Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/595/lwc9tdE3p9L8gn_k1zcDYDNXbKw.roa
File: lwc9tdE3p9L8gn_k1zcDYDNXbKw.roa (raw, json)
Hash identifier: Qskqr3PXDiuPRurz2mJ/rX7c4fMMMbZTkIOKl03cae0=
Subject key identifier: 97:07:3D:B5:D1:37:A7:D2:FC:82:7F:E4:D7:37:03:60:33:57:6C:AC
Certificate issuer: /CN=2CA390E2780550E44EC03598082E1995474DF2FB
Certificate serial: 0E67
Authority key identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/lwc9tdE3p9L8gn_k1zcDYDNXbKw.roa
Signing time: Fri 19 May 2023 05:55:19 +0000
ROA not before: Fri 19 May 2023 05:55:19 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 58862
IP address blocks: 167.220.244.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3687 (0xe67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA390E2780550E44EC03598082E1995474DF2FB
Validity
Not Before: May 19 05:55:19 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=97073DB5D137A7D2FC827FE4D737036033576CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:a5:a8:d4:ab:56:57:3e:7f:7f:36:07:9e:
f0:a8:8c:bf:83:bf:43:d8:b0:26:05:aa:df:09:bb:
b4:65:25:48:97:d4:f6:b0:90:86:93:58:d1:1c:8d:
71:c5:3c:f3:50:42:ab:28:b9:ac:d3:8b:cd:95:65:
1b:cb:e8:10:d7:03:33:16:f4:ae:9c:fd:43:61:36:
95:32:20:13:dc:db:f0:90:62:27:a9:0e:06:9a:18:
b9:21:81:88:cf:37:c4:2c:18:64:0d:2b:d8:61:8c:
b1:a3:51:1c:13:8d:78:75:72:5b:67:ce:65:e8:ca:
1b:0c:8a:0b:b1:8e:c8:1d:cb:b9:f8:8a:83:3a:21:
38:6e:b7:fb:99:4c:1d:bb:91:eb:80:80:a2:1a:24:
e9:5f:23:26:17:12:e9:0b:65:f9:80:70:73:c4:18:
2d:d8:a1:02:48:f8:26:9f:37:5e:9a:fb:f8:ec:e7:
3a:10:af:13:54:3c:b8:7c:b4:bc:32:7d:f7:0f:ac:
24:19:03:46:4f:1d:fa:24:cb:9c:aa:23:37:da:e1:
58:a2:24:db:af:c1:3e:3d:d7:78:dc:0f:4c:82:4f:
ad:fc:98:3f:06:7e:cd:1b:af:ce:e5:35:bf:8e:02:
1c:fb:50:f0:87:93:16:10:3b:09:8f:a1:ca:5c:31:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:3D:B5:D1:37:A7:D2:FC:82:7F:E4:D7:37:03:60:33:57:6C:AC
X509v3 Authority Key Identifier:
keyid:2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/lwc9tdE3p9L8gn_k1zcDYDNXbKw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
167.220.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:96:53:db:62:50:6e:4a:45:1e:38:c8:e5:b4:bb:90:55:e8:
bb:a0:58:03:de:eb:9d:d0:30:db:19:80:db:1e:0c:fa:bf:b3:
27:9c:7f:51:c6:3c:98:68:0d:39:a6:15:01:86:15:7c:a0:0a:
40:f9:9a:1a:32:fa:d7:5b:93:2c:3f:c3:9f:fa:4a:d4:03:98:
a5:fa:02:6d:e2:43:80:a2:d4:a8:ee:41:21:7c:b0:3d:8b:89:
6f:0d:5a:57:44:f6:48:1d:ab:51:f0:ac:db:be:e0:0a:ad:5e:
16:a4:19:18:1e:28:dc:02:3b:29:bd:cd:9e:57:ba:8c:fd:f3:
61:2b:bd:f4:96:ae:81:7c:af:e1:d8:2c:99:87:b8:02:42:70:
2a:1c:fe:8e:e8:49:b1:c0:92:0f:cb:2e:0c:c7:a3:cd:ae:55:
48:ee:1a:7f:6e:ce:99:30:a8:ce:3d:9d:b1:e0:41:37:7c:7f:
20:1c:7c:fc:5e:c2:20:39:58:72:ee:18:23:3c:8b:8a:73:13:
e4:57:42:8c:a2:0a:48:e7:dc:e1:67:7d:ca:31:d7:20:5e:99:
c9:f1:83:96:a3:37:d2:7a:3f:51:3f:7b:05:58:0c:4f:e7:8b:
65:40:82:33:94:93:4e:fe:3b:61:fc:c0:37:26:cb:d7:0a:bd:
db:6f:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:39 2025 by rpki-client