Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/gY7ALdlI532T-GsG0huxV3gBYRM.roa
File: gY7ALdlI532T-GsG0huxV3gBYRM.roa (raw, json)
Hash identifier: 0+0R9++5Xrx12IiiGElKdw1B0r020HfAJEMsb7PpOmk=
Subject key identifier: 81:8E:C0:2D:D9:48:E7:7D:93:F8:6B:06:D2:1B:B1:57:78:01:61:13
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 02CD
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/gY7ALdlI532T-GsG0huxV3gBYRM.roa
Signing time: Tue 19 Jul 2022 23:24:32 +0000
ROA not before: Tue 19 Jul 2022 23:24:32 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 398465
IP address blocks: 180.223.0.0/17 maxlen: 24
180.223.128.0/18 maxlen: 24
180.223.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jul 19 23:24:32 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=818EC02DD948E77D93F86B06D21BB15778016113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:2a:e7:3b:4d:3b:1a:67:74:17:44:5c:75:
76:0a:72:f7:a4:86:85:5f:26:9a:6a:fc:d3:34:25:
aa:3c:72:9e:1d:16:c4:34:dd:a2:36:fb:12:13:9b:
bb:4c:cb:96:88:4a:60:e1:e3:db:51:b1:e2:bb:8b:
6b:bc:b2:42:a7:73:0e:b8:d4:9e:ed:f0:83:2c:5a:
76:b6:73:fe:6e:11:62:e8:cc:a3:05:30:df:a1:62:
8b:1a:df:58:7a:d5:10:5f:3d:72:24:a5:e6:93:12:
8c:3e:5c:54:ef:f4:92:ee:3b:cf:9a:3e:ab:be:62:
1b:e8:16:7b:2f:4e:90:13:c4:05:00:3a:ae:24:ad:
67:52:a2:a3:23:6f:8b:c5:07:8e:2e:64:ed:17:ea:
44:dc:da:69:bc:db:ac:64:b0:71:43:49:b7:57:33:
d0:3f:29:3c:9c:22:f1:8b:5c:54:e6:52:c2:14:16:
a4:5e:4d:05:81:fc:43:eb:80:03:5a:4c:cc:e9:73:
d6:5b:10:81:14:88:44:09:9a:d0:01:db:4a:52:a1:
89:8b:62:a7:da:5d:72:40:7a:af:06:31:ca:da:ba:
63:c4:7c:04:6a:c4:ee:b3:4b:8a:c3:fa:9a:9a:67:
78:30:c2:5f:be:f5:f0:9b:76:89:b3:e6:71:2f:c1:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8E:C0:2D:D9:48:E7:7D:93:F8:6B:06:D2:1B:B1:57:78:01:61:13
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/gY7ALdlI532T-GsG0huxV3gBYRM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0-180.223.191.255
180.223.240.0/20
Signature Algorithm: sha256WithRSAEncryption
07:4a:58:ac:ed:76:b7:15:d6:0e:8e:23:77:d6:bd:ad:07:ab:
76:65:e6:a8:6d:d5:a6:be:04:0e:f4:28:5e:3b:ee:06:46:fb:
61:c6:54:1a:a4:8d:69:69:e7:6d:a2:3d:59:fa:8a:0f:a0:e4:
e0:b1:20:d9:37:e5:f3:bc:fb:80:53:49:7f:74:aa:f5:14:3d:
03:45:11:b6:d2:43:f0:34:0f:10:6c:2f:48:1b:f8:c3:09:99:
3a:bd:d5:dc:50:70:63:ca:ac:bb:68:f1:41:18:7b:8d:a9:e3:
a3:e1:5d:2f:d9:d2:69:97:5f:a3:94:b6:48:34:b4:93:2d:7f:
91:25:c7:35:2b:64:3b:33:0b:fb:25:63:5b:dc:b2:80:93:5a:
48:4a:90:56:0a:a3:71:d0:b5:33:0c:09:3c:9c:6b:70:ef:2f:
71:fb:0c:cc:33:4f:f6:fd:f6:5d:02:58:7c:19:90:44:bf:58:
37:d8:79:4b:a1:15:3f:82:3a:d1:9f:21:9c:aa:a7:8a:27:2b:
fd:73:9e:e3:5b:0d:b5:38:02:1d:f2:1d:a2:8c:27:e7:9e:1f:
c9:be:7b:d5:dc:5c:82:ee:71:06:75:62:53:bc:fc:5c:a6:ff:
8c:7c:92:5f:ae:be:7e:f6:9e:ab:1f:eb:4e:fb:1a:0e:ba:97:
f4:f8:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org