Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/z6TJ91e4TL4gHdwCDtb9SQGR0RI.roa
File: z6TJ91e4TL4gHdwCDtb9SQGR0RI.roa (raw, json)
Hash identifier: BlEe9C+i4yc5T1XulC1b+Xb+To1ow5Z6q/UQ7QApBjE=
Subject key identifier: CF:A4:C9:F7:57:B8:4C:BE:20:1D:DC:02:0E:D6:FD:49:01:91:D1:12
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 124C
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/z6TJ91e4TL4gHdwCDtb9SQGR0RI.roa
Signing time: Tue 20 Aug 2024 12:56:45 +0000
ROA not before: Tue 20 Aug 2024 12:56:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 7018
IP address blocks: 180.223.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4684 (0x124c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 20 12:56:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CFA4C9F757B84CBE201DDC020ED6FD490191D112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:fe:14:87:f8:da:87:7b:4d:57:54:c2:ee:
bc:30:86:70:c0:8a:f6:f4:19:cd:0b:9d:80:94:ba:
cc:98:35:7a:9a:72:0c:f5:3b:3d:bd:97:01:bd:b2:
a7:a8:4b:11:28:91:69:82:5d:bb:e2:b9:da:d6:7b:
12:36:c8:dd:66:49:41:ad:32:b2:a5:6a:d5:f3:95:
ea:92:df:0b:25:82:42:25:85:66:3c:75:46:05:b6:
2e:bd:44:8b:ef:35:98:d7:79:51:c8:96:41:db:09:
33:d9:0a:df:f9:e2:cb:cb:4f:ed:e8:ad:71:0c:68:
04:db:4e:bd:2c:75:3a:28:bf:75:10:37:43:99:56:
c3:07:dd:be:9b:d3:54:d9:21:8c:b9:08:e7:04:22:
28:11:38:33:a4:15:f2:4b:68:ce:c6:f5:19:3e:de:
2e:f5:59:8a:e3:3d:d0:e6:63:dd:9d:a7:cd:05:ec:
bd:5f:ef:73:ac:58:1d:67:0f:ab:6b:3c:bc:4c:b0:
22:af:63:30:a3:63:34:2a:48:5c:78:b5:93:ea:91:
5a:dc:e1:aa:b9:41:6b:74:98:af:b9:9f:6a:5b:3a:
b8:ca:92:fc:ad:51:ff:5a:e7:b0:d0:f8:10:b7:f1:
d0:b0:b2:0a:63:93:d5:24:d2:6c:b8:96:01:1e:cd:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:C9:F7:57:B8:4C:BE:20:1D:DC:02:0E:D6:FD:49:01:91:D1:12
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/z6TJ91e4TL4gHdwCDtb9SQGR0RI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.240.0/24
Signature Algorithm: sha256WithRSAEncryption
36:07:9e:8b:51:1a:de:46:03:17:f0:51:9b:d2:7f:9a:8d:d7:
0e:05:c3:d7:c4:80:77:f7:95:98:32:4c:4b:d2:21:3d:40:d8:
4b:a7:f1:65:5b:61:ed:1d:82:e0:e5:22:2d:79:4b:d7:7a:40:
ab:33:cc:e7:42:02:ff:cd:51:49:8a:a1:cc:05:e2:95:64:55:
d5:da:46:4b:d5:d3:5b:c5:65:84:ca:32:71:28:a6:c6:1a:9a:
c8:5f:44:08:e4:af:df:72:d5:eb:7b:8a:20:ec:28:fd:b1:74:
1c:df:bc:31:c4:a1:b4:37:26:0f:8e:a8:cc:c3:d9:8a:b3:8c:
53:cf:db:19:f2:2f:aa:55:c6:b3:ae:6c:df:0c:bc:95:56:16:
47:3b:8a:32:81:6f:68:99:75:c5:db:69:08:24:99:f8:4f:ef:
2a:7a:31:0e:78:94:90:cc:2b:e9:e7:d5:1d:e1:a9:ad:9f:f0:
6b:d1:63:4d:b3:96:60:ce:b4:62:93:ea:ab:2e:75:06:e5:ff:
6d:2b:07:ad:2c:78:d7:54:37:05:7b:34:01:89:e1:54:b4:ea:
75:a8:37:2f:2d:15:02:17:66:cd:5e:a0:58:b9:96:d9:fd:7f:
0a:39:5e:63:f0:ef:53:1c:9e:ed:6d:c9:3d:cf:c9:4e:8a:85:
6c:fe:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 06:11:31 2024 by rpki-client on console-fra.rpki-client.org