Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/h52RAfaFlzcmCplsb2lSOocyomQ.roa
File: h52RAfaFlzcmCplsb2lSOocyomQ.roa (raw, json)
Hash identifier: GgSiNzMzNOMQ0NPGj5Tj61b33+GeBWF/Gl5gZG2pcVQ=
Subject key identifier: 87:9D:91:01:F6:85:97:37:26:0A:99:6C:6F:69:52:3A:87:32:A2:64
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 05D8
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/h52RAfaFlzcmCplsb2lSOocyomQ.roa
Signing time: Thu 15 Dec 2022 09:04:15 +0000
ROA not before: Thu 15 Dec 2022 09:04:15 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 7018
IP address blocks: 180.223.0.0/17 maxlen: 24
180.223.128.0/18 maxlen: 24
180.223.208.0/21 maxlen: 24
180.223.224.0/21 maxlen: 24
180.223.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Dec 15 09:04:15 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=879D9101F6859737260A996C6F69523A8732A264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:49:f9:18:11:08:3f:0f:0f:b0:df:60:b5:
63:a8:28:a0:5d:1b:6d:2d:f3:b6:f7:a0:13:11:1a:
ac:44:dc:62:6e:fe:be:f7:3f:3b:ef:0c:77:74:bc:
99:29:92:c9:53:a5:80:bc:d3:8c:d7:81:aa:2e:2c:
09:84:63:e0:6f:e4:65:f2:c7:a5:2d:c5:44:b7:b8:
dc:30:f7:fc:e7:e4:f3:2d:f9:ad:ef:5c:07:32:8a:
1e:3e:7c:b4:5a:92:c4:52:7d:54:82:54:7e:7f:fc:
d0:e3:d5:9c:f8:87:52:53:54:da:9f:e5:62:b9:ab:
e7:f7:98:02:50:63:78:0c:09:ff:e2:25:c8:78:ee:
4b:5d:2e:79:a7:3a:ef:b8:59:11:35:30:fe:c9:17:
05:fb:71:ee:a2:c9:15:dd:ce:f2:fa:41:e9:86:56:
37:4d:b9:63:ef:92:33:a6:a1:0b:40:e2:ab:ce:22:
7d:34:c2:d3:6a:0f:05:f9:33:cd:20:97:a7:8c:1e:
20:ee:f7:ff:44:a9:d3:21:95:61:c1:ca:50:6e:72:
95:51:f9:02:52:66:9d:35:13:ae:0f:46:34:38:ac:
f7:61:e2:53:84:5b:af:69:e2:65:f7:6d:b6:da:43:
96:c7:79:b5:af:65:c8:79:22:41:f7:f8:3e:c5:05:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:91:01:F6:85:97:37:26:0A:99:6C:6F:69:52:3A:87:32:A2:64
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/h52RAfaFlzcmCplsb2lSOocyomQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0-180.223.191.255
180.223.208.0/21
180.223.224.0/21
180.223.240.0/20
Signature Algorithm: sha256WithRSAEncryption
34:0f:38:70:19:0d:dc:b3:a0:24:7b:ea:32:3e:c8:d9:0a:67:
ff:aa:b9:4f:7b:74:93:b0:71:34:53:94:a3:92:67:e6:c5:f3:
b9:bc:ab:06:f3:2c:ca:a1:72:70:c3:d3:af:ec:b7:28:45:19:
bb:c4:c1:d1:da:d7:d2:c3:4a:56:5e:ac:b8:b1:d4:b7:9c:43:
3f:f2:14:9b:58:23:4f:37:87:fe:e0:43:f2:e3:b8:d2:20:e0:
ad:79:37:12:f4:81:47:29:fd:de:29:9e:03:39:16:08:bc:a7:
17:d8:ce:d0:ed:bd:80:c5:93:5a:5e:cb:46:cd:0b:c6:8f:55:
3e:d1:f0:75:6d:61:85:c8:b6:d7:4c:09:5d:2f:5e:34:18:90:
c7:d5:9c:5f:23:ae:bb:78:a5:7c:24:62:eb:72:cb:72:59:84:
09:23:4a:49:07:0a:de:c8:6a:c7:f7:22:85:11:12:1f:03:0b:
64:d1:2c:6c:87:7d:7f:18:f2:f3:bf:db:bd:3b:15:6d:6f:0c:
26:38:fd:5f:41:36:89:09:ea:3b:e5:0b:8a:06:9c:ba:8e:76:
f4:b5:43:d0:85:19:68:76:5e:e3:16:cc:2d:7e:06:d8:10:91:
64:78:19:4f:17:5e:9c:70:e9:12:f2:38:cb:8d:cd:5a:86:e7:
04:bd:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org