Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/w9pyRzgx0MYiecZtcVfwwBK8-co.roa
File: w9pyRzgx0MYiecZtcVfwwBK8-co.roa (raw, json)
Hash identifier: lEDsc1g5G4ahlHdoYd1+71gojJ6zOE9d6jS7R3MrP80=
Subject key identifier: C3:DA:72:47:38:31:D0:C6:22:79:C6:6D:71:57:F0:C0:12:BC:F9:CA
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 135C
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/w9pyRzgx0MYiecZtcVfwwBK8-co.roa
Signing time: Wed 09 Oct 2024 00:44:12 +0000
ROA not before: Wed 09 Oct 2024 00:44:12 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 180.223.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4956 (0x135c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Oct 9 00:44:12 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C3DA72473831D0C62279C66D7157F0C012BCF9CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:7b:cb:7f:f7:ed:13:c4:08:11:d3:17:3e:
b2:57:33:d8:20:1c:90:35:c0:6a:56:bd:9d:a5:38:
45:98:fa:aa:1f:5a:25:52:70:9e:9a:43:f3:af:68:
20:f6:b6:95:31:e3:2f:17:60:ff:c7:cc:ec:6e:ff:
3e:d2:0d:b6:00:5b:cd:ee:a5:0f:d4:d8:b0:2c:7c:
f9:4e:65:11:dc:56:e0:68:ca:f3:3f:31:50:92:f6:
64:f8:9d:f5:11:83:ea:46:da:de:04:9a:7a:27:61:
c8:c0:ef:28:96:58:4b:14:19:df:45:f6:3b:01:61:
f4:cb:47:6b:30:cd:d4:d0:48:80:ae:8d:e2:cc:bb:
31:3a:6f:c2:d1:18:d1:ea:92:76:86:64:f8:3f:a5:
d8:ee:df:10:1e:fa:50:1f:88:89:2f:49:3b:b1:73:
f4:a2:71:a0:16:45:65:f0:48:8d:16:a6:5f:5e:73:
05:88:f7:7a:2f:30:9d:78:8e:0d:4f:af:83:12:ce:
a8:b1:0c:1f:1f:30:81:dc:19:c3:5a:d1:7f:8d:a3:
ac:42:36:c4:3b:cd:c7:54:b3:dd:e7:e8:e7:f2:d9:
ad:b0:8d:c3:34:5d:25:25:cc:42:a4:bf:90:a6:83:
e8:b9:02:ab:09:ff:e6:a0:68:cb:f9:c5:ff:7f:b9:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:72:47:38:31:D0:C6:22:79:C6:6D:71:57:F0:C0:12:BC:F9:CA
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/w9pyRzgx0MYiecZtcVfwwBK8-co.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ad:d5:4e:06:f5:06:86:52:a7:87:cd:43:3b:83:ad:9d:cf:
58:e1:d0:6d:10:01:f8:6a:94:81:76:a8:a3:9e:41:4f:b6:ee:
21:46:68:e1:79:27:28:27:c0:ef:9c:2b:6f:80:43:a5:ba:d9:
46:cd:ea:e9:25:70:cc:fc:c6:57:6c:bf:71:10:bc:54:15:4c:
7b:3e:ba:86:b3:27:33:51:5a:89:19:c4:c2:fe:fa:96:71:e2:
0b:7e:b3:09:94:f2:e2:c3:ed:8c:e5:e6:3a:f7:9a:33:6d:4a:
7f:02:d1:7c:44:e3:ab:c6:fe:f1:9b:11:23:df:0c:88:81:89:
f4:15:8d:31:66:4d:4e:8b:9c:0f:3d:bb:a4:f1:f7:1a:1d:f1:
8c:bf:7b:f6:dd:54:75:19:74:70:e1:d3:1c:c0:df:6b:43:c0:
fb:a8:9b:f6:99:8d:37:ac:81:45:90:87:03:e5:5f:24:6a:5f:
c8:8b:25:d3:d8:0c:00:cc:aa:f1:07:c7:f5:51:af:3d:b8:1c:
f8:c0:fb:07:cb:58:f5:3a:d5:38:8d:07:6d:9a:88:17:b1:69:
ed:33:50:61:5e:f3:cc:0b:25:00:f6:44:63:c1:6b:62:d9:ea:
b0:c9:c1:2c:63:37:f0:02:52:e9:e6:a4:4d:1e:42:b8:7f:91:
07:bf:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:02 2025 by rpki-client