Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/u2OAd2FcsapTQnkd6XawSh_E-s0.roa
File: u2OAd2FcsapTQnkd6XawSh_E-s0.roa (raw, json)
Hash identifier: oDYrW3yDvpwFbH7EQSZEJ+5V5Z46QcsIHZqJWQ9IrTc=
Subject key identifier: BB:63:80:77:61:5C:B1:AA:53:42:79:1D:E9:76:B0:4A:1F:C4:FA:CD
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1629
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/u2OAd2FcsapTQnkd6XawSh_E-s0.roa
Signing time: Sun 16 Feb 2025 03:31:04 +0000
ROA not before: Sun 16 Feb 2025 03:31:04 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7018
IP address blocks: 180.223.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5673 (0x1629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 16 03:31:04 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BB638077615CB1AA5342791DE976B04A1FC4FACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:ea:da:7c:27:61:a0:e9:20:38:32:e8:d7:
c1:39:c8:bc:60:8f:cc:09:f1:42:52:19:de:c4:74:
29:11:9e:77:b4:f2:1f:cd:53:8f:5b:08:ea:b8:a5:
c0:52:bf:14:4d:e2:62:28:24:e5:ad:88:35:b8:34:
01:ed:a9:4b:16:88:a0:5a:ea:0e:d6:32:bf:1e:9c:
91:02:82:eb:16:c2:7e:b3:15:28:72:99:87:44:6d:
f4:07:70:33:32:2d:c4:71:00:38:ce:6a:68:d2:21:
b3:45:f2:2d:ee:95:87:59:f6:aa:1b:c5:27:2a:05:
2a:6e:d9:82:f2:6e:96:b6:98:70:71:bb:36:6e:99:
34:29:ae:9d:a8:a7:57:d3:71:ec:53:e4:6c:9a:23:
b4:3c:93:e3:ca:7d:fe:54:c3:73:be:ba:8c:24:e5:
b3:56:da:75:26:84:d8:09:10:52:31:5f:8b:95:59:
d1:4d:b4:6e:d9:b2:67:de:97:b1:e5:35:4d:53:e1:
00:73:aa:5b:ce:8e:29:b4:eb:94:9e:0d:c4:46:3a:
73:1b:dc:e4:66:10:99:1f:51:41:2c:68:9d:cb:83:
a9:db:df:fa:78:1f:a4:64:5f:6b:53:2b:0d:02:33:
c3:3b:44:15:ed:bb:6b:d9:55:10:14:c9:02:48:85:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:80:77:61:5C:B1:AA:53:42:79:1D:E9:76:B0:4A:1F:C4:FA:CD
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/u2OAd2FcsapTQnkd6XawSh_E-s0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:5d:ca:e0:b6:ff:2c:7d:b5:0d:b9:0a:7e:bb:f6:ba:4a:10:
36:8a:5e:ac:40:8e:23:67:73:72:3a:8e:71:dc:eb:9b:a9:ff:
4a:83:95:f2:bd:cb:68:f8:5e:76:2f:81:bd:a8:86:58:cf:e2:
e9:ed:cf:99:44:c1:d4:2a:55:b3:8f:9e:8c:5a:fc:9e:ae:43:
cf:33:04:bf:48:ed:f6:1f:c7:58:b5:17:4a:f0:63:9d:d4:3f:
bd:d6:10:e1:7c:b8:67:a6:bb:49:b1:78:ab:30:0e:f0:8e:10:
d6:f4:2a:57:46:1a:72:5c:e7:60:95:db:09:2e:e9:97:d3:ed:
3d:f1:87:f8:4b:e6:d4:07:03:c5:bd:ed:42:34:f5:3c:4b:ed:
82:2f:f9:78:cc:6b:81:93:db:23:e7:6a:b0:91:85:e9:6e:06:
5c:81:0c:8e:50:c7:1e:5b:e8:53:c7:72:4c:6f:2b:48:77:dd:
f0:dd:59:6a:bd:b3:56:f3:d1:c4:e5:07:e6:af:9c:32:33:7a:
32:b4:31:1a:9c:eb:90:1b:aa:85:41:33:31:e7:1f:72:a2:95:
aa:10:fe:79:1f:af:bd:80:dd:f0:64:32:c9:3b:31:16:3f:59:
5c:c9:bf:af:79:2d:23:a9:53:7d:f3:98:2d:d3:7b:a6:f7:a2:
21:f5:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:01 2025 by rpki-client