:31:99:C6:2B:15:1A:AD:F1:15:DC:27
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Bnsgwz0NrWnuMZnGKxUarfEV3Cc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.96.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:66:0a:b4:62:cd:d6:59:f1:91:ee:d8:9a:7b:bd:21:ff:40:
fd:cf:64:6f:7a:71:95:d0:1c:6c:80:76:2f:7d:d6:a5:5e:b0:
71:53:fb:2b:b0:5f:f3:01:6f:46:bf:f8:25:24:bf:d6:22:64:
bb:04:72:e7:d3:bd:83:42:a6:86:cb:76:c4:77:81:62:1e:b2:
00:e0:7b:d9:54:ed:00:00:3d:1b:04:e0:7e:06:9b:de:48:22:
9b:ef:cb:26:bd:97:8f:64:a4:48:0f:e6:52:7e:ce:c1:ec:f8:
0c:d1:30:70:f8:de:0c:49:6c:27:b9:9c:9c:80:5d:cf:48:6a:
b6:f4:90:ab:48:a3:f0:91:91:bc:7e:6e:ee:9a:fa:1b:ee:0b:
4d:14:26:fc:29:e3:5c:f4:85:48:1a:5d:20:31:cb:74:f7:92:
86:a0:09:18:8c:0f:33:69:03:68:74:b4:33:c3:d7:ab:10:3a:
4e:3b:ad:bb:fb:d7:e0:a4:63:5f:bc:05:09:1f:7a:3b:6c:72:
df:6c:08:fd:54:9f:6c:4f:65:bb:0f:82:0c:74:6d:af:01:c8:
f9:80:26:76:17:2c:d7:b8:01:a4:06:e8:a9:75:ff:fc:30:4f:
01:c4:ab:7e:a2:45:df:7e:e6:94:9c:5a:69:f3:bd:ee:7c:05:
ae:53:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:59 2025 by rpki-client