Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/hPfmz4VdVDjS0GcpdYQuO4Hs678.roa
File: hPfmz4VdVDjS0GcpdYQuO4Hs678.roa (raw, json)
Hash identifier: 72+p//yt3GzwS87cIU41Wu2mleKyMY/Lp7F8LsQ/NGE=
Subject key identifier: 84:F7:E6:CF:85:5D:54:38:D2:D0:67:29:75:84:2E:3B:81:EC:EB:BF
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 04FF
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/hPfmz4VdVDjS0GcpdYQuO4Hs678.roa
Signing time: Thu 03 Nov 2022 23:22:34 +0000
ROA not before: Thu 03 Nov 2022 23:22:34 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 3320
IP address blocks: 180.223.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Nov 3 23:22:34 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=84F7E6CF855D5438D2D0672975842E3B81ECEBBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:95:11:4c:f4:6f:80:d4:3c:de:e9:98:58:
9a:88:56:8e:6f:ae:c3:e6:ae:e0:3a:b4:51:55:32:
84:96:2e:47:7c:fd:f2:8c:a9:6c:bf:9a:e0:d5:27:
06:d2:67:d5:25:05:28:4a:14:4b:52:a9:7e:37:15:
2b:ab:d7:45:62:90:5e:73:b6:ca:c7:f1:a0:ae:5c:
bc:7c:69:54:74:76:1e:26:2c:68:7f:17:b1:74:84:
d2:a5:a5:f1:d9:33:e7:af:92:14:81:64:27:88:c1:
e6:23:ee:f9:aa:ff:63:ec:fc:01:2d:fe:63:f2:c0:
08:10:80:7a:31:b2:9e:58:4c:ee:de:5c:3c:2f:33:
10:e0:6d:9c:18:79:59:ff:78:7f:c7:53:e4:36:84:
0e:ee:e1:3d:5d:a1:3e:48:1b:bc:47:0c:ae:19:c5:
fa:02:ea:7d:a4:ff:a5:06:67:3f:13:9e:c7:85:0d:
fa:cf:a8:8b:70:6e:8b:9c:fd:d0:3e:e2:4f:f8:eb:
0c:4d:6c:5a:01:38:20:99:9f:22:64:45:c7:52:52:
d2:03:fa:bb:89:40:61:d7:77:7c:64:37:23:aa:e8:
66:2d:a9:b3:b2:99:15:46:06:c2:8d:72:36:7b:04:
0d:95:15:75:0e:19:8c:ca:0d:9a:06:c2:dd:9d:66:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:E6:CF:85:5D:54:38:D2:D0:67:29:75:84:2E:3B:81:EC:EB:BF
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/hPfmz4VdVDjS0GcpdYQuO4Hs678.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:2d:5b:80:57:73:8b:dd:71:d3:45:85:44:e5:c3:22:47:3f:
42:c3:e4:bd:26:7d:9e:b3:39:fb:36:a2:30:8d:32:25:fd:d0:
4b:a6:38:5a:f7:ce:89:09:d9:39:1d:2c:a9:4f:30:df:12:0b:
8a:d4:c0:99:c2:78:58:be:ad:d2:c9:3e:fd:73:74:69:02:05:
b2:59:de:78:6e:81:5c:32:62:50:00:38:60:b6:7f:e6:cf:11:
fb:48:92:60:1e:9d:70:ee:15:27:93:f6:f2:e5:a0:7f:2c:c3:
2b:92:73:11:e4:df:1b:1b:41:da:25:3d:48:93:9d:fe:24:29:
cc:31:cd:56:69:48:0c:03:3e:4a:13:e4:44:be:16:cf:c8:7c:
bf:7f:b1:09:ec:fb:5c:b7:b6:d6:4b:12:89:fb:09:aa:46:26:
f6:a2:ef:40:b9:26:9f:ab:66:3d:a5:e4:c1:22:b9:0f:78:27:
c5:02:31:37:e5:de:6f:57:67:ae:b2:fb:2f:51:93:1a:d0:38:
92:7d:88:83:01:ac:4c:8f:33:55:06:6f:3d:80:21:87:37:77:
83:75:7a:e5:13:c3:df:4a:bd:b1:ee:f6:e4:f0:e1:cd:d1:c5:
d0:cf:c2:bc:be:40:61:7b:b5:3f:1d:fb:35:09:df:58:bf:08:
2e:8a:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org