Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/oQF28iWaX0YyIKlxOzAOf0hpunc.roa
File: oQF28iWaX0YyIKlxOzAOf0hpunc.roa (raw, json)
Hash identifier: XEsSZNP7ma1Oa+6XrfCweDkkdC/ysGYsML2k1o5mUpc=
Subject key identifier: A1:01:76:F2:25:9A:5F:46:32:20:A9:71:3B:30:0E:7F:48:69:BA:77
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 01D4
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/oQF28iWaX0YyIKlxOzAOf0hpunc.roa
Signing time: Sat 04 Jun 2022 00:48:47 +0000
ROA not before: Sat 04 Jun 2022 00:48:47 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 7029
IP address blocks: 180.223.192.0/21 maxlen: 24
180.223.200.0/21 maxlen: 24
180.223.208.0/21 maxlen: 24
180.223.216.0/21 maxlen: 24
180.223.224.0/21 maxlen: 24
180.223.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jun 4 00:48:47 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=A10176F2259A5F463220A9713B300E7F4869BA77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6c:2a:5c:1b:ef:fb:b3:a4:d6:0f:5a:f2:b4:
4c:b3:a0:48:ff:05:1a:d4:db:49:89:44:0a:4c:2a:
eb:b2:10:59:0b:48:c8:32:68:0c:35:32:63:ef:27:
a3:28:6f:8f:ff:a0:5c:8f:c0:f7:56:d9:66:89:5f:
97:87:29:4c:8d:1c:75:a0:f0:80:16:84:7e:8f:c1:
ec:d5:00:d9:4c:87:53:8e:62:f4:b2:bd:78:da:c5:
ee:86:a6:ab:17:7b:3c:9e:4e:6f:cc:31:54:76:63:
8d:a5:b1:a4:3c:26:09:fb:b3:b2:c6:fb:d1:5d:29:
bd:ae:8b:57:8b:db:96:c5:ca:82:22:ec:5d:39:47:
8f:3b:e8:9a:b1:15:89:ca:fd:bb:a0:6b:bf:be:f1:
42:80:95:e2:30:a3:88:a3:d4:03:91:a1:79:fd:b1:
f7:ab:85:f3:4e:8e:cf:ea:3b:e8:55:ee:c4:ad:07:
0e:75:7f:2d:0c:14:a5:b1:26:2f:2e:11:09:de:6b:
06:63:2b:03:bb:0d:db:9f:06:25:df:7a:59:af:ce:
3c:c8:26:68:c2:83:70:e5:7a:88:81:c8:49:e2:e7:
2d:1c:8a:da:ae:e9:b6:6c:fe:82:17:e8:c8:05:18:
31:9f:29:c0:d7:9d:2f:21:bc:c4:44:13:5a:5e:c2:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:01:76:F2:25:9A:5F:46:32:20:A9:71:3B:30:0E:7F:48:69:BA:77
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/oQF28iWaX0YyIKlxOzAOf0hpunc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.192.0-180.223.239.255
Signature Algorithm: sha256WithRSAEncryption
b4:7d:4e:57:2f:51:2e:2b:3c:d2:5b:9b:a8:63:8a:61:25:01:
7b:1a:72:4c:aa:9e:1d:3c:73:a0:f2:1a:2b:9b:a4:7b:d3:b6:
7f:52:3d:45:84:c1:8a:4f:d9:68:9e:57:ef:3d:57:f8:5f:6f:
2a:9d:dc:bc:fe:f2:38:f9:54:f1:64:eb:f0:53:a5:e7:6c:c9:
c9:e6:d6:04:a8:16:69:94:b0:b8:35:9d:f4:9e:0d:14:96:4e:
22:2c:b8:2d:9e:f6:d9:6f:bb:43:08:6b:bd:a4:80:29:13:f6:
12:35:53:d6:ce:be:1f:f7:06:e8:88:ed:62:60:ad:05:a8:0e:
07:41:74:d2:a1:b3:17:24:e4:96:b2:57:1b:19:ae:33:e9:36:
65:74:de:ff:58:5c:b5:b0:19:df:25:67:31:f5:0e:b8:e0:9b:
07:bf:28:d0:91:ba:8d:51:7f:a0:ad:11:b7:77:56:d4:af:68:
76:f0:4e:0c:e6:ec:3a:fe:53:c6:72:73:32:3a:6c:42:fe:27:
ab:42:35:43:3c:97:4f:61:b8:76:57:e9:df:06:f5:c2:12:f8:
04:e4:7c:fd:22:58:8d:b9:31:9e:d9:7b:0c:05:4e:60:0e:30:
29:e5:51:cd:a5:33:cf:48:01:0e:68:05:53:ea:16:ca:39:66:
70:e9:2a:f2
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yMjA2MDQw
MDQ4NDdaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKEExMDE3NkYyMjU5QTVG
NDYzMjIwQTk3MTNCMzAwRTdGNDg2OUJBNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDibCpcG+/7s6TWD1rytEyzoEj/BRrU20mJRApMKuuyEFkLSMgy
aAw1MmPvJ6Mob4//oFyPwPdW2WaJX5eHKUyNHHWg8IAWhH6PwezVANlMh1OOYvSy
vXjaxe6GpqsXezyeTm/MMVR2Y42lsaQ8Jgn7s7LG+9FdKb2ui1eL25bFyoIi7F05
R4876JqxFYnK/buga7++8UKAleIwo4ij1AORoXn9sferhfNOjs/qO+hV7sStBw51
fy0MFKWxJi8uEQneawZjKwO7DdufBiXfelmvzjzIJmjCg3DleoiByEni5y0citqu
6bZs/oIX6MgFGDGfKcDXnS8hvMREE1pewmKfAgMBAAGjggH7MIIB9zAdBgNVHQ4E
FgQUoQF28iWaX0YyIKlxOzAOf0hpuncwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvb1FGMjhpV2FYMFl5
SUtseE96QU9mMGhwdW5jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEw
DjAMAwQGtN/AAwQEtN/gMA0GCSqGSIb3DQEBCwUAA4IBAQC0fU5XL1EuKzzSW5uo
Y4phJQF7GnJMqp4dPHOg8horm6R707Z/Uj1FhMGKT9lonlfvPVf4X28qndy8/vI4
+VTxZOvwU6XnbMnJ5tYEqBZplLC4NZ30ng0Ulk4iLLgtnvbZb7tDCGu9pIApE/YS
NVPWzr4f9wboiO1iYK0FqA4HQXTSobMXJOSWslcbGa4z6TZldN7/WFy1sBnfJWcx
9Q644JsHvyjQkbqNUX+grRG3d1bUr2h28E4M5uw6/lPGcnMyOmxC/ierQjVDPJdP
Ybh2V+nfBvXCEvgE5Hz9IliNuTGe2XsMBU5gDjAp5VHNpTPPSAEOaAVT6hbKOWZw
6Sry
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org