Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/TwG-rAB5bXYWJZl9yCCtL65xL3A.roa
File: TwG-rAB5bXYWJZl9yCCtL65xL3A.roa (raw, json)
Hash identifier: cWlyS6SBcTDLuAe7jXAlDiKOwepwGkKc7iwHj0kLsDM=
Subject key identifier: 4F:01:BE:AC:00:79:6D:76:16:25:99:7D:C8:20:AD:2F:AE:71:2F:70
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 60
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TwG-rAB5bXYWJZl9yCCtL65xL3A.roa
Signing time: Fri 25 Mar 2022 13:20:09 +0000
ROA not before: Fri 25 Mar 2022 13:20:09 +0000
ROA not after: Fri 10 Mar 2023 09:35:39 +0000
asID: 54600
IP address blocks: 180.223.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Mar 25 13:20:09 2022 GMT
Not After : Mar 10 09:35:39 2023 GMT
Subject: CN=4F01BEAC00796D761625997DC820AD2FAE712F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:8f:11:e2:4c:bf:8d:a8:98:c3:b4:0a:f6:
39:1e:3a:ef:3b:ec:7a:e0:34:69:1e:e4:83:29:6d:
f8:9a:4b:39:1a:fb:37:9e:e9:24:f1:22:38:bc:fd:
6d:14:a2:49:84:a5:29:bb:bb:90:dc:05:27:ea:36:
23:fd:98:08:10:5f:e0:b0:21:3f:0c:a0:2d:69:b6:
4d:ca:00:43:76:0f:9d:31:cb:5d:57:8c:07:04:f7:
4e:4d:b6:50:44:31:ef:17:7c:e1:02:f6:78:84:27:
ba:fc:b5:11:0e:f1:19:3a:f7:c7:17:2c:8e:a0:8d:
26:10:e2:a1:26:dd:0f:fc:f9:d4:b8:c0:9b:9c:12:
72:01:11:eb:35:f0:5a:2d:56:71:a0:6a:d1:35:b5:
c5:4c:36:08:50:87:48:b7:92:e9:fa:39:5a:3e:7a:
dc:55:05:fd:a2:0c:c2:35:f8:47:6f:7f:d8:57:5c:
e4:4e:20:2a:42:36:5a:32:2e:40:68:a5:10:ab:39:
b4:c7:b6:8c:4a:de:14:f1:48:73:b7:42:61:d7:34:
fe:96:20:6e:10:71:45:81:b9:f3:76:97:b7:80:43:
53:fd:6b:a9:cd:a7:b9:15:ae:b7:bd:d0:ad:8f:19:
6d:78:72:56:67:8a:44:c1:ea:d2:cb:71:d4:64:24:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:01:BE:AC:00:79:6D:76:16:25:99:7D:C8:20:AD:2F:AE:71:2F:70
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TwG-rAB5bXYWJZl9yCCtL65xL3A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:4d:c1:a0:08:20:6b:9d:9d:25:df:f4:b0:21:3e:66:26:f3:
b9:53:99:ed:d5:56:ab:3e:6f:fb:38:ff:3d:64:2c:3b:b0:25:
16:b6:27:ec:9d:2b:11:bb:b8:c1:04:43:b7:83:af:77:b8:e4:
a6:12:6f:7d:ac:d3:a9:66:9a:24:79:b3:ea:44:20:97:a8:84:
e8:2c:f6:56:4d:25:cb:49:c4:23:a9:33:c7:59:7e:b8:b0:75:
70:6b:92:a8:71:91:5c:e2:49:b5:13:4b:38:e4:33:f7:6b:67:
08:a8:6c:f6:22:6b:76:0b:21:35:92:1e:24:9f:f1:08:0a:2b:
7f:7f:5a:eb:4a:87:9e:f8:4e:c7:da:f1:5b:57:c1:93:80:cb:
2e:22:a5:91:c5:16:f4:f5:04:10:72:cf:70:69:ff:0f:27:2d:
29:7f:65:27:22:70:53:d1:15:b3:5a:63:44:64:10:e1:0b:39:
f5:2e:87:41:ee:ee:3c:9b:f6:ee:04:ee:92:0c:7c:ef:0a:7a:
ef:39:a5:54:89:74:46:be:ad:08:95:ed:47:2e:1b:b3:7b:bb:
c5:2a:8b:71:76:55:6b:22:1f:7e:d7:63:4b:40:f6:94:c1:6f:
df:33:16:2b:5b:45:a2:6c:aa:25:7c:dc:d4:50:7f:62:af:d8:
d5:ca:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org