Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/jMUL_geqSX_CnGs_AR5C0uy9Wzo.roa
File: jMUL_geqSX_CnGs_AR5C0uy9Wzo.roa (raw, json)
Hash identifier: emauxXsre4XYK0aBDc+ju3MGEA9D2IW7enVfogFPdGE=
Subject key identifier: 8C:C5:0B:FE:07:AA:49:7F:C2:9C:6B:3F:01:1E:42:D2:EC:BD:5B:3A
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 166E
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/jMUL_geqSX_CnGs_AR5C0uy9Wzo.roa
Signing time: Thu 27 Feb 2025 05:58:33 +0000
ROA not before: Thu 27 Feb 2025 05:58:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 18811
IP address blocks: 180.223.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5742 (0x166e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 27 05:58:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8CC50BFE07AA497FC29C6B3F011E42D2ECBD5B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:df:60:0a:bb:ba:bd:93:90:c8:12:9b:c2:ea:
4e:90:7d:6c:cc:5d:9c:d7:c0:3d:11:00:c5:c8:c1:
99:03:71:8f:3f:64:14:a7:09:cd:4a:f2:9f:f4:04:
bd:59:60:27:12:03:8a:9f:10:62:e4:2e:1d:91:fa:
42:e4:53:b7:7e:56:ae:2e:b4:15:72:e4:d3:ba:4a:
65:6b:93:28:8c:9a:8d:2b:fb:91:65:b7:6d:85:20:
d0:83:1c:34:19:f9:35:52:a2:f1:9e:cd:25:52:bb:
eb:3e:1a:ef:ee:c3:bc:65:61:f4:a4:d4:35:50:15:
27:0e:37:b0:da:ab:9c:89:c7:42:b5:11:f5:c4:5b:
6f:72:63:e5:a8:4d:d2:83:d4:e5:dc:69:91:54:9c:
f7:c9:a7:f6:e5:5c:22:f4:24:70:eb:84:34:f8:46:
cf:e5:e4:ab:55:d6:98:86:e8:b5:50:86:f8:6d:db:
7b:a3:1d:a6:d8:48:aa:83:5d:ee:3e:8f:57:0c:76:
be:3d:55:26:10:2f:ec:29:72:14:7a:7b:5f:fe:2c:
19:df:6c:75:b1:68:19:b5:5e:e7:13:ed:59:4f:24:
7b:e8:0a:42:31:e4:37:f7:29:44:a9:4f:ff:a1:7e:
a0:28:c5:7f:37:05:3a:ee:e6:8e:f9:32:ee:d4:2e:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:0B:FE:07:AA:49:7F:C2:9C:6B:3F:01:1E:42:D2:EC:BD:5B:3A
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/jMUL_geqSX_CnGs_AR5C0uy9Wzo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:1d:e3:d4:1e:c6:2f:4f:65:d5:ce:2d:c1:50:7a:09:9c:cd:
d3:07:11:a4:fc:a6:8b:bb:b3:53:5b:01:2f:7e:15:33:2f:f0:
e4:59:a1:6c:07:b2:26:67:e2:55:c2:74:84:79:48:b0:dd:67:
c8:27:1e:e9:b0:43:ae:53:3a:2e:be:b8:aa:86:fb:33:b6:e3:
1f:33:74:37:cb:23:5e:7b:0e:68:9b:d6:ad:b0:a3:ba:84:cd:
47:37:52:6e:93:7a:51:bd:4b:b3:9c:3d:37:63:bb:31:1a:65:
ac:42:de:a6:d6:12:f3:b8:d7:a2:0e:40:80:01:71:d0:5b:60:
82:f8:8c:f8:94:d3:e9:6b:a4:38:de:a0:08:4f:a7:3b:42:94:
5e:4c:1f:47:9e:62:1f:95:a9:f9:38:d4:b1:56:b3:16:a9:4f:
04:fa:dc:bf:71:51:97:58:81:0d:c1:f1:51:59:08:aa:bf:40:
67:bd:be:33:2c:9f:86:54:95:c5:b8:11:65:1c:84:5a:15:1c:
c2:32:ad:3c:96:88:bc:fd:01:03:f2:7d:47:6a:42:ef:68:43:
bb:1f:4b:d4:35:02:80:9f:bd:b1:b7:82:50:87:09:22:4f:9c:
6a:c9:63:1a:0e:59:53:c2:c2:0b:2c:92:d6:64:88:4e:cf:ca:
2a:a1:cd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:50 2025 by rpki-client