Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/vbO3fMJC6nARYge_2p-C_h6Fb-w.roa
File: vbO3fMJC6nARYge_2p-C_h6Fb-w.roa (raw, json)
Hash identifier: B4GiGsrQc7LzkLlYfwnnjoA52GyVSB6qfDXiMKAoSCQ=
Subject key identifier: BD:B3:B7:7C:C2:42:EA:70:11:62:07:BF:DA:9F:82:FE:1E:85:6F:EC
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1578
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/vbO3fMJC6nARYge_2p-C_h6Fb-w.roa
Signing time: Fri 17 Jan 2025 01:27:48 +0000
ROA not before: Fri 17 Jan 2025 01:27:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138415
IP address blocks: 180.223.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5496 (0x1578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BDB3B77CC242EA70116207BFDA9F82FE1E856FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:8d:79:0e:0a:0a:a5:4e:95:2c:ae:7d:a3:
8f:83:ff:95:6e:b4:2e:f3:0c:7a:7a:49:31:c1:66:
64:50:a1:48:e2:cd:16:8c:9a:f6:fe:85:ad:3f:66:
ee:cc:cd:b6:5c:46:7b:21:98:f5:ad:20:13:36:ad:
e7:45:fd:28:91:fe:e6:34:86:f1:55:b0:ba:10:f2:
e2:00:95:10:be:74:76:1d:00:65:3b:3b:45:dd:db:
2c:87:8e:e1:07:49:d4:eb:54:27:51:82:24:2e:33:
56:09:83:f5:b3:74:f0:ab:b1:28:67:3f:33:96:ca:
5a:30:3e:2b:cb:55:ea:a6:47:c7:5e:80:80:a7:0c:
08:3b:84:47:4d:44:8c:35:23:af:31:5b:b1:be:d7:
41:6b:91:9c:2a:2b:72:38:f6:77:45:00:1a:b6:24:
57:bf:c2:b3:d8:75:2a:ed:5a:0b:8a:bc:d0:5d:92:
68:10:b4:6b:4a:68:03:67:82:a4:bb:08:d3:1b:ca:
62:32:17:0d:d4:88:77:30:54:06:07:4a:f9:49:30:
2d:73:3a:70:69:af:cd:68:59:f3:ca:58:38:d4:19:
89:78:02:56:54:25:51:00:6c:05:b5:60:6d:9e:fa:
07:a2:b7:08:8b:bd:a6:2e:7c:56:cb:10:9e:1b:4c:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:B7:7C:C2:42:EA:70:11:62:07:BF:DA:9F:82:FE:1E:85:6F:EC
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/vbO3fMJC6nARYge_2p-C_h6Fb-w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.248.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:0a:b6:1a:c2:09:a9:21:ef:ed:e8:2c:ed:45:13:5c:87:8f:
20:69:74:8d:bf:8e:df:de:e0:5e:e1:6b:b7:3a:aa:08:98:b0:
dc:9c:0f:57:5e:f1:d2:8b:b6:e3:7d:02:3b:98:70:4c:50:43:
2e:12:95:e2:c6:33:46:0d:7b:61:c7:b0:b4:9a:b4:4d:a6:98:
4a:ff:ff:05:52:27:3c:e5:97:2b:bc:5a:59:a8:52:28:b2:41:
37:21:a3:c8:9c:78:8e:87:a2:91:35:39:79:85:8e:b5:92:d4:
41:7d:54:06:56:5a:2f:47:13:68:e6:4f:85:5b:9f:52:35:50:
0a:29:e3:0a:f1:6f:71:8e:e6:ad:f3:62:47:4d:37:42:a8:19:
65:24:a7:b2:61:87:49:58:7d:9f:1b:24:82:97:22:57:0a:53:
75:e5:35:d9:89:c8:d4:7b:4b:8a:d4:a4:c0:86:09:eb:e0:2d:
fe:e1:f9:cc:e4:ca:e8:fb:f1:62:3f:28:78:d6:84:8f:b2:ff:
35:3c:db:c8:83:87:f9:cd:96:a8:2a:ce:b9:9a:b7:4a:c7:7f:
88:67:6a:ca:e3:2e:6e:3a:70:e7:d4:18:dd:b7:e6:8b:ce:06:
25:d9:76:d4:b9:70:94:38:8d:b6:e1:0f:5d:7e:38:04:b0:82:
d1:44:8b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:41 2025 by rpki-client