Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/stVL_p3MStyuuOGGljjA9YkkMqI.roa
File: stVL_p3MStyuuOGGljjA9YkkMqI.roa (raw, json)
Hash identifier: Xppuow6VdOr3PO5ucSkx+Nbo+XTEQFWQhqE9j5YVpd8=
Subject key identifier: B2:D5:4B:FE:9D:CC:4A:DC:AE:B8:E1:86:96:38:C0:F5:89:24:32:A2
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 02CA
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/stVL_p3MStyuuOGGljjA9YkkMqI.roa
Signing time: Tue 19 Jul 2022 15:08:27 +0000
ROA not before: Tue 19 Jul 2022 15:08:27 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 1239
IP address blocks: 180.223.0.0/17 maxlen: 24
180.223.128.0/18 maxlen: 24
180.223.192.0/19 maxlen: 24
180.223.224.0/20 maxlen: 24
180.223.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jul 19 15:08:27 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=B2D54BFE9DCC4ADCAEB8E1869638C0F5892432A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:d1:4e:64:27:78:2e:b4:66:bb:7e:0d:e3:
08:7b:f5:98:41:8c:99:e5:b2:f0:b2:a7:f8:26:58:
a5:9a:14:37:e2:e4:99:96:c4:0f:19:0d:aa:ab:9c:
8d:68:a0:30:ef:98:9a:d5:34:91:f2:76:8e:be:f0:
3d:7e:f5:0f:25:42:14:61:9f:36:cf:21:35:42:6c:
a0:93:04:5f:f6:94:37:26:27:30:a5:fb:10:8e:3c:
c3:86:66:ed:40:95:79:0d:84:41:6d:1b:f6:07:87:
6f:64:81:fe:65:e6:46:0f:bd:b0:73:f7:65:2b:b4:
71:a4:33:8c:fd:e3:05:2e:9f:42:e2:ce:d3:70:2c:
9e:f2:d2:e2:cf:3a:c6:c3:c4:8d:5a:8f:d8:c9:f6:
47:a4:9d:91:57:a5:bb:1e:53:a1:38:5e:c6:3c:1d:
55:c6:96:5e:29:2f:d4:97:d9:bc:2a:a0:ab:b5:53:
75:e6:9d:cf:4d:6c:0c:19:f3:f0:95:1e:b3:19:98:
22:d9:19:cb:31:ce:d3:71:7f:59:01:43:7b:ba:c9:
96:1b:2e:4a:73:ea:71:e7:e2:a1:2e:30:96:0d:f7:
ad:58:cc:ab:a8:18:bc:ee:87:3a:25:c0:a6:18:43:
ed:90:32:83:89:cc:3b:a8:40:a1:f2:4a:b7:27:d6:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D5:4B:FE:9D:CC:4A:DC:AE:B8:E1:86:96:38:C0:F5:89:24:32:A2
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/stVL_p3MStyuuOGGljjA9YkkMqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cd:27:27:f4:cc:c0:ba:43:1b:df:b1:29:d3:e1:b5:be:da:b1:
1c:ee:87:19:e0:27:e4:72:53:94:4d:4a:04:64:00:0d:8a:a9:
c5:fd:b7:4e:41:e7:c1:29:1e:6a:d6:14:54:fe:63:6e:fd:f3:
bf:eb:de:6b:08:67:4a:63:15:bf:80:d9:54:03:31:21:76:fb:
72:72:70:8b:8f:63:60:94:62:2a:31:40:cb:1c:95:dd:d6:13:
eb:d1:c7:ce:98:10:5e:d4:bd:47:35:7c:36:a9:06:01:50:4a:
06:2b:e8:3d:16:5d:51:8f:72:b3:37:f9:b9:19:2d:c9:df:48:
84:49:36:eb:2c:40:92:34:d9:22:bf:7a:26:c4:c3:6f:ae:21:
c6:56:d1:32:57:04:82:d5:4c:1c:9f:e8:2c:3f:9b:b7:cf:85:
93:aa:b4:8c:2b:78:92:d2:af:7a:c9:71:1a:a1:aa:53:bb:d7:
2d:d1:02:3e:b7:00:e6:4c:a8:f1:28:9d:e7:58:1a:de:18:f3:
da:d9:59:21:4b:30:23:2c:d1:e4:f3:5c:5b:17:5a:17:dd:45:
5c:55:e7:61:c8:49:8c:0c:f2:31:d3:5f:c1:95:5e:b0:8c:b5:
e1:c9:3d:59:12:9e:21:b2:1a:25:42:91:0e:a0:64:a9:7d:0c:
ad:08:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org