Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/eLFQtH7LboY_4l_PE69fvIns728.roa
File: eLFQtH7LboY_4l_PE69fvIns728.roa (raw, json)
Hash identifier: hidcESIdbbOWKg+m85CebwmiGWGf+gnrkA3O2+h5xm8=
Subject key identifier: 78:B1:50:B4:7E:CB:6E:86:3F:E2:5F:CF:13:AF:5F:BC:89:EC:EF:6F
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1356
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/eLFQtH7LboY_4l_PE69fvIns728.roa
Signing time: Wed 09 Oct 2024 00:44:09 +0000
ROA not before: Wed 09 Oct 2024 00:44:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 180.223.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4950 (0x1356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Oct 9 00:44:09 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=78B150B47ECB6E863FE25FCF13AF5FBC89ECEF6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:34:3d:7c:0e:03:5f:83:a3:7b:4d:e0:5b:
6f:aa:b7:39:01:46:b2:bd:29:61:d8:b3:ce:16:9c:
a5:15:64:74:d9:db:c2:7e:4c:30:2c:7b:0a:f5:db:
4b:7b:a9:a2:4e:05:22:23:b8:4c:13:22:09:81:4d:
96:11:85:ed:fb:f4:ba:c2:6d:ce:d6:52:b9:24:8d:
f4:6c:9e:64:bb:56:94:5c:d7:a4:9c:61:e3:a9:6d:
4b:ac:68:3c:f6:9d:51:5d:be:a5:0d:44:c3:02:eb:
51:91:99:b7:d3:b4:4d:6f:c1:5e:15:8a:b9:8b:16:
af:3f:ed:78:e6:59:57:8c:17:ee:c6:f1:21:90:2c:
2e:9a:78:fd:1f:8d:48:10:a5:7d:bd:b0:aa:b5:ba:
da:50:f4:9e:34:5f:d7:33:ed:c0:dd:35:dc:bf:28:
61:de:d9:8e:a4:47:c9:96:c2:93:41:9c:4d:0b:7d:
a9:87:a3:e3:69:8e:58:93:89:07:e3:4a:b8:fe:2c:
6d:f6:5e:3b:89:14:0d:58:d0:cc:0d:92:bd:92:62:
d4:1e:1c:7c:5d:b7:a2:32:57:ec:5b:87:80:e5:0d:
24:ad:0e:41:65:8d:e1:c0:ba:12:9e:73:b2:db:24:
be:e3:d8:31:a1:a2:4a:ea:ba:8a:25:05:56:c1:71:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:50:B4:7E:CB:6E:86:3F:E2:5F:CF:13:AF:5F:BC:89:EC:EF:6F
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/eLFQtH7LboY_4l_PE69fvIns728.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.197.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6b:2a:ec:94:e9:79:e8:53:f8:9f:cf:67:28:96:9b:13:fe:
ba:a2:f4:a9:03:31:21:90:3e:71:c4:1d:bb:d8:e1:cf:db:8f:
88:10:b6:95:f4:4d:2b:0c:25:94:52:43:db:df:5b:0a:95:5a:
7b:4c:09:03:fa:37:c0:80:87:0e:b2:a3:47:b0:e1:82:c8:0b:
4f:4f:4b:7a:33:6e:d3:b8:f2:47:7b:b9:d0:1c:a3:00:5d:5c:
b7:27:e2:dc:d0:7b:2d:11:c9:54:1b:97:e0:cc:fd:ef:1c:16:
8b:f6:e9:99:f1:98:29:cb:bf:7c:44:40:8a:12:30:d8:4b:d4:
d0:69:d3:86:1a:55:f0:c2:37:0a:09:0f:db:6e:35:39:51:94:
64:2d:9d:61:0b:40:be:ff:aa:bc:68:7c:8d:dc:d2:15:04:f5:
98:e9:84:01:78:ac:65:ad:e8:71:74:12:93:e1:14:1c:3e:93:
e1:ba:47:09:fb:82:9c:44:85:ea:8d:d0:9c:76:9c:75:5e:5a:
18:d8:2d:73:4c:b0:b8:5f:2f:ea:42:6c:f6:c8:ce:39:8e:a7:
73:c4:e5:2b:56:f3:b3:6b:cd:c9:53:07:2f:cd:ab:83:2c:8f:
66:5c:fb:d8:c6:dd:11:b2:13:8e:3a:c2:c4:da:97:29:ec:60:
67:dd:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:12:09 2025 by rpki-client