Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/roNbvnzntd4hFggqzvSOvD8GBo4.roa
File: roNbvnzntd4hFggqzvSOvD8GBo4.roa (raw, json)
Hash identifier: jnQeeDRNvGc6YPUue6KtT9CoBJ8jcHEkTD4xddJyMXs=
Subject key identifier: AE:83:5B:BE:7C:E7:B5:DE:21:16:08:2A:CE:F4:8E:BC:3F:06:06:8E
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CC4
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/roNbvnzntd4hFggqzvSOvD8GBo4.roa
Signing time: Thu 02 Jan 2025 13:58:26 +0000
ROA not before: Thu 02 Jan 2025 13:58:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4811
IP address blocks: 180.184.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7364 (0x1cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AE835BBE7CE7B5DE2116082ACEF48EBC3F06068E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:8f:64:9f:d5:bf:86:89:7a:31:b7:49:f6:
26:65:d6:f6:8e:4a:73:4c:14:9d:19:2c:d0:7a:fb:
7e:14:bd:bb:87:ca:45:04:92:79:1d:85:6b:af:8d:
1c:e2:ee:ff:f6:c6:3d:b3:38:38:84:49:47:cc:ea:
5e:8a:33:56:44:4b:65:ae:71:e1:b6:39:e0:a3:13:
ba:07:67:8c:b8:37:9a:df:bf:95:bc:a8:70:f2:6e:
db:c1:98:fb:bb:f9:24:30:d5:f9:94:ff:bc:91:f1:
d4:53:f2:7d:59:56:37:b8:85:45:a1:9f:2a:30:3e:
f2:d0:a5:5a:f5:30:a1:66:0b:a1:31:1a:04:10:7c:
ee:3b:6b:c8:a1:10:46:ec:54:98:22:bd:ee:8e:c6:
a6:75:8f:99:ba:3b:12:05:34:e9:22:d7:fc:f4:9c:
3c:24:54:d5:5d:c2:7b:cf:a7:44:5d:c6:e5:b5:3c:
af:6f:48:47:8d:34:f9:3c:3e:b9:47:39:a7:e1:a2:
b3:b9:30:df:05:8f:f9:0e:ee:6c:f7:0b:60:36:f7:
12:9e:24:3b:cc:90:cf:f9:0d:71:fc:5d:e7:03:e2:
16:ff:2f:ff:71:34:74:7c:05:50:3a:2d:de:cc:14:
01:4d:6f:0c:0b:0d:bf:9f:fa:e6:3f:03:1e:dc:12:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:83:5B:BE:7C:E7:B5:DE:21:16:08:2A:CE:F4:8E:BC:3F:06:06:8E
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/roNbvnzntd4hFggqzvSOvD8GBo4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.168.0/21
Signature Algorithm: sha256WithRSAEncryption
af:8d:af:4e:8f:a1:c9:d7:90:31:5b:87:e2:67:b8:8e:de:cb:
6b:e5:29:64:82:d6:af:27:e7:6d:85:d9:89:2f:0d:b6:1e:0d:
87:26:c0:07:73:ed:48:04:ad:89:53:2e:ad:92:83:c2:7a:d5:
de:36:26:21:7c:28:f0:f4:f2:f6:81:c7:91:4a:cb:31:11:94:
c6:35:a6:fa:49:1b:41:7c:84:b5:13:d2:89:54:eb:d2:27:18:
6f:e7:4a:39:7b:89:ad:07:4d:97:cd:4e:49:e4:dc:df:61:9a:
68:dd:a1:63:37:31:24:ac:b1:95:db:77:9c:f9:f3:3d:9a:16:
69:99:ed:d4:f4:e4:d0:c4:43:8c:34:25:7f:04:f8:85:66:5c:
5d:53:54:e3:ee:39:22:8c:d7:29:b2:05:60:ee:4a:60:37:13:
de:0f:76:11:35:00:f0:2b:a2:f6:24:eb:04:6d:03:23:bf:b3:
11:21:6d:b2:b0:cc:95:44:7f:57:21:88:0d:fe:28:7b:4c:24:
4d:99:c3:e5:fa:57:7f:1c:0b:d3:43:cd:4a:d8:b6:11:54:91:
05:9f:29:7e:8f:07:3d:30:3d:68:5e:f2:cf:87:9f:60:a3:ce:
fb:ca:1a:54:1f:89:16:ef:41:3a:a2:40:70:05:ff:9f:4c:d4:
89:48:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:43 2025 by rpki-client on console.sobornost.net