Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/YUTaitbqeWuGbQ2rr41A4r6MI2o.roa
File: YUTaitbqeWuGbQ2rr41A4r6MI2o.roa (raw, json)
Hash identifier: oR/TKrNjxqwMLu60JbwdUY9mr4Nx51MHNvwfHggaBJE=
Subject key identifier: 61:44:DA:8A:D6:EA:79:6B:86:6D:0D:AB:AF:8D:40:E2:BE:8C:23:6A
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 166C
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/YUTaitbqeWuGbQ2rr41A4r6MI2o.roa
Signing time: Thu 27 Feb 2025 05:58:32 +0000
ROA not before: Thu 27 Feb 2025 05:58:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 10103
IP address blocks: 180.223.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5740 (0x166c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 27 05:58:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6144DA8AD6EA796B866D0DABAF8D40E2BE8C236A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:ea:29:7e:24:d5:73:f0:31:35:6b:5b:ca:
49:6f:d2:23:9a:dd:c8:35:09:09:80:4f:fa:28:9f:
ee:99:72:bb:03:a8:7e:62:10:bc:2e:f5:59:8a:f7:
96:8c:34:83:0d:d6:28:74:59:af:6d:9a:5f:7b:e3:
df:8f:d1:fc:0b:95:cc:1e:96:7c:0a:ae:16:a8:96:
a7:e8:52:c5:ef:b8:10:94:ec:38:69:59:67:9a:ff:
66:ef:76:88:bc:ed:1b:7a:df:92:a3:0d:8b:8d:77:
5c:ce:6e:bd:d1:ad:a4:97:49:f6:18:65:f7:73:6a:
ad:25:23:9f:7b:96:8a:98:f5:2a:12:f7:7d:20:f2:
57:01:f4:73:92:25:3f:a2:a8:3e:b6:36:94:1a:2f:
6e:06:d2:a2:e2:81:6e:71:10:63:b5:c8:59:1c:7b:
b9:eb:11:6c:b1:33:07:4f:a0:de:44:aa:40:f1:62:
58:51:be:1b:c5:03:d6:d5:1a:84:c8:da:bb:db:4b:
49:64:8b:2e:2b:1c:e1:c4:08:f3:3a:eb:0f:db:b5:
89:a7:2f:ed:45:c9:f2:b4:15:f3:3f:86:b6:38:30:
a6:b0:8f:72:89:07:e5:62:01:1c:f2:15:01:1e:8b:
42:b0:08:03:ef:46:98:27:24:2a:19:4e:75:aa:8b:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:DA:8A:D6:EA:79:6B:86:6D:0D:AB:AF:8D:40:E2:BE:8C:23:6A
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/YUTaitbqeWuGbQ2rr41A4r6MI2o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
49:fe:29:1d:fe:cf:5e:08:f7:dc:e8:69:04:10:10:4e:b7:96:
7f:60:32:b4:a6:a1:80:7f:3a:a3:cc:ca:eb:2f:4f:3d:10:99:
db:3d:9d:8c:cd:14:b2:17:77:10:db:85:cd:03:ea:3d:86:6b:
c6:fc:b3:72:98:d4:2d:ef:33:22:e7:e6:7c:ac:6d:0e:f2:c0:
f0:8d:08:3b:58:21:44:18:d5:d6:2f:f3:92:e1:61:8f:89:19:
07:c3:25:0f:28:97:c9:89:5a:b5:c0:f6:92:5a:5b:d3:92:a5:
b6:d7:d6:79:be:a9:7b:6f:96:7e:3a:56:3e:b0:62:13:a6:66:
03:28:59:13:34:e8:03:72:66:e0:1b:36:d2:5d:ee:dd:5e:a0:
e3:fc:e8:e7:ed:01:70:97:4e:4e:61:35:49:4c:e3:69:84:75:
ab:a9:8d:8b:06:34:f4:63:39:be:a4:0b:25:b6:7e:fe:05:4b:
dd:d6:f5:f2:e0:0b:74:fa:32:dd:90:1a:b7:23:af:d1:c2:6f:
15:d9:ff:84:33:e5:98:d5:59:5e:be:ff:70:db:8b:33:7f:4b:
e0:2c:97:2c:ab:92:b2:1d:f4:e5:e7:f5:3d:79:00:92:10:a5:
35:d8:ab:02:e6:e9:98:31:f0:33:d3:29:d2:27:f0:5c:06:42:
c3:03:b8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:40 2025 by rpki-client