Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/EoP4uVImG4QbwrG5AHBX2fVJkTU.roa
File: EoP4uVImG4QbwrG5AHBX2fVJkTU.roa (raw, json)
Hash identifier: ztQ83EkqSwaBkm5XersvWSm4ctqZ224leKFJ1vy/1EA=
Subject key identifier: 12:83:F8:B9:52:26:1B:84:1B:C2:B1:B9:00:70:57:D9:F5:49:91:35
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1618
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/EoP4uVImG4QbwrG5AHBX2fVJkTU.roa
Signing time: Sun 16 Feb 2025 03:24:10 +0000
ROA not before: Sun 16 Feb 2025 03:24:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 18811
IP address blocks: 180.223.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5656 (0x1618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 16 03:24:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1283F8B952261B841BC2B1B9007057D9F5499135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:5b:8b:f5:b5:74:af:d0:b5:0f:6b:6f:83:
58:c5:5e:c3:1d:7e:ce:06:4a:f3:41:f3:27:c6:e9:
0e:ea:06:14:51:2f:df:13:e6:81:a8:9a:d7:d8:aa:
be:35:c8:55:00:7d:1b:75:77:b8:9b:84:58:91:68:
c3:ea:56:2f:1a:c3:be:08:26:e1:bd:b7:df:2f:aa:
28:e5:0b:5d:5b:bf:7d:20:e3:c5:f1:4c:cc:4b:f7:
a5:ad:99:7b:f8:0b:a0:dd:e4:ca:90:29:c3:16:ec:
66:e2:f2:ba:91:bd:c4:39:22:1e:8a:aa:07:55:4c:
6f:cb:be:44:6c:30:fe:b8:ae:a7:ab:7a:c9:09:78:
bf:15:8d:4c:7d:85:bd:8d:2d:7b:3a:9c:93:75:6f:
a2:20:80:8b:4a:df:8d:32:3a:a7:3e:ce:f8:f0:be:
1b:2b:28:22:2d:b3:b4:ae:c7:a8:af:30:02:7d:1f:
38:37:7a:f5:63:86:93:05:63:69:39:dc:d6:c1:8a:
c8:24:af:ba:5d:26:37:6e:73:02:f3:96:59:54:a6:
61:40:2d:de:62:e7:2a:61:39:a9:95:37:07:74:a7:
d8:a5:6c:89:b2:cc:61:c0:cc:35:97:69:3d:37:00:
7f:c7:d0:07:fc:89:35:66:01:15:3b:5a:6f:10:2e:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:F8:B9:52:26:1B:84:1B:C2:B1:B9:00:70:57:D9:F5:49:91:35
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/EoP4uVImG4QbwrG5AHBX2fVJkTU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.124.0/22
Signature Algorithm: sha256WithRSAEncryption
71:85:74:a3:8f:9a:39:59:d9:a0:85:b7:31:c6:ec:7e:bb:7f:
2f:9f:f7:f1:f2:b6:bf:22:4f:5a:6d:a9:8c:99:0c:81:bf:29:
48:14:ab:a9:7b:2a:17:43:53:3d:e9:9f:2d:d5:76:ec:55:0d:
33:cf:ae:90:c8:03:da:a4:70:7f:e0:84:4a:04:3d:bb:58:41:
bd:c4:b5:0a:5f:9f:ac:25:56:9d:d5:e5:11:ed:67:c3:91:72:
1b:73:b8:fe:68:69:43:bf:20:f5:e4:6f:42:9f:88:a1:1e:41:
76:19:83:bd:27:73:fa:b3:26:a7:4d:86:f5:1e:63:35:e8:1f:
34:31:80:35:5b:a5:01:a5:60:95:08:0f:ad:9b:dc:83:0b:c2:
ac:b6:51:89:c7:90:77:24:08:b0:74:a4:b6:c4:fa:7f:1b:a8:
7b:81:41:14:5d:2c:1a:9c:ff:69:42:41:8f:46:3d:50:2c:94:
d9:ab:37:85:ce:a6:13:01:83:f8:77:94:fe:86:41:79:d5:75:
43:98:17:76:d5:18:82:41:7e:e2:77:55:12:7e:5d:e3:6a:dd:
12:c3:bb:97:2b:6c:57:ff:e6:91:a6:ab:37:50:0d:7b:25:7b:
9e:e3:a8:71:c9:a9:03:39:a2:47:60:54:ae:f3:c5:8e:6a:ee:
bf:38:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:37 2025 by rpki-client