Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/xLJ-q3srQ203h5ju4FCRYMH8y7U.roa
File: xLJ-q3srQ203h5ju4FCRYMH8y7U.roa (raw, json)
Hash identifier: d/30k5Ha4Ks40SPZioKZRD8gLPof1vEbToPUdc879eY=
Subject key identifier: C4:B2:7E:AB:7B:2B:43:6D:37:87:98:EE:E0:50:91:60:C1:FC:CB:B5
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 156A
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/xLJ-q3srQ203h5ju4FCRYMH8y7U.roa
Signing time: Fri 17 Jan 2025 01:27:42 +0000
ROA not before: Fri 17 Jan 2025 01:27:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 984
IP address blocks: 180.223.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5482 (0x156a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C4B27EAB7B2B436D378798EEE0509160C1FCCBB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:bd:cf:4a:22:77:ef:f2:05:a5:8b:e8:ea:
03:bc:6d:88:d1:45:00:91:d6:2d:6a:8b:a3:fc:6b:
43:a6:cd:a5:d6:c9:0f:b6:55:ae:f3:b1:b0:0e:9e:
2b:05:b3:5b:2e:65:df:6c:d9:64:b1:d4:53:a5:df:
ec:0c:01:4b:1d:41:3f:1b:5b:59:af:c9:8e:72:4c:
9c:d6:94:94:48:9d:78:dc:04:54:3b:52:86:e4:f0:
28:25:9c:0b:1b:fb:6f:c3:a0:74:0a:25:23:06:05:
3f:14:34:a0:fa:74:1d:eb:ee:bb:08:3e:4b:e9:97:
d0:da:d9:8f:ce:38:e9:88:42:94:02:3c:4a:7e:e3:
4b:28:7c:13:17:2c:ab:44:23:64:a5:8a:69:2f:b4:
87:d7:81:b3:1b:3e:f6:ab:d9:ff:74:40:55:74:d3:
62:38:e9:d9:5b:be:34:a1:a5:0d:af:56:11:d8:5d:
59:98:96:46:a6:85:a1:1d:b1:b2:1e:9c:f5:bd:de:
93:d5:fd:46:83:78:b3:f7:e6:cc:36:df:04:e8:53:
47:ed:3d:2e:a2:7f:cf:d5:f9:d9:69:76:a8:6f:6a:
0d:18:44:4c:c0:28:e2:bb:62:24:d4:1e:bb:10:07:
79:d7:c8:e9:c0:40:76:19:42:c3:11:9b:11:14:21:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:7E:AB:7B:2B:43:6D:37:87:98:EE:E0:50:91:60:C1:FC:CB:B5
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/xLJ-q3srQ203h5ju4FCRYMH8y7U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.126.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e4:ad:cb:86:9a:3e:ae:1e:f8:72:86:44:c6:3e:c6:c4:1a:
f6:1d:05:fc:82:d0:9f:8c:ea:93:f0:64:43:13:fb:7d:03:ef:
49:77:b3:d1:98:79:58:d8:f0:df:3c:fb:c3:c7:82:df:a2:0e:
0a:cb:e6:03:4a:7f:69:d8:97:3e:de:49:e1:b2:d2:05:78:07:
8b:3c:79:4d:63:4b:31:b1:b9:df:3d:43:6a:bb:55:c3:07:9f:
1f:06:06:18:3f:a8:16:1e:df:1a:7b:e3:10:52:22:41:34:cb:
ed:1c:2e:8a:6c:bb:e4:d1:1b:71:f2:92:d6:89:dd:e3:60:ad:
c7:71:32:ed:02:96:33:06:32:7d:fe:1a:26:a8:14:60:8c:46:
d7:29:e0:09:02:94:c2:a0:74:fd:63:36:cf:66:85:14:6b:bd:
65:3a:a6:3f:e4:17:ba:5b:12:19:a5:60:bb:2a:f2:e8:74:53:
06:3c:fd:a6:d7:e6:d8:10:e5:2b:c8:ea:ba:f9:a3:fc:ff:df:
58:87:00:88:f1:61:77:b4:5a:ef:a7:60:3b:b2:d0:5d:19:36:
c8:55:41:5d:62:13:65:de:6f:cc:89:63:e1:f2:39:da:cc:2e:
94:c8:b0:54:d5:4f:e1:53:32:31:25:88:be:39:d5:77:f4:32:
7e:6b:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:51 2025 by rpki-client