Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/P7VcSLJNAP-aNazpFgpTa9_E5X4.roa
File: P7VcSLJNAP-aNazpFgpTa9_E5X4.roa (raw, json)
Hash identifier: uwD1LKv9mQK7uB0gyWmiMeoXFhkhfZHI1eQYXX5K/Xo=
Subject key identifier: 3F:B5:5C:48:B2:4D:00:FF:9A:35:AC:E9:16:0A:53:6B:DF:C4:E5:7E
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 05EB
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/P7VcSLJNAP-aNazpFgpTa9_E5X4.roa
Signing time: Fri 16 Dec 2022 22:11:47 +0000
ROA not before: Fri 16 Dec 2022 22:11:47 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 7018
IP address blocks: 180.223.208.0/21 maxlen: 24
180.223.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1515 (0x5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Dec 16 22:11:47 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=3FB55C48B24D00FF9A35ACE9160A536BDFC4E57E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:35:d8:eb:6f:5a:3f:8c:37:12:0d:fc:6b:
38:2b:53:30:7f:e5:93:a7:40:cd:6e:3e:07:1b:48:
22:cf:4d:0f:26:e3:76:b5:1b:63:b6:37:cf:4e:6b:
0d:fd:2d:0d:1e:da:20:6a:f6:fb:9f:27:25:86:d3:
22:d7:31:5b:59:7f:3a:18:27:4e:2f:7d:0e:1b:c8:
d1:7a:96:3d:8d:2e:1a:6a:1c:b9:07:45:f2:c6:b9:
77:0b:67:16:c4:48:1c:45:73:c3:ed:9b:9c:bb:03:
03:d4:ac:58:18:be:cc:dd:2f:13:96:4e:eb:c0:9b:
7c:37:8e:d2:ad:5d:3b:07:c8:7c:9e:0b:87:27:de:
b0:aa:bd:d7:16:7b:3e:07:3a:f2:ad:02:63:05:0b:
18:cb:eb:40:d5:a6:a1:e3:b2:b5:1a:a9:ec:0e:47:
c9:44:73:7d:bb:5f:25:b6:7d:08:5f:fa:65:04:26:
4b:1c:f0:e4:15:2a:52:43:4c:6f:ef:68:c1:df:59:
ad:fa:a4:73:19:8e:f1:b8:b9:f3:bf:27:55:b8:c6:
b9:e9:46:80:59:ee:f6:66:ed:a1:8f:17:65:ba:64:
ff:e7:61:d6:d2:79:2c:3a:54:7c:30:4f:69:5e:b3:
ab:a5:fe:9b:6d:35:15:eb:87:d0:7f:2c:f9:c0:10:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:5C:48:B2:4D:00:FF:9A:35:AC:E9:16:0A:53:6B:DF:C4:E5:7E
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/P7VcSLJNAP-aNazpFgpTa9_E5X4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.208.0/21
180.223.224.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:d1:1b:33:0d:59:42:d3:b6:fd:28:bb:3b:2d:61:46:fb:05:
3c:98:98:ed:05:ee:44:b6:6b:4f:fb:87:cb:61:42:98:d3:d4:
cc:07:05:09:f2:98:14:1c:e1:80:80:62:74:ec:f8:dc:3f:27:
4d:9e:cb:f3:7a:7e:47:17:42:f1:fb:f9:9c:29:70:40:56:7d:
c5:b4:74:a0:1e:5d:10:57:58:f5:cc:97:4a:9c:73:a0:37:5e:
e2:58:c6:bf:02:d8:d4:e1:0c:2c:ef:40:a3:16:52:a4:25:54:
d7:67:1e:b2:29:a4:34:3c:c2:9a:46:16:70:04:16:33:c2:d7:
d0:d4:9e:c5:66:2f:88:d7:59:0d:14:1a:3c:40:09:9e:a3:f5:
17:91:a4:83:17:7b:e8:86:36:b2:51:98:92:be:a1:64:ee:ac:
f0:76:a6:c0:33:6f:4d:11:b1:2a:46:4d:95:3c:e7:ce:b8:1a:
e1:d1:cc:aa:04:3a:44:2c:a3:9f:f9:5b:d4:f1:86:10:f4:6c:
2e:a2:2f:f1:c5:81:24:4f:74:ad:1c:5e:5f:b7:66:4f:90:c2:
9b:78:19:a1:ed:60:a0:c4:31:a3:27:6d:17:2f:83:7b:5f:a8:
9f:e5:3e:6f:66:05:05:3c:f0:9a:5a:70:b1:d6:13:56:71:f3:
da:9a:2c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org