Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/y6S6loJrSxNPPp8Z68YFJHiGphc.roa
File: y6S6loJrSxNPPp8Z68YFJHiGphc.roa (raw, json)
Hash identifier: ufVO4LdtGxYRHuXuO3s83wWSpfb/5OTZT7g8RR2OKP0=
Subject key identifier: CB:A4:BA:96:82:6B:4B:13:4F:3E:9F:19:EB:C6:05:24:78:86:A6:17
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: A4
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/y6S6loJrSxNPPp8Z68YFJHiGphc.roa
Signing time: Wed 06 Apr 2022 23:49:35 +0000
ROA not before: Wed 06 Apr 2022 23:49:35 +0000
ROA not after: Fri 10 Mar 2023 09:35:39 +0000
asID: 1239
IP address blocks: 180.223.128.0/20 maxlen: 24
180.223.192.0/19 maxlen: 24
180.223.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Apr 6 23:49:35 2022 GMT
Not After : Mar 10 09:35:39 2023 GMT
Subject: CN=CBA4BA96826B4B134F3E9F19EBC605247886A617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:26:23:e5:44:27:ca:d1:d5:35:e6:6d:6a:
f2:24:2d:37:61:73:98:ea:55:41:69:e4:c4:b5:20:
83:81:0d:39:96:ff:8c:9a:8c:f8:d8:74:dd:02:57:
f5:03:8a:d3:65:7d:ef:47:4c:dc:dc:31:4a:b2:6d:
f0:ff:36:9d:96:4c:77:72:f5:fe:c2:93:f0:82:d5:
fa:37:85:28:60:39:2d:cc:68:bf:f7:18:ed:2a:f2:
c9:4a:d8:48:14:c5:aa:db:90:83:8c:9c:16:d5:15:
2f:c8:f6:5d:cf:0a:a0:fb:fa:bc:1d:65:b2:01:cb:
e3:bd:98:6b:33:16:33:04:99:b1:8b:66:e6:ca:c2:
5a:29:85:ab:d6:b8:55:58:34:ea:44:6c:73:5b:8f:
cb:ff:42:e2:3b:ce:32:a2:c5:f1:9a:3c:1b:02:3c:
88:91:8f:69:dd:41:d2:7b:04:5d:7b:4e:08:7c:e2:
5e:ac:6e:76:57:b3:43:6e:84:74:87:f1:b4:be:7e:
a2:1c:d2:bb:63:c1:86:8a:88:89:83:e3:73:c4:a4:
3f:92:85:0a:55:61:da:a6:b1:29:42:b5:2f:fc:98:
af:26:4f:75:a7:fb:63:bf:42:69:98:9d:4b:a9:63:
ed:ee:93:90:9f:00:95:40:8e:53:94:68:0b:97:61:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A4:BA:96:82:6B:4B:13:4F:3E:9F:19:EB:C6:05:24:78:86:A6:17
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/y6S6loJrSxNPPp8Z68YFJHiGphc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.128.0/20
180.223.192.0/19
180.223.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:75:84:3a:6f:94:ac:e5:d2:cd:d8:04:7c:63:db:f9:ec:1e:
e8:54:a9:20:3e:eb:15:0f:2d:16:6f:59:bd:80:e4:6a:f7:56:
55:79:a2:c5:c2:54:c7:4f:b4:6b:9c:88:2f:ab:25:ee:bb:3a:
93:54:4f:5d:b9:2d:e9:0d:da:5a:d9:df:9c:72:b1:11:f0:f5:
e7:4a:99:fc:44:b0:ba:41:5c:41:5e:9a:1d:b2:ad:8e:50:3e:
27:37:3f:3f:cc:61:8d:1c:13:d0:cc:17:60:82:1a:47:e8:28:
60:0d:60:5c:8b:ce:87:c1:86:05:67:6c:6e:96:a2:a6:af:35:
b2:b1:b4:ab:97:45:8c:e7:fe:f1:2f:45:58:e5:2e:46:02:3d:
62:d3:3c:57:38:d7:e3:6a:4b:26:96:6b:b5:d7:87:52:ea:0c:
a8:c6:c9:1b:b5:ea:72:c2:70:14:5d:8a:5e:7e:e4:d3:ba:6a:
12:f5:3b:03:b5:bc:c5:5b:bf:e9:6c:c0:de:45:68:65:ca:30:
80:6a:50:3c:ab:85:3b:c0:4a:52:2e:2d:89:5f:cd:5d:77:23:
52:11:09:6b:6c:c0:cf:dc:a7:cd:98:a9:fd:70:e0:f3:60:68:
93:de:27:11:f2:59:19:c0:0b:74:77:4b:b0:35:61:d5:c2:a0:
61:fe:08:95
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yMjA0MDYy
MzQ5MzVaFw0yMzAzMTAwOTM1MzlaMDMxMTAvBgNVBAMTKENCQTRCQTk2ODI2QjRC
MTM0RjNFOUYxOUVCQzYwNTI0Nzg4NkE2MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp5SYj5UQnytHVNeZtavIkLTdhc5jqVUFp5MS1IIOBDTmW/4ya
jPjYdN0CV/UDitNlfe9HTNzcMUqybfD/Np2WTHdy9f7Ck/CC1fo3hShgOS3MaL/3
GO0q8slK2EgUxarbkIOMnBbVFS/I9l3PCqD7+rwdZbIBy+O9mGszFjMEmbGLZubK
wlophavWuFVYNOpEbHNbj8v/QuI7zjKixfGaPBsCPIiRj2ndQdJ7BF17Tgh84l6s
bnZXs0NuhHSH8bS+fqIc0rtjwYaKiImD43PEpD+ShQpVYdqmsSlCtS/8mK8mT3Wn
+2O/QmmYnUupY+3uk5CfAJVAjlOUaAuXYUrPAgMBAAGjggH/MIIB+zAdBgNVHQ4E
FgQUy6S6loJrSxNPPp8Z68YFJHiGphcwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAveTZTNmxvSnJTeE5Q
UHA4WjY4WUZKSGlHcGhjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw
EgMEBLTfgAMEBbTfwAMEALTf8jANBgkqhkiG9w0BAQsFAAOCAQEAXHWEOm+UrOXS
zdgEfGPb+ewe6FSpID7rFQ8tFm9ZvYDkavdWVXmixcJUx0+0a5yIL6sl7rs6k1RP
Xbkt6Q3aWtnfnHKxEfD150qZ/ESwukFcQV6aHbKtjlA+Jzc/P8xhjRwT0MwXYIIa
R+goYA1gXIvOh8GGBWdsbpaipq81srG0q5dFjOf+8S9FWOUuRgI9YtM8VzjX42pL
JpZrtdeHUuoMqMbJG7XqcsJwFF2KXn7k07pqEvU7A7W8xVu/6WzA3kVoZcowgGpQ
PKuFO8BKUi4tiV/NXXcjUhEJa2zAz9ynzZip/XDg82Bok94nEfJZGcALdHdLsDVh
1cKgYf4IlQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org