Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/zhAhsmz0QSqujigsUQh6u43ZpAI.roa
File: zhAhsmz0QSqujigsUQh6u43ZpAI.roa (raw, json)
Hash identifier: hksO9BDa2JAmwuFLXRWb9NjTkgoNAFXK4G5P1g1yqTE=
Subject key identifier: CE:10:21:B2:6C:F4:41:2A:AE:8E:28:2C:51:08:7A:BB:8D:D9:A4:02
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1557
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/zhAhsmz0QSqujigsUQh6u43ZpAI.roa
Signing time: Tue 14 Jan 2025 06:39:08 +0000
ROA not before: Tue 14 Jan 2025 06:39:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 197537
IP address blocks: 180.223.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5463 (0x1557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 14 06:39:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CE1021B26CF4412AAE8E282C51087ABB8DD9A402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:a3:44:10:a8:94:04:0e:b6:10:c6:41:8b:
52:0f:25:5d:8b:46:a8:51:43:44:b6:01:30:51:43:
a1:89:27:61:e8:09:0e:5a:9f:4a:39:ee:86:c8:b6:
0f:a0:e4:53:dc:6b:10:c0:b8:be:40:62:e1:53:00:
b3:19:d8:d3:8e:9d:2f:93:70:d5:b3:23:5f:26:b5:
26:bc:7b:97:c3:e9:e2:b8:22:04:52:32:cc:4b:37:
9f:96:7e:03:e9:37:5a:aa:24:42:7a:87:19:7b:8d:
b2:d8:7b:a9:88:ff:68:0f:2f:71:5a:c4:f6:8e:87:
64:fa:37:57:2b:c4:4f:9c:9a:e2:4a:44:72:cc:4a:
50:51:27:2a:61:b2:34:ff:fb:90:d0:04:eb:4a:91:
9b:21:70:bf:01:e3:e7:54:26:28:3b:81:98:e0:f5:
d3:95:21:ee:95:3a:f5:e3:dd:8f:ab:6a:9e:d1:b4:
06:ce:1d:81:ad:e6:19:83:0b:52:90:31:49:ea:5e:
8f:0a:d1:5a:54:82:04:6d:37:e4:84:1c:f7:ac:8f:
73:36:45:7b:97:74:38:4a:5e:f3:2c:ad:c1:e9:5b:
aa:c0:a2:e8:1d:e2:7f:f7:32:af:c5:44:32:8b:e2:
7a:e5:41:8b:26:e3:08:40:11:8f:dd:f7:28:17:ba:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:21:B2:6C:F4:41:2A:AE:8E:28:2C:51:08:7A:BB:8D:D9:A4:02
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/zhAhsmz0QSqujigsUQh6u43ZpAI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.148.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:e6:3a:2f:c1:d3:74:69:05:07:34:34:b8:23:1f:23:d3:e0:
f6:cb:f0:30:8e:c8:fe:81:e5:a2:4e:01:bb:9f:d9:76:78:1e:
ff:f1:92:b2:a5:9c:b0:e3:1b:73:4e:97:97:49:af:ea:d1:b1:
9a:ca:02:e8:a4:6d:45:4d:40:1b:36:c0:b5:a5:0f:ce:18:fa:
00:3e:77:16:ef:cd:39:f1:90:9c:1e:63:85:7f:f6:d2:a7:c4:
6d:ff:92:6c:98:bd:ba:61:a0:b2:8b:94:1e:e2:a0:59:74:0e:
2d:d3:da:37:96:f9:a4:14:a6:86:3d:00:4b:af:c9:fe:db:9d:
db:7b:a1:0b:10:0b:4d:b6:ce:ff:0d:1c:03:25:50:b5:9f:dd:
2f:71:d6:69:cc:35:28:27:f9:ff:4d:6c:87:a5:e8:ba:13:d1:
40:4d:b3:be:cc:7b:81:7b:33:41:b6:80:1a:4e:79:1e:29:c5:
38:f1:bc:90:bf:da:36:44:f4:24:90:c6:b9:a7:b8:02:34:58:
15:23:2d:a8:e0:a2:bc:4e:94:3e:88:b8:53:ce:7a:45:bf:30:
60:fc:50:06:53:99:76:6e:b0:2a:42:c8:31:fe:08:a0:5a:56:
8c:cc:8c:d0:10:b3:42:d8:fa:76:cc:18:3d:be:0f:77:85:e6:
08:e6:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:40 2025 by rpki-client