Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/lx1-0wu-IrMqzpPrKaqlyReH5Nc.roa
File: lx1-0wu-IrMqzpPrKaqlyReH5Nc.roa (raw, json)
Hash identifier: R+/V3/m1VqQ4EribhTl9FaPji5XAViiadmbPBO0fUvQ=
Subject key identifier: 97:1D:7E:D3:0B:BE:22:B3:2A:CE:93:EB:29:AA:A5:C9:17:87:E4:D7
Certificate issuer: /CN=1194FBF18D7337954228B6B59B909E6308556BD0
Certificate serial: 06FB
Authority key identifier: 11:94:FB:F1:8D:73:37:95:42:28:B6:B5:9B:90:9E:63:08:55:6B:D0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EZT78Y1zN5VCKLa1m5CeYwhVa9A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/lx1-0wu-IrMqzpPrKaqlyReH5Nc.roa
Signing time: Thu 03 Mar 2022 02:30:42 +0000
ROA not before: Thu 03 Mar 2022 02:30:42 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 24409
IP address blocks: 111.223.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1194FBF18D7337954228B6B59B909E6308556BD0
Validity
Not Before: Mar 3 02:30:42 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=971D7ED30BBE22B32ACE93EB29AAA5C91787E4D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:f9:d2:46:22:e1:d6:e8:44:95:be:e9:7a:
19:38:41:1a:c4:cc:aa:22:a5:41:5a:7d:d1:64:2a:
d6:5e:31:0f:7f:5d:10:bb:44:91:7c:0d:19:5b:68:
fc:b6:7b:d3:06:9b:c8:42:ca:5c:12:f8:ea:8e:8c:
f9:20:87:ce:f8:84:e7:cc:43:0a:ab:12:5e:11:e1:
27:ea:93:bd:c0:cc:1e:e7:6b:0c:3c:19:36:7c:77:
c1:1a:f0:16:79:44:17:35:b0:89:6d:23:d2:6a:9e:
5a:f4:12:2d:41:be:23:c4:88:e8:f7:35:5a:f1:e1:
24:28:de:04:67:e5:47:58:f0:c2:cf:1e:9c:6c:b6:
c5:24:68:f3:2d:cd:8e:f1:e3:7c:39:31:f3:dc:0d:
9c:d6:f3:53:18:38:59:ae:b9:2d:5f:03:29:d1:b2:
2a:eb:29:31:db:e3:5b:fb:36:6a:d8:a9:f4:c6:b8:
bf:91:21:54:19:03:f2:8c:a0:6a:e2:23:8c:5f:34:
0a:18:d6:b5:24:1c:74:e0:bf:aa:80:8e:a3:4e:da:
7a:d8:bb:36:90:9f:a9:45:0c:f4:1e:9d:24:92:be:
fc:a5:6f:d3:d2:2b:d9:00:65:77:a0:f4:38:29:e0:
e3:e2:2f:db:56:a9:b5:3c:b4:10:ee:60:3f:58:e7:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1D:7E:D3:0B:BE:22:B3:2A:CE:93:EB:29:AA:A5:C9:17:87:E4:D7
X509v3 Authority Key Identifier:
keyid:11:94:FB:F1:8D:73:37:95:42:28:B6:B5:9B:90:9E:63:08:55:6B:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/EZT78Y1zN5VCKLa1m5CeYwhVa9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EZT78Y1zN5VCKLa1m5CeYwhVa9A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/lx1-0wu-IrMqzpPrKaqlyReH5Nc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.223.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:9b:06:ea:f4:47:60:a1:3f:3c:d0:6a:94:4d:1e:fd:d7:b5:
af:68:ff:e9:bc:b4:b5:5b:c9:a2:6e:62:ba:1b:63:1a:61:d5:
3d:c1:1a:eb:1d:81:d2:bf:c7:30:93:6f:4c:28:34:4f:61:10:
8c:4d:0e:47:56:a0:f0:31:23:18:3e:b7:f3:a9:3a:1d:3c:83:
bb:92:1d:98:da:42:b6:fc:f4:5b:3b:47:b9:34:cf:40:ac:45:
75:55:65:81:48:77:77:01:b3:47:7f:21:83:99:8f:c2:d6:b8:
03:75:37:ae:25:9e:13:94:81:08:fb:f9:9e:29:8d:e4:cc:88:
d3:87:4f:63:b0:35:8f:c7:36:2b:a4:15:c8:6a:f7:86:bb:46:
5c:4b:f8:84:ec:05:06:c5:a1:24:61:fc:26:a7:7f:52:2e:42:
14:99:e2:19:5c:1a:c5:9e:e8:85:d8:16:de:4c:6c:66:cb:6d:
71:f3:cc:7b:df:1f:2f:e1:1a:b5:c7:56:6d:f0:4a:b2:50:12:
24:29:2d:66:df:b0:20:ba:fd:99:62:5d:45:b1:cf:ad:89:e1:
32:42:aa:0d:35:dd:4f:46:32:88:9c:1a:a4:c2:7d:16:aa:75:
27:03:de:99:54:0e:e2:0d:39:23:25:d6:04:15:6e:c4:67:62:
41:fa:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org