Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/YTVpv8PhEiRx6zwPzefitdB5lsE.roa
File: YTVpv8PhEiRx6zwPzefitdB5lsE.roa (raw, json)
Hash identifier: gpKuygw8cKVTsgJRfD0A1TfO3FUSG4DU+rOfk/r2D0k=
Subject key identifier: 61:35:69:BF:C3:E1:12:24:71:EB:3C:0F:CD:E7:E2:B5:D0:79:96:C1
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 166A
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/YTVpv8PhEiRx6zwPzefitdB5lsE.roa
Signing time: Thu 27 Feb 2025 05:58:32 +0000
ROA not before: Thu 27 Feb 2025 05:58:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 18811
IP address blocks: 180.223.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5738 (0x166a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 27 05:58:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=613569BFC3E1122471EB3C0FCDE7E2B5D07996C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:53:5d:2c:46:d1:15:11:26:2b:ef:1b:c9:
65:c4:c2:ba:3e:79:69:b4:ab:76:39:8c:12:ee:c3:
42:4f:d3:ee:c1:8a:c2:4e:94:d3:48:37:45:4c:1c:
89:5d:ee:d4:49:4d:65:ac:0d:ee:86:e8:db:f0:cf:
ae:3a:35:82:36:49:ed:4c:0d:1b:5c:b2:b5:36:be:
b1:ad:b3:97:70:2c:4f:a5:b1:7e:71:5a:a8:ae:f0:
cc:57:61:41:f8:e8:3d:3f:0a:f6:30:f7:91:95:55:
36:a6:8a:a1:a8:d5:a2:1a:e7:ec:25:6c:67:71:81:
2a:45:df:7b:35:d6:31:56:d4:76:e3:30:57:da:27:
df:96:d3:c2:50:78:19:47:ae:95:bd:97:88:80:d7:
90:d7:f4:d1:40:bd:27:64:0f:4d:1e:54:f2:30:77:
cb:f3:ec:39:bb:f0:ba:0f:8b:56:34:ea:17:8a:e7:
1e:95:72:ed:db:30:e3:c6:41:d8:33:85:76:ed:0d:
19:7e:40:fe:d0:8c:41:6b:18:c7:5b:ec:4a:9b:2c:
de:a7:c9:88:e8:b3:da:89:4e:57:55:ca:a3:af:b4:
bd:3f:d2:f9:5d:d8:db:a8:bf:c5:62:25:58:d1:d5:
66:29:3e:aa:d8:2c:9f:d1:7a:72:cd:0d:83:7e:25:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:35:69:BF:C3:E1:12:24:71:EB:3C:0F:CD:E7:E2:B5:D0:79:96:C1
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/YTVpv8PhEiRx6zwPzefitdB5lsE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.204.0/22
Signature Algorithm: sha256WithRSAEncryption
18:1b:a4:d7:82:6b:1b:dd:24:c2:f3:30:23:29:ba:87:10:3c:
05:82:ea:37:83:68:c0:80:b5:fa:0d:5b:f9:91:4a:da:3c:a5:
b1:27:94:a8:47:2f:0a:11:62:83:c4:a2:65:b3:90:9a:c2:66:
ce:e1:87:44:6a:74:25:e6:88:d1:27:66:d4:88:e5:62:96:d0:
9d:b5:77:0d:29:d1:8d:09:8b:a8:35:91:5d:25:c7:a9:4b:ae:
34:4d:61:b3:78:3c:6c:44:74:4f:e0:c6:9d:f2:ec:b8:f5:92:
5d:73:f8:53:72:e4:78:c5:23:cc:e6:59:0c:1a:0a:35:49:ef:
b5:a0:90:1e:5d:42:f1:d5:85:a2:21:1d:b0:77:01:90:6c:27:
fd:b9:c8:5a:a6:db:7b:e2:a4:be:94:db:af:c0:c9:66:30:d9:
d3:7a:1c:73:45:79:b8:5a:9d:e5:6e:fe:f5:49:d5:da:1e:ce:
4a:5f:a0:bf:1f:54:9e:a4:45:9e:ff:fb:88:36:71:bf:75:2b:
d5:2d:d5:cc:80:f8:43:09:91:18:74:ac:c5:a2:19:59:15:c4:
e1:f7:2d:9e:16:65:22:fe:61:81:05:92:cb:b3:40:0d:2d:5f:
f6:66:08:59:cd:01:ab:6f:ef:e0:ef:05:d6:87:de:86:6a:7c:
f6:f4:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:52 2025 by rpki-client