Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/XOhISaARtgjnjXUqOmIdzjKaAYk.roa
File: XOhISaARtgjnjXUqOmIdzjKaAYk.roa (raw, json)
Hash identifier: 8D5qAOMRfhGOV7s995Mk43fyosr1XJAQEhbhBTkaqKw=
Subject key identifier: 5C:E8:48:49:A0:11:B6:08:E7:8D:75:2A:3A:62:1D:CE:32:9A:01:89
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 4B
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/XOhISaARtgjnjXUqOmIdzjKaAYk.roa
Signing time: Mon 21 Mar 2022 23:02:49 +0000
ROA not before: Mon 21 Mar 2022 23:02:49 +0000
ROA not after: Fri 10 Mar 2023 09:35:39 +0000
asID: 1239
IP address blocks: 180.223.192.0/19 maxlen: 24
180.223.224.0/20 maxlen: 24
180.223.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Mar 21 23:02:49 2022 GMT
Not After : Mar 10 09:35:39 2023 GMT
Subject: CN=5CE84849A011B608E78D752A3A621DCE329A0189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:64:29:f9:b5:a8:8d:c1:75:61:3c:de:2b:
fd:c6:10:d4:5e:9d:cc:ad:2b:d8:ec:f7:3a:b9:d7:
d7:12:8c:f7:50:1f:c5:b6:c2:67:c1:1a:c0:06:a9:
15:43:40:26:26:df:ff:57:b9:18:3a:f8:4a:3d:11:
20:b5:24:5e:91:93:43:f3:58:64:3d:28:e4:44:62:
41:80:a9:e7:2b:4b:2c:db:6a:b5:83:bf:d2:1e:73:
6f:9d:83:db:63:00:d5:de:40:d1:cd:20:9f:09:16:
a1:7d:2d:bd:8b:68:90:92:3f:eb:75:36:33:67:9b:
48:23:10:7b:61:06:4f:79:5d:32:07:6e:40:06:41:
3d:0f:b3:03:f9:7c:5e:c9:a7:a4:84:7a:b6:9a:45:
b2:c5:5c:0c:9f:0f:34:f7:35:8a:6f:44:a4:b1:bc:
4d:6a:7a:20:84:98:81:94:df:b9:7a:10:e7:08:ba:
a1:df:ad:33:b2:c5:22:86:7d:bd:c1:6b:f2:ee:08:
3d:2d:c6:7c:15:1a:e7:09:0e:ec:18:76:18:89:1e:
d7:d8:17:ff:9a:17:b8:38:40:77:61:60:a6:cb:9e:
2b:24:a8:7b:ae:d3:3c:c6:85:f7:6b:34:96:58:65:
be:1d:2f:89:60:53:94:e2:3b:b0:f2:14:40:6b:33:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E8:48:49:A0:11:B6:08:E7:8D:75:2A:3A:62:1D:CE:32:9A:01:89
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/XOhISaARtgjnjXUqOmIdzjKaAYk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.192.0-180.223.239.255
180.223.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:68:e0:9d:65:c1:e4:f6:52:7d:a3:d5:b0:4b:84:a7:85:58:
ab:bf:16:06:ee:70:e6:0e:51:57:79:6c:76:59:6f:62:7d:79:
14:62:0f:c5:03:16:ef:d6:8b:45:8c:54:7c:2f:0b:fe:bb:b0:
cd:1d:c2:8f:00:98:fc:ea:80:5c:df:f3:04:40:57:bd:0c:28:
f8:b0:ff:f4:ec:f2:3b:66:c6:46:e9:e6:1f:3f:fe:fa:b3:2b:
dd:35:6f:93:95:f3:dc:cc:fb:e0:b4:78:b1:fe:84:12:7c:53:
eb:a8:0c:db:36:d6:b0:3d:d3:84:b9:f4:71:1d:5d:26:03:a5:
57:46:00:38:63:23:88:7d:0e:c6:79:5f:a3:43:80:7d:7b:6f:
5f:75:1b:78:d2:ec:23:f1:fc:d4:39:1c:3b:a7:ba:7f:eb:95:
b3:b3:c4:32:10:fa:d5:3a:99:a7:d5:e5:63:c7:63:67:27:f9:
d4:3a:dc:5c:ef:e7:ef:9f:1c:1c:4f:e2:ee:08:f9:11:c3:3b:
ca:4e:f6:cd:35:67:81:21:c9:3e:73:5b:14:78:21:c2:87:ec:
c0:f0:5e:97:a4:b6:d5:1a:e0:94:de:b7:d0:01:30:2d:b8:ae:
b1:41:e3:74:b1:43:31:4c:73:51:45:b8:c9:27:51:d1:57:8c:
27:cf:84:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org