Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/S7lezKOEb_ABCdhsMvKlVG8HIlU.roa
File: S7lezKOEb_ABCdhsMvKlVG8HIlU.roa (raw, json)
Hash identifier: sVcP3nSeioCrHaDkkwBTD1A7BQrdm/lEBp8nWoQ1/K8=
Subject key identifier: 4B:B9:5E:CC:A3:84:6F:F0:01:09:D8:6C:32:F2:A5:54:6F:07:22:55
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 01D6
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/S7lezKOEb_ABCdhsMvKlVG8HIlU.roa
Signing time: Sat 04 Jun 2022 00:54:48 +0000
ROA not before: Sat 04 Jun 2022 00:54:48 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 6079
IP address blocks: 180.223.200.0/21 maxlen: 24
180.223.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jun 4 00:54:48 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=4BB95ECCA3846FF00109D86C32F2A5546F072255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:90:18:b1:b1:66:e4:30:80:5b:64:4e:dc:
c0:94:74:f8:a3:a6:df:42:9d:54:fb:22:4e:0e:6b:
2d:c6:08:ed:d0:cf:2f:3a:c3:bc:09:10:73:f4:92:
e1:23:6a:2b:c3:9a:02:c5:f5:62:54:5c:5b:79:99:
f6:ee:f3:b4:ef:c8:86:eb:6b:c7:a6:cc:cc:0a:57:
d2:6c:16:b1:dc:e3:60:25:5c:a4:84:ed:43:e5:0a:
52:12:02:2f:be:b0:91:cb:c1:89:eb:f5:1d:43:0a:
d4:5e:fe:3d:d0:15:5c:2d:32:8d:e8:ef:40:79:e3:
fb:11:ea:30:b1:de:ba:9a:a6:b9:90:fe:d7:8d:2b:
e7:60:71:d1:70:e6:01:a9:b6:7f:33:de:9f:8d:26:
08:8c:a3:98:95:ac:39:9b:89:e1:36:f6:de:c9:f5:
f1:36:2a:5a:93:e6:a9:57:58:42:17:04:6d:90:cd:
89:dc:62:d3:5c:f4:07:08:ff:30:ef:93:9b:15:b2:
be:8b:20:64:44:ff:fe:0b:06:86:31:47:f5:a2:56:
d2:bc:f2:66:42:7f:4a:7d:94:c0:cb:b9:f3:57:d9:
fc:27:e1:55:1c:be:d2:8a:b4:1c:ca:8d:6a:27:b0:
9e:32:e4:1d:9e:ab:9d:12:1c:bd:61:a2:e7:d9:79:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B9:5E:CC:A3:84:6F:F0:01:09:D8:6C:32:F2:A5:54:6F:07:22:55
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/S7lezKOEb_ABCdhsMvKlVG8HIlU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.200.0/21
180.223.216.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:29:8d:78:05:59:0c:74:2e:1b:34:9d:c3:c2:3e:86:57:30:
86:c6:f7:f0:46:76:01:46:be:9f:ee:7b:40:e1:37:5a:1c:7b:
d6:a8:cf:ee:7c:0a:9f:0b:b7:fa:15:bd:42:08:ae:55:d7:c9:
52:7d:6d:31:a2:7a:44:2f:d3:69:25:e6:1c:54:32:58:b1:04:
ff:30:7b:c0:fb:e4:71:48:0b:80:d9:de:03:9f:6e:38:04:52:
01:43:51:ef:f2:27:f4:1a:5d:58:bf:56:f1:48:5b:99:2f:c0:
ee:09:f0:d0:6f:6f:d6:cc:8f:ae:aa:8f:65:ff:6f:c9:23:b6:
7b:7e:21:38:7a:c5:72:5d:9f:a8:8c:e6:8d:57:f3:a9:91:bc:
70:e7:50:6c:67:75:a1:be:c6:52:a0:d0:35:79:52:5d:0b:e6:
67:61:1c:6d:24:1c:98:1f:31:30:a7:09:96:7a:0c:25:ab:77:
f4:c5:b8:5e:3c:a2:db:54:93:c0:4f:3a:4a:25:ef:20:17:6e:
f6:07:46:23:88:14:08:c5:ec:1f:9a:f0:bd:3a:05:44:cd:35:
64:e0:23:f1:aa:bf:11:f0:30:47:7b:2f:93:4e:74:c8:d0:5e:
e5:0e:99:16:84:b9:f0:ed:a0:e1:22:29:b3:da:62:46:7f:92:
ed:cc:7a:a4
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yMjA2MDQw
MDU0NDhaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKDRCQjk1RUNDQTM4NDZG
RjAwMTA5RDg2QzMyRjJBNTU0NkYwNzIyNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAupAYsbFm5DCAW2RO3MCUdPijpt9CnVT7Ik4Oay3GCO3Qzy86
w7wJEHP0kuEjaivDmgLF9WJUXFt5mfbu87TvyIbra8emzMwKV9JsFrHc42AlXKSE
7UPlClISAi++sJHLwYnr9R1DCtRe/j3QFVwtMo3o70B54/sR6jCx3rqaprmQ/teN
K+dgcdFw5gGptn8z3p+NJgiMo5iVrDmbieE29t7J9fE2KlqT5qlXWEIXBG2QzYnc
YtNc9AcI/zDvk5sVsr6LIGRE//4LBoYxR/WiVtK88mZCf0p9lMDLufNX2fwn4VUc
vtKKtBzKjWonsJ4y5B2eq50SHL1houfZecCrAgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUS7lezKOEb/ABCdhsMvKlVG8HIlUwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvUzdsZXpLT0ViX0FC
Q2Roc012S2xWRzhISWxVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw
DAMEA7TfyAMEA7Tf2DANBgkqhkiG9w0BAQsFAAOCAQEAfimNeAVZDHQuGzSdw8I+
hlcwhsb38EZ2AUa+n+57QOE3Whx71qjP7nwKnwu3+hW9QgiuVdfJUn1tMaJ6RC/T
aSXmHFQyWLEE/zB7wPvkcUgLgNneA59uOARSAUNR7/In9BpdWL9W8UhbmS/A7gnw
0G9v1syPrqqPZf9vySO2e34hOHrFcl2fqIzmjVfzqZG8cOdQbGd1ob7GUqDQNXlS
XQvmZ2EcbSQcmB8xMKcJlnoMJat39MW4Xjyi21STwE86SiXvIBdu9gdGI4gUCMXs
H5rwvToFRM01ZOAj8aq/EfAwR3svk050yNBe5Q6ZFoS58O2g4SIps9piRn+S7cx6
pA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org