Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/7OERHCkeqsQqXzhWTlXtX1yDQ3M.roa
File: 7OERHCkeqsQqXzhWTlXtX1yDQ3M.roa (raw, json)
Hash identifier: 3GBxoFEt2Jeh9CZxNVYJDs0qrvaw/5ZocqLlzzYgJF4=
Subject key identifier: EC:E1:11:1C:29:1E:AA:C4:2A:5F:38:56:4E:55:ED:5F:5C:83:43:73
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0173
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/7OERHCkeqsQqXzhWTlXtX1yDQ3M.roa
Signing time: Tue 17 May 2022 11:00:33 +0000
ROA not before: Tue 17 May 2022 11:00:33 +0000
ROA not after: Fri 10 Mar 2023 09:35:39 +0000
asID: 1239
IP address blocks: 180.223.192.0/19 maxlen: 24
180.223.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: May 17 11:00:33 2022 GMT
Not After : Mar 10 09:35:39 2023 GMT
Subject: CN=ECE1111C291EAAC42A5F38564E55ED5F5C834373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:bc:06:f8:9b:7e:39:ee:5b:a5:e2:8f:5b:
66:3e:6a:39:bf:8f:32:d9:4c:89:77:69:1b:0e:8b:
29:ab:b0:0e:9d:a6:01:42:a6:c2:1b:11:01:3c:e1:
1f:ae:13:34:4a:42:40:76:85:8d:43:b4:12:1d:15:
42:1c:a3:d0:ad:14:63:d9:9f:9b:b7:7d:75:58:db:
50:28:5c:88:8e:17:54:5c:7a:2f:43:b2:b4:aa:99:
0d:f9:72:c1:61:36:9f:be:cb:5c:ca:f8:83:96:4f:
51:fe:6d:d6:c1:0b:56:86:28:81:bb:73:70:99:ab:
e8:02:70:a4:c6:d0:b0:91:5e:f9:36:95:9e:76:cb:
90:f5:8e:c2:cb:dc:8f:96:c8:0a:80:29:ad:3e:f6:
f5:79:bb:4e:49:c2:33:39:51:30:68:89:3d:05:cd:
65:38:13:6d:2e:d6:80:2f:f9:44:59:a5:62:68:32:
a1:e5:a3:9c:b3:74:07:74:5f:a1:8d:53:6f:b4:fc:
2d:89:d7:2f:36:d5:52:69:56:c6:3a:f9:8c:0e:ef:
b1:7c:46:45:f5:55:9d:11:f9:77:84:1a:0e:a6:ed:
b3:b9:bc:b2:a2:fa:6e:95:c9:56:5f:63:dc:65:02:
b6:8d:29:7b:4f:6e:ef:c1:b3:dc:ee:f1:21:45:09:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:11:1C:29:1E:AA:C4:2A:5F:38:56:4E:55:ED:5F:5C:83:43:73
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/7OERHCkeqsQqXzhWTlXtX1yDQ3M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.192.0/19
180.223.242.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:ac:5d:a3:de:13:ff:c0:b0:21:a7:aa:50:72:5a:90:93:34:
8f:66:db:80:ad:1b:53:3e:4c:80:b2:9d:39:05:8b:fd:44:9d:
01:c8:6b:25:68:b0:58:2b:03:0a:f3:e9:10:cb:ce:a1:25:6d:
f5:3f:63:1f:b6:ad:57:cb:ca:c9:60:86:ae:7c:fc:2e:ad:82:
c1:fb:5a:0b:b8:8d:4d:7c:e7:47:61:0e:d0:79:c4:d8:03:ae:
e6:4a:4a:d8:0d:63:17:6c:22:9d:df:39:87:12:1a:bf:7d:06:
4c:69:8c:e2:8f:58:d1:45:a0:33:8a:34:f8:f4:92:ac:46:48:
78:78:cf:52:59:f0:3c:83:27:a3:e3:21:38:80:63:3c:bf:bc:
65:11:2f:bd:68:54:46:cf:78:95:5c:20:b6:28:6d:44:99:f7:
b3:ae:ae:ae:b3:11:fd:3e:1f:f7:ec:c7:3a:41:1e:ef:e6:e7:
3c:bf:2b:e5:e2:85:cd:27:6e:84:95:23:29:99:72:ce:1c:37:
67:08:42:f7:23:40:44:86:16:3e:f4:1d:2e:e3:84:10:b9:b1:
7c:f7:a4:32:60:ea:bb:b8:12:60:c2:10:46:35:5c:a3:e9:d4:
96:63:5d:ca:2b:f0:07:0f:1a:f0:05:ff:ab:50:1c:61:e2:13:
af:52:b0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org