Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/DLsMRahr8RzWzV9gSHhp6PsO1c0.roa
File: DLsMRahr8RzWzV9gSHhp6PsO1c0.roa (raw, json)
Hash identifier: g/Wp9z0bX3hthXcaarFR9ok9ml9Vzvjftrs5QitE8DM=
Subject key identifier: 0C:BB:0C:45:A8:6B:F1:1C:D6:CD:5F:60:48:78:69:E8:FB:0E:D5:CD
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1357
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/DLsMRahr8RzWzV9gSHhp6PsO1c0.roa
Signing time: Wed 09 Oct 2024 00:44:10 +0000
ROA not before: Wed 09 Oct 2024 00:44:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 180.223.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4951 (0x1357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Oct 9 00:44:10 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0CBB0C45A86BF11CD6CD5F60487869E8FB0ED5CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:0f:8d:44:da:27:e5:d7:6e:dd:4a:98:e1:
77:30:41:87:26:3a:59:1f:25:5b:66:77:6c:63:28:
69:eb:43:40:bc:c4:f7:3d:9a:07:17:61:01:ef:23:
95:08:0d:cf:ac:0b:85:0e:af:94:a3:e9:7a:a4:bb:
80:63:78:7f:0d:91:a5:ff:76:c2:64:04:38:7f:82:
71:b3:d3:92:5f:d5:09:eb:bb:a9:c5:19:aa:b3:9c:
bc:1f:52:2e:ea:2e:df:e4:45:f2:80:5f:ec:3b:64:
c4:ad:07:ed:6f:b3:91:9c:5c:10:68:70:23:fa:99:
c1:bf:2c:6c:7b:2d:da:88:ad:03:22:4d:ad:bd:65:
d1:29:57:58:52:fa:b1:61:18:1d:d1:c6:8b:29:7e:
2b:3e:d9:e9:f6:78:d4:ac:bf:1d:1a:a0:2b:15:df:
11:5c:09:5a:18:a8:9c:a2:70:9d:73:5d:9b:96:d1:
03:fa:aa:7f:54:4d:4e:34:ba:87:c9:e9:2d:b2:f8:
ab:4a:39:8c:1e:fd:0a:ae:1f:1e:07:69:9e:0a:f6:
1b:8e:fc:ab:74:13:c1:32:72:6e:81:c9:f9:cf:6d:
84:b5:cd:ae:77:f9:b6:a9:fd:4b:b2:e4:90:61:16:
69:fd:0f:90:35:f4:6b:90:5d:81:db:8b:9b:39:7a:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:0C:45:A8:6B:F1:1C:D6:CD:5F:60:48:78:69:E8:FB:0E:D5:CD
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/DLsMRahr8RzWzV9gSHhp6PsO1c0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.201.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b3:93:37:26:85:90:88:df:be:66:bd:7f:a3:1e:5e:4b:62:
11:a6:15:c6:cd:56:b4:34:62:89:ac:ae:b2:d9:93:86:87:cb:
6a:b1:f7:42:d0:7a:8c:84:bf:ec:0f:27:09:7c:54:9a:a9:02:
9d:48:87:77:95:0c:d6:c8:db:c1:ec:63:49:da:e5:ae:1d:44:
61:a7:e8:c2:cf:61:23:07:e7:f3:ed:23:94:f2:69:7e:7a:0b:
26:37:89:79:1e:10:e6:40:56:1f:c9:15:41:d5:ad:f1:62:46:
09:89:59:3c:19:f5:20:16:05:02:a4:44:c6:b0:7a:d4:95:2a:
88:76:ef:b6:89:3e:5f:8e:30:da:22:47:98:ca:d2:c4:96:e6:
a4:d6:2f:0d:74:4f:a2:c3:02:0d:86:0a:d8:84:79:0f:cb:c0:
30:83:dd:9f:c2:cb:9c:ad:26:18:05:35:06:10:9e:f0:1e:98:
b4:54:e2:b6:86:46:f2:61:06:c9:c1:23:ea:f0:b6:28:3c:23:
01:2f:bd:67:eb:57:0a:12:65:ca:cf:e1:1b:05:16:7b:fd:ba:
12:50:8c:53:80:40:32:95:3e:ff:61:e3:b5:a1:e7:e7:2e:ef:
d0:b4:59:df:95:72:26:91:a5:f2:28:83:ef:a8:d5:49:5e:7e:
dc:2a:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:19 2025 by rpki-client