Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Ejst_Levwl0Ag-CmDaam_eiSEPw.roa
File: Ejst_Levwl0Ag-CmDaam_eiSEPw.roa (raw, json)
Hash identifier: EAkru/zf5wHbpgtCIdoLbHyirLXnREvtMhuLJFoRQRY=
Subject key identifier: 12:3B:2D:FC:B7:AF:C2:5D:00:83:E0:A6:0D:A6:A6:FD:E8:92:10:FC
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0808
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Ejst_Levwl0Ag-CmDaam_eiSEPw.roa
Signing time: Fri 23 May 2025 07:17:20 +0000
ROA not before: Fri 23 May 2025 07:17:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 56041
IP address blocks: 223.160.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:17:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=123B2DFCB7AFC25D0083E0A60DA6A6FDE89210FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:1a:bc:47:2e:91:b6:16:60:d4:30:e7:9a:
94:df:c4:5c:9e:c2:ea:63:91:59:ce:78:a2:fe:b2:
1d:87:f0:4c:f3:ad:ac:ac:5f:df:a7:bf:2d:e4:56:
1f:cd:25:ac:a1:5e:da:7e:ba:f1:dd:b4:cf:f2:34:
27:d1:fd:46:ad:b0:97:71:7d:25:54:46:10:dc:0e:
cc:35:e2:b8:69:82:7b:37:14:a8:a9:c5:87:10:ea:
ac:f0:44:fb:51:6d:a6:a7:15:47:c2:e1:ea:94:c4:
91:a0:d7:ec:40:3c:ad:67:b7:0d:8f:a1:fa:99:e9:
37:eb:25:c1:b7:ce:50:65:75:de:4c:5c:f8:c6:f5:
ac:d9:71:9c:25:05:1b:95:ea:eb:25:7b:f9:97:6d:
81:0e:8a:f1:9b:f6:2f:af:f4:fd:c2:b7:bc:28:ee:
b6:d0:66:bf:99:0e:39:69:ad:d8:bf:1e:87:f1:10:
06:9b:c7:d1:e4:9b:e4:fd:15:6c:59:e9:a4:37:8d:
b3:b5:c7:ce:a1:84:26:15:7f:60:2c:8c:ba:24:59:
fb:08:89:8b:fe:1a:7e:6d:d7:15:a4:ff:f4:3f:56:
35:1b:31:a2:d8:53:23:5e:79:95:c0:58:b4:f3:c5:
e3:bc:c4:c1:16:bd:66:e8:4a:b1:b0:10:85:88:15:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:2D:FC:B7:AF:C2:5D:00:83:E0:A6:0D:A6:A6:FD:E8:92:10:FC
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Ejst_Levwl0Ag-CmDaam_eiSEPw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.160.208.0/21
Signature Algorithm: sha256WithRSAEncryption
72:1c:ed:75:70:58:ee:58:30:67:3d:b7:01:ff:39:12:11:dd:
a3:68:73:46:2a:46:32:1a:50:ef:0a:b9:66:61:3e:4b:fa:ec:
93:d2:9b:9b:d1:19:40:8a:2c:7c:0d:b2:3c:13:66:07:13:e2:
50:c7:28:bc:e2:f7:eb:28:4d:e8:da:d5:56:4c:64:84:8b:bd:
70:33:e5:11:45:f9:ae:77:9a:10:e3:f1:d8:2d:05:f4:85:cc:
64:57:2b:f0:b4:13:a8:ed:19:bc:4d:cf:33:b0:00:6a:55:ae:
8e:f2:04:32:54:83:28:b4:07:b5:03:a9:74:a1:98:fc:fd:cb:
59:7e:7d:fa:91:9f:67:56:22:9d:26:48:81:f2:db:13:db:25:
86:e1:62:7f:94:b6:dd:d9:15:24:16:e7:38:76:03:de:76:78:
f7:a7:cc:7d:bf:5a:9c:dd:bf:96:4a:3f:87:37:e4:24:64:bb:
75:b0:20:5d:f0:c5:58:8f:20:b7:39:53:0a:71:44:14:2f:a6:
00:4c:3b:a5:77:0a:d9:cb:0f:56:23:ec:5d:18:3e:56:8c:eb:
40:66:ce:3a:dd:48:8c:49:76:05:e3:6c:da:df:82:5d:dc:f6:
98:60:e5:5a:1b:80:7e:6e:33:43:88:48:e2:9c:f6:07:20:ca:
f5:fd:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:02 2025 by rpki-client