Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/V59B_FMJowB0U0UVYaDqchEDTsw.roa
File: V59B_FMJowB0U0UVYaDqchEDTsw.roa (raw, json)
Hash identifier: q2+ZeOncWEFMukf5MZaFMlSIi8MKKgNFcJmxLA+jKl8=
Subject key identifier: 57:9F:41:FC:53:09:A3:00:74:53:45:15:61:A0:EA:72:11:03:4E:CC
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1571
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/V59B_FMJowB0U0UVYaDqchEDTsw.roa
Signing time: Fri 17 Jan 2025 01:27:45 +0000
ROA not before: Fri 17 Jan 2025 01:27:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 180.223.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5489 (0x1571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=579F41FC5309A3007453451561A0EA7211034ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:f5:79:90:84:79:d4:ad:95:31:e4:a4:9d:
86:4b:bb:c6:8e:38:e2:94:b3:4c:06:e9:e1:e6:3d:
57:7f:d9:32:89:04:39:a6:94:de:e5:d6:3b:9a:11:
75:4a:fb:97:f2:f1:27:5a:e9:33:48:22:c7:c6:69:
16:72:4a:29:34:13:a8:e3:52:d9:ee:e8:bf:75:3a:
e6:05:1a:db:cf:74:c8:1f:40:1c:ea:7c:e3:08:f8:
00:e5:28:6f:86:c2:4e:42:0d:9b:e2:94:ea:be:24:
97:72:48:9c:ad:26:b8:9d:5a:00:b1:e3:ec:89:f3:
02:b2:6b:5b:2b:98:42:f1:ad:2e:91:73:28:76:2d:
6c:3c:47:7b:c6:f8:fb:8f:7d:2f:19:86:9f:20:da:
cc:0e:4b:ad:f7:3f:21:92:d6:1b:07:79:ef:aa:60:
04:19:50:74:1e:17:bd:3a:3a:22:f3:e5:19:85:6c:
3a:f6:57:8d:87:57:83:e4:40:ec:53:98:e6:47:c4:
2f:69:2b:ee:10:16:9e:d1:e5:d2:a1:3a:6c:d8:29:
68:ed:20:2b:21:c5:4b:3e:85:0e:95:8d:91:74:b3:
35:7a:d1:e3:31:a3:be:a8:ef:e2:f2:48:97:6f:5e:
04:95:bf:ae:fb:54:fe:f8:bc:9d:2b:8c:f9:7e:d1:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:41:FC:53:09:A3:00:74:53:45:15:61:A0:EA:72:11:03:4E:CC
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/V59B_FMJowB0U0UVYaDqchEDTsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.112.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:d4:80:16:9b:89:8c:35:28:d4:51:d2:c2:f5:1e:c6:5f:3c:
37:e8:b6:5a:77:bd:04:4a:fd:79:ff:0f:9f:e8:e5:3a:8e:55:
25:9d:0c:cd:2d:5c:2c:c6:d4:61:c1:0c:50:c8:bb:1d:f7:70:
ef:5a:7c:dc:4c:db:dc:78:d7:bc:d9:a0:11:90:60:c9:32:7a:
69:c4:54:50:a6:c6:3b:e9:ef:ff:4e:26:f9:93:d4:da:64:96:
b2:44:f4:62:02:26:34:92:0d:19:69:54:74:9d:7b:81:d3:a8:
c7:4c:a8:8f:9d:77:f6:6d:24:6f:89:e6:83:9f:0c:43:ac:07:
24:6d:66:b8:b4:4a:1a:1e:02:54:3c:37:6e:d5:6e:b4:b7:58:
8d:67:11:77:4b:0b:27:d9:14:73:c9:2a:ef:28:f1:88:ac:29:
04:90:f8:e3:48:7b:7e:fd:18:c5:6d:29:70:cc:c7:0b:bd:b6:
27:13:59:e9:fa:c6:5c:71:da:d8:d6:fb:4e:63:99:0c:47:31:
8f:34:2b:ae:9c:7e:e7:5c:d2:dc:48:4e:d0:fe:16:0b:28:82:
26:30:fe:de:2a:ac:ba:52:cc:90:86:d2:85:55:8c:66:45:57:
75:97:fa:e4:05:b9:1f:92:28:af:ce:78:4d:8d:5e:5a:8f:20:
c4:84:fc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:54 2025 by rpki-client