Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/cw4q5H7z1JTODLVTRyPUeOXtd6o.roa
File: cw4q5H7z1JTODLVTRyPUeOXtd6o.roa (raw, json)
Hash identifier: UHU8ZgTGXkF8xNBg+bY8URyVMLoFr+xSus0XNZe4cds=
Subject key identifier: 73:0E:2A:E4:7E:F3:D4:94:CE:0C:B5:53:47:23:D4:78:E5:ED:77:AA
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 123E
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/cw4q5H7z1JTODLVTRyPUeOXtd6o.roa
Signing time: Tue 20 Aug 2024 12:56:41 +0000
ROA not before: Tue 20 Aug 2024 12:56:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 7018
IP address blocks: 180.223.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4670 (0x123e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 20 12:56:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=730E2AE47EF3D494CE0CB5534723D478E5ED77AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:45:da:a0:35:f9:a2:8b:06:b9:c2:68:ae:
bb:97:17:b4:5d:c8:04:ab:b0:35:ea:00:1a:67:78:
b9:9e:88:e4:2b:10:2d:20:2f:1d:56:b9:9b:f5:3c:
3d:ab:aa:ae:fb:56:10:56:3e:0e:0b:0a:d0:28:ea:
e1:4a:cf:9d:3d:f4:3b:f9:2d:62:d4:42:0d:95:6a:
0e:f8:a0:8f:34:10:d1:a0:c8:55:ab:20:bd:0e:b9:
57:22:1c:e2:f5:f2:9a:11:db:98:cb:33:21:c4:aa:
0a:5c:15:a1:bd:10:d9:f8:60:c3:ee:3c:e3:37:4e:
0e:5c:0d:bb:9b:01:56:34:92:4f:63:ca:2f:8d:e0:
45:a2:11:87:a7:da:60:e9:4a:c0:eb:92:91:64:b8:
2b:b3:fe:98:75:a9:9c:db:79:e5:43:42:01:ea:80:
55:20:76:e3:0e:4b:d1:fe:cf:99:fa:23:b8:21:cc:
6f:da:2f:8d:10:48:9e:9e:c4:b6:bf:20:80:d9:06:
e2:3f:bd:ad:1b:91:39:a3:5a:ca:90:3e:03:9d:14:
2b:6e:47:79:f6:02:90:0b:63:a8:e2:70:a7:4f:ec:
4c:e6:33:e1:f9:52:93:c5:59:64:af:b7:92:9d:37:
a1:41:c7:96:7a:6d:1d:bd:d7:80:4e:12:2f:16:ca:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0E:2A:E4:7E:F3:D4:94:CE:0C:B5:53:47:23:D4:78:E5:ED:77:AA
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/cw4q5H7z1JTODLVTRyPUeOXtd6o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.100.0/22
Signature Algorithm: sha256WithRSAEncryption
33:fb:fe:51:c3:2e:ab:fb:c7:aa:be:c0:0b:72:1a:bc:fc:b8:
ee:06:39:42:b1:2b:e0:3c:49:4d:1b:df:96:b1:5b:80:3c:24:
c2:f9:3e:43:44:6b:d2:d1:8b:81:3b:d0:8e:c4:25:c6:a6:4b:
3b:85:5f:16:7b:2f:df:44:a1:d4:ab:10:d8:b6:bc:e6:c5:10:
dd:64:ef:45:12:9e:21:14:61:7b:61:c0:82:59:8c:ad:d3:a0:
12:ee:52:38:a8:17:d5:96:33:ab:aa:1e:53:ba:58:dd:68:26:
ef:b8:2b:2c:c7:90:ac:0b:91:fe:4c:0c:85:2f:9e:66:cb:2d:
54:72:b0:4b:e2:37:0e:ce:ef:d8:5d:28:d4:2f:84:fd:3c:ef:
2b:af:77:19:bd:86:1b:39:16:9b:6c:04:1f:74:27:bb:c5:42:
e2:e3:a6:d0:a8:2e:74:c6:ac:34:48:1b:83:6f:ac:78:c1:c8:
be:13:39:29:e6:ea:52:e7:cd:3b:a6:1a:45:2b:46:d1:7b:9b:
88:ef:7b:4b:b2:fa:f6:18:63:ef:0a:f0:ce:af:06:f4:27:c1:
83:9b:2c:03:71:2c:5f:62:0d:4e:16:8e:b4:88:c2:e2:76:2e:
db:46:d4:41:2b:b1:d2:64:7e:47:c9:90:a4:3c:24:a2:4a:d5:
85:a1:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:59 2025 by rpki-client