Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/TWtbOHnaovi5XpUvR4PMcRhrcZQ.roa
File: TWtbOHnaovi5XpUvR4PMcRhrcZQ.roa (raw, json)
Hash identifier: V0gnpYmwSriCHLqlN0HvH1B18ydk3UXfnltxJ8eb8Do=
Subject key identifier: 4D:6B:5B:38:79:DA:A2:F8:B9:5E:95:2F:47:83:CC:71:18:6B:71:94
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1247
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TWtbOHnaovi5XpUvR4PMcRhrcZQ.roa
Signing time: Tue 20 Aug 2024 12:56:43 +0000
ROA not before: Tue 20 Aug 2024 12:56:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 7018
IP address blocks: 180.223.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4679 (0x1247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 20 12:56:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4D6B5B3879DAA2F8B95E952F4783CC71186B7194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:90:d6:90:35:00:d2:d1:d4:35:6e:9c:78:
d7:e4:db:71:06:16:e2:20:62:4e:07:0a:82:b1:6f:
fa:69:9d:29:b1:d9:e2:59:e9:dc:76:d8:8e:0a:4b:
e5:25:1f:60:e1:fb:ab:79:ff:1f:b1:ab:03:5e:6c:
4d:66:67:42:97:4d:c2:3d:59:e1:35:6f:38:f1:2e:
59:1f:3c:81:d4:f1:bb:27:0b:04:9d:fc:ca:0a:ca:
c3:54:3b:1e:3f:c4:71:23:0e:31:81:f1:e5:c0:8e:
2f:04:9e:1b:45:60:76:28:01:01:72:b2:3d:cd:5a:
28:db:1d:c1:07:c9:fa:54:0a:af:b2:6e:3b:37:f5:
42:fd:6e:1f:49:03:e8:74:c6:82:bf:33:b8:2b:d6:
74:bb:bf:a7:59:62:90:37:24:5b:31:8b:17:fe:9c:
9f:58:19:e8:6e:1b:f0:73:83:86:df:db:19:57:de:
67:2f:21:a4:bc:6f:ee:b4:d6:62:b1:9c:42:67:0d:
68:50:2e:09:35:08:b1:e6:e3:41:4c:d1:2c:90:a6:
9e:a0:98:a4:d3:c1:06:1f:d7:c1:52:f1:19:8a:eb:
21:6d:b9:8c:a2:5c:10:a6:66:9b:bc:ac:19:51:22:
94:8e:93:46:2c:08:de:c0:e7:69:d8:4c:6d:66:e8:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:5B:38:79:DA:A2:F8:B9:5E:95:2F:47:83:CC:71:18:6B:71:94
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TWtbOHnaovi5XpUvR4PMcRhrcZQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.80.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:fe:ec:72:48:72:28:8c:84:17:aa:12:50:5b:40:20:86:96:
fe:a1:89:82:56:96:9e:cf:c0:eb:0a:2f:26:c1:c7:50:90:72:
07:43:13:c9:db:88:4b:74:7c:57:35:ba:db:03:c0:d7:d1:f8:
23:c1:2e:68:0e:63:9e:44:fe:37:91:99:42:57:36:53:18:64:
68:51:c4:2f:cb:41:74:78:3e:d0:ea:65:e1:9e:44:47:01:83:
84:66:80:ca:bd:a8:14:8f:64:5a:0f:78:3c:9c:df:03:e4:e8:
36:c7:16:ce:61:df:6b:5e:15:65:fa:47:94:bb:70:5b:cc:c7:
58:55:e8:7a:78:bc:81:d4:4e:41:7c:53:64:ac:f5:8f:1e:4d:
57:7c:12:c2:63:54:a4:b7:3a:ed:77:3a:a0:bf:3e:75:16:fc:
47:57:da:c9:e3:49:34:2c:76:c3:4b:b7:b5:93:d7:c5:a7:65:
68:45:b3:c7:09:da:1b:88:9c:d3:86:84:98:8f:8c:3f:09:19:
fa:ba:5f:5b:63:5f:65:e7:b0:cb:00:ad:a6:6c:2b:15:00:6b:
45:7d:be:7b:5b:07:83:c0:4b:10:52:c5:b2:ec:cc:04:65:28:
9b:47:46:98:99:17:df:f5:01:50:d3:b4:34:3c:ec:74:6b:de:
ac:73:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:22 2025 by rpki-client