Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/lsVi0-Y1oDjQ3imk04V4yWeH-Iw.roa
File: lsVi0-Y1oDjQ3imk04V4yWeH-Iw.roa (raw, json)
Hash identifier: LPgY2PWD91vJsDxGWcHAtYVpDD8efJOZCumH6TFwrLQ=
Subject key identifier: 96:C5:62:D3:E6:35:A0:38:D0:DE:29:A4:D3:85:78:C9:67:87:F8:8C
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 05D4
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/lsVi0-Y1oDjQ3imk04V4yWeH-Iw.roa
Signing time: Thu 15 Dec 2022 05:14:35 +0000
ROA not before: Thu 15 Dec 2022 05:14:35 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 7018
IP address blocks: 180.223.208.0/21 maxlen: 24
180.223.224.0/21 maxlen: 24
180.223.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Dec 15 05:14:35 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=96C562D3E635A038D0DE29A4D38578C96787F88C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:74:af:f5:9d:4c:91:6c:8f:b4:8c:07:ba:
eb:35:1c:d1:e5:c7:07:47:47:4a:19:d8:a3:bb:d0:
ce:dc:12:f9:58:88:ad:a2:46:cb:f8:98:2c:64:7f:
86:46:ca:ed:11:20:0e:4a:8d:ba:70:b2:4d:7c:a1:
c2:94:21:54:bd:82:64:e6:e0:e6:bb:92:a8:69:94:
eb:46:66:a9:35:f3:62:27:ed:d8:3c:0d:be:d7:c5:
b6:4d:3d:9a:04:6f:c3:ee:aa:d9:71:f4:2a:74:00:
34:e7:62:aa:c5:15:9b:55:4d:dd:0f:82:4d:83:00:
09:20:50:2a:38:26:8e:02:99:56:0c:c1:be:3e:39:
da:13:e9:b9:c7:bf:86:49:20:cd:65:df:00:cc:41:
69:e1:65:41:48:ba:3b:f5:b8:71:3e:b4:18:0a:37:
54:69:fd:85:c9:2d:08:72:09:e3:e4:04:bf:e2:bd:
c9:83:29:fc:34:56:da:bf:3f:ca:da:ac:ea:d7:ba:
c0:56:dc:30:19:e6:60:55:00:5a:02:de:0f:2c:ae:
d6:76:14:a7:97:e0:1c:28:4a:51:e8:f1:d4:fc:2b:
f5:9d:f1:a3:89:ed:75:36:ec:6c:b9:79:76:ee:62:
eb:e9:c0:fc:16:de:5a:8b:59:86:d8:50:a0:60:30:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C5:62:D3:E6:35:A0:38:D0:DE:29:A4:D3:85:78:C9:67:87:F8:8C
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/lsVi0-Y1oDjQ3imk04V4yWeH-Iw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.208.0/21
180.223.224.0/21
180.223.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:6c:e4:47:16:6e:00:35:53:ea:af:38:02:04:3f:5c:e6:dc:
e0:84:f0:41:af:3f:43:10:43:41:3f:e9:76:75:ca:3c:c0:0d:
f4:5e:01:d4:69:3a:52:c8:ff:46:16:84:10:43:20:55:20:b1:
d0:52:1e:8f:d6:5f:b5:94:d3:e1:a0:9c:3f:be:bc:bf:98:25:
ea:8c:b0:aa:89:84:a4:1b:09:9e:49:8c:b2:e6:06:46:4d:79:
5b:52:aa:45:31:d1:04:16:48:2c:20:4a:32:56:ca:ca:13:62:
ff:e6:85:08:90:d3:95:f0:e7:00:a5:9c:f0:56:82:82:97:ee:
6a:48:a6:17:ac:8f:4f:cd:2a:7a:1e:ea:6a:d1:0a:f7:24:9f:
e0:a0:71:66:7a:1d:e9:29:48:c2:c9:22:77:64:b8:5a:69:f8:
09:b5:1b:2e:98:31:c0:58:e6:2c:a6:7e:d5:3e:f1:86:57:24:
6c:55:21:8c:12:7d:57:67:61:db:7a:54:20:4b:6c:61:74:44:
0b:bd:43:79:b0:b2:62:b3:a4:b2:16:e6:9f:fb:ea:81:09:8c:
70:6c:ae:d1:5f:fe:88:fb:7f:d7:cf:29:ab:d6:f0:e6:12:a1:
e6:9b:da:65:d4:9c:5b:ee:b3:88:c2:3f:3e:1d:8c:68:54:dd:
45:df:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org