Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Qox7pbjn_6G0Jp6wXpqlQcJkIDg.roa
File: Qox7pbjn_6G0Jp6wXpqlQcJkIDg.roa (raw, json)
Hash identifier: dMoqkq78d71azNOoOEMsnP8QpwKZZfMdpEb6+uEFUkk=
Subject key identifier: 42:8C:7B:A5:B8:E7:FF:A1:B4:26:9E:B0:5E:9A:A5:41:C2:64:20:38
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 01DD
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Qox7pbjn_6G0Jp6wXpqlQcJkIDg.roa
Signing time: Sat 04 Jun 2022 03:07:42 +0000
ROA not before: Sat 04 Jun 2022 03:07:42 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 1239
IP address blocks: 180.223.128.0/18 maxlen: 24
180.223.192.0/19 maxlen: 24
180.223.224.0/20 maxlen: 24
180.223.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jun 4 03:07:42 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=428C7BA5B8E7FFA1B4269EB05E9AA541C2642038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:b3:23:a1:04:8e:3b:59:7c:ce:3f:1c:69:
fb:3c:c8:df:04:e0:2a:2f:70:17:f6:70:3a:a3:83:
d8:ab:7d:62:4b:bc:76:de:a6:e9:a4:b7:fe:bf:75:
00:26:68:02:f8:a7:50:e1:fd:80:3f:86:83:ac:6e:
ba:ac:c9:b7:2f:b1:a5:ae:99:09:45:02:99:cd:93:
47:3a:63:3c:9d:29:01:54:5c:ac:2a:19:ea:be:fd:
dd:24:49:c9:45:a7:27:1b:49:6b:39:6e:e7:fb:f4:
cc:43:b3:bf:ee:f0:44:72:dc:56:0b:b4:44:e7:ca:
ae:fa:3f:fe:f0:81:60:f2:32:e9:95:b8:02:e4:64:
3d:4c:42:2b:28:a5:2d:7c:ed:2e:a1:3f:de:a0:3c:
dc:6e:53:b8:4e:5c:b9:f2:b8:24:d8:50:87:14:a1:
32:aa:ac:0f:db:9a:10:bd:6f:52:6c:67:72:ad:f3:
7c:c1:4a:e4:3e:9e:32:2c:94:99:51:a0:97:b3:9a:
36:0c:53:70:e1:b2:53:f2:c8:71:dc:84:5a:2f:2e:
3d:6f:cb:80:85:f1:f5:3c:8b:77:5e:04:4b:56:dc:
b4:19:d3:4e:6f:fe:56:b4:50:e1:ea:a7:91:41:5e:
a4:45:5c:67:73:61:e6:e9:c4:0a:9b:46:29:63:8c:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:7B:A5:B8:E7:FF:A1:B4:26:9E:B0:5E:9A:A5:41:C2:64:20:38
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Qox7pbjn_6G0Jp6wXpqlQcJkIDg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d0:8d:55:3a:61:38:75:e6:fb:2e:3d:02:01:7c:e7:93:20:95:
e4:a9:d2:61:fb:0d:83:4f:96:f0:c1:d2:c9:df:73:b5:ab:a1:
36:3e:83:e1:94:a9:00:20:86:80:5f:92:b0:30:2b:7d:fa:46:
9f:61:e9:6b:98:f6:50:98:bf:78:ca:6f:13:f2:af:ac:9a:8d:
b3:45:9c:94:69:bb:ea:53:04:30:69:89:4c:fb:e6:26:de:6d:
31:d1:35:54:b4:2e:01:3b:2a:6e:e6:98:7e:ff:5e:e8:70:02:
53:48:33:1e:c0:20:56:13:3e:85:96:16:41:93:3d:88:b5:cf:
90:9d:77:6e:71:2d:99:4e:9c:07:03:72:9c:cb:90:54:e2:16:
b6:dc:31:96:68:68:10:43:24:b6:93:e4:22:e8:4f:33:01:c3:
96:ba:6f:23:e9:58:44:85:78:a1:ce:73:ab:c0:b7:bb:cf:0a:
24:e7:ff:38:33:eb:e0:6d:cc:6a:ea:be:2b:3a:49:49:53:46:
50:52:8f:de:35:e5:df:0f:a5:80:f4:5a:40:38:fd:23:7e:66:
5e:80:26:ab:73:58:39:54:1e:34:31:72:6b:5e:e5:37:7f:0d:
02:ab:a4:a7:53:85:10:40:58:87:2c:62:39:f6:74:05:a0:d9:
d6:4e:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org