Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/-4w1K-boTZNVfwtLa_Lgm7f1vhg.roa
File: -4w1K-boTZNVfwtLa_Lgm7f1vhg.roa (raw, json)
Hash identifier: 18KbLh4LtO1j45XlWv3aCPaipjuiDkEwLJmi+IIM0IM=
Subject key identifier: FB:8C:35:2B:E6:E8:4D:93:55:7F:0B:4B:6B:F2:E0:9B:B7:F5:BE:18
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 49
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/-4w1K-boTZNVfwtLa_Lgm7f1vhg.roa
Signing time: Mon 21 Mar 2022 21:58:31 +0000
ROA not before: Mon 21 Mar 2022 21:58:31 +0000
ROA not after: Fri 10 Mar 2023 09:35:39 +0000
asID: 1239
IP address blocks: 180.223.224.0/20 maxlen: 24
180.223.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Mar 21 21:58:31 2022 GMT
Not After : Mar 10 09:35:39 2023 GMT
Subject: CN=FB8C352BE6E84D93557F0B4B6BF2E09BB7F5BE18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:a9:45:2d:02:c9:64:33:15:48:13:62:71:
a4:94:d7:0f:1f:f3:d1:d1:ec:ad:e4:ba:43:02:5c:
f6:7a:11:d5:30:79:ec:5b:3e:56:8e:e4:02:68:2b:
67:d6:9d:db:0e:96:9e:bb:74:a8:b0:c8:4b:9e:68:
31:92:ef:1b:d9:92:fa:55:6c:b4:bd:93:4b:ff:fc:
f8:d8:2c:6c:a0:44:53:33:30:3c:fd:40:99:29:1a:
66:6d:69:cf:ee:5f:9f:c1:ea:26:ed:09:e1:01:1d:
26:f4:85:d5:54:b9:a4:90:82:67:0b:2c:30:ab:56:
20:9d:73:78:fd:0c:da:a1:47:52:5a:ff:da:ca:a9:
94:43:fc:81:66:48:60:fd:41:96:99:04:a6:c0:0e:
d1:f2:53:26:65:2b:9a:60:7f:c3:94:5c:c6:01:fa:
2f:1f:dd:df:62:10:e9:84:01:1b:75:d7:f9:7e:66:
fd:ff:6b:90:26:2c:d2:5a:e6:3e:0e:09:cb:52:f9:
c9:d2:b5:7d:b8:05:bc:5c:67:c4:af:9b:fe:bb:c3:
85:27:ed:80:cb:22:04:ed:84:96:b5:7b:0c:e9:36:
51:f2:19:43:63:50:07:60:f5:8b:66:02:99:d2:06:
3f:92:7d:a9:17:5d:20:f8:eb:e5:3f:98:e2:c2:c4:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8C:35:2B:E6:E8:4D:93:55:7F:0B:4B:6B:F2:E0:9B:B7:F5:BE:18
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/-4w1K-boTZNVfwtLa_Lgm7f1vhg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.224.0/20
180.223.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ec:1c:5d:33:10:ad:85:b1:de:f4:61:8f:45:91:8f:6a:e5:
6c:bb:59:3f:c1:cf:af:4d:54:2c:e3:17:4e:9f:c2:f2:89:9b:
93:93:d6:8e:65:ee:63:26:cb:25:dc:ca:8d:ad:be:89:c1:d1:
ec:a0:61:80:0e:3a:45:77:f7:32:57:00:c8:08:51:ca:17:bb:
b3:06:b1:ec:1d:78:0a:72:6a:8d:95:56:e4:09:df:ea:7e:39:
bd:48:68:84:36:5a:7b:74:dc:4e:49:52:6c:bb:0c:6b:03:1e:
1b:41:85:80:cf:c0:f7:a3:19:d6:6b:aa:8d:da:ef:0e:f4:25:
8b:ab:9b:cf:f8:2b:14:05:06:d9:91:51:10:16:af:1d:51:1e:
16:d6:54:c9:9a:e9:e4:b8:38:b2:fb:be:51:bd:37:b7:96:96:
38:63:e7:6c:97:50:6c:3f:8f:03:08:04:e1:a1:b9:d7:d6:2d:
6e:26:5d:d0:71:69:f5:a5:81:2a:3a:10:63:bf:1b:af:cb:93:
64:69:72:94:72:c6:8b:be:df:f4:2e:20:1e:84:df:3c:82:bc:
85:19:50:06:ca:a9:47:8f:00:f9:f5:a8:0e:de:2f:0d:db:6d:
2e:8e:59:88:ea:27:da:6b:ef:50:51:a4:6e:9f:19:27:10:a5:
f9:81:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org