Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/d_n0jkN_amboVYbmeqJdMEv60Nk.roa
File: d_n0jkN_amboVYbmeqJdMEv60Nk.roa (raw, json)
Hash identifier: kf83k15v7Th/x+w818UlPORwZEWWjXQgnvwJ15rde2w=
Subject key identifier: 77:F9:F4:8E:43:7F:6A:66:E8:55:86:E6:7A:A2:5D:30:4B:FA:D0:D9
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 01AA
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/d_n0jkN_amboVYbmeqJdMEv60Nk.roa
Signing time: Fri 27 May 2022 14:38:58 +0000
ROA not before: Fri 27 May 2022 14:38:58 +0000
ROA not after: Fri 10 Mar 2023 09:35:39 +0000
asID: 1239
IP address blocks: 180.223.128.0/18 maxlen: 24
180.223.192.0/19 maxlen: 24
180.223.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: May 27 14:38:58 2022 GMT
Not After : Mar 10 09:35:39 2023 GMT
Subject: CN=77F9F48E437F6A66E85586E67AA25D304BFAD0D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:25:64:a8:36:df:66:da:5c:43:73:3d:1e:
77:8c:7e:53:8c:39:17:c5:e0:a0:fe:7c:0c:92:da:
27:63:a5:0d:5d:d3:78:9c:de:8a:44:ae:f3:7e:f3:
48:99:2d:ad:78:f5:67:99:81:50:94:b5:93:35:c5:
ea:04:4c:43:a0:d2:c5:7d:11:15:45:bf:ee:cc:a3:
02:da:6f:b4:f0:e5:1e:41:23:42:64:e3:ea:eb:a8:
04:f5:0d:85:c4:4f:34:13:e3:ea:95:b1:f1:62:77:
d5:39:ce:dd:2c:3b:af:05:7e:63:f7:7b:77:94:ab:
c7:11:8c:6d:4b:cf:d0:7f:c0:60:b8:0c:ab:14:06:
13:63:e8:79:cc:d5:0e:be:75:71:c6:28:62:de:a4:
89:a8:ee:28:80:d4:b5:dc:3c:d8:23:20:5a:98:58:
3a:46:78:3f:a1:60:00:87:72:3f:ec:aa:44:7e:17:
80:64:71:dd:ac:32:64:cc:f2:66:be:5a:04:5e:6c:
63:8e:7d:65:b4:d7:36:74:df:c7:6d:fc:67:b3:7d:
58:89:9f:6e:45:d4:d2:fe:1a:42:dd:b3:20:96:6f:
fa:e6:13:48:7a:ae:d0:8f:0f:5d:34:d7:48:e5:3f:
b1:3b:a5:f5:41:e6:e5:8c:9e:6c:f5:fc:6c:3f:a4:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:F4:8E:43:7F:6A:66:E8:55:86:E6:7A:A2:5D:30:4B:FA:D0:D9
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/d_n0jkN_amboVYbmeqJdMEv60Nk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.128.0-180.223.223.255
180.223.240.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:c4:8e:c6:d9:4f:75:ee:90:c0:a8:37:95:2c:e7:81:c6:02:
99:8b:5d:9f:f8:14:23:69:7a:b5:f0:7f:47:42:f5:0d:7d:43:
b0:ac:b7:e3:f7:77:4e:62:97:9d:c1:10:80:c2:8b:02:a9:08:
c2:4e:1e:ee:e3:03:66:7f:fd:e7:60:32:4b:30:2f:47:2a:0a:
17:c7:06:37:d7:ac:4d:a2:e9:0c:f5:52:dc:af:65:65:b1:28:
a6:8e:b9:92:65:dc:a3:4d:b1:26:85:1c:d7:af:58:26:1f:0d:
bc:0f:eb:63:74:9c:d5:98:4f:f5:5c:d7:91:a4:37:26:42:53:
4c:8c:84:a1:f1:3e:1f:08:7b:35:cc:b2:41:ee:65:34:82:6e:
be:43:1c:35:e7:f6:02:f0:1f:c5:05:99:61:52:66:6b:a8:c0:
52:fa:4d:3f:4a:7d:05:32:87:fd:5a:5a:c1:fe:00:7f:15:df:
cd:63:3f:63:bf:6c:77:50:7d:04:c0:38:7b:20:ad:9c:63:c2:
46:41:f4:36:ae:37:1d:9d:f3:05:9e:b0:20:f9:6c:88:92:4d:
d3:49:3b:ba:1f:15:75:aa:2e:3b:d3:ad:cb:a3:4f:c0:2d:2d:
42:a3:4b:84:41:ac:0b:c5:91:03:10:84:20:41:fd:78:3d:b4:
91:a9:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org