Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0f1yTCJFvoGyLJeAYUFlAe1j0zo.roa
File: 0f1yTCJFvoGyLJeAYUFlAe1j0zo.roa (raw, json)
Hash identifier: oImyXBOzXStK93nxqX0CW3tlBnNVWPrjFIjX0Eyy2ls=
Subject key identifier: D1:FD:72:4C:22:45:BE:81:B2:2C:97:80:61:41:65:01:ED:63:D3:3A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 535A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0f1yTCJFvoGyLJeAYUFlAe1j0zo.roa
Signing time: Thu 09 May 2024 17:23:57 +0000
ROA not before: Thu 09 May 2024 17:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21338 (0x535a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 17:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D1FD724C2245BE81B22C978061416501ED63D33A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:5d:7c:b7:d3:37:6c:08:f9:d7:0a:bc:98:
09:4c:1f:f4:16:84:a9:87:56:fe:87:cd:db:de:00:
f4:d5:98:e9:c4:f6:c0:e2:d2:af:94:93:25:96:7f:
7b:43:cb:7a:4d:e2:4b:33:b5:ce:77:ea:8d:8b:74:
4d:6a:f7:71:1e:6b:7d:38:cb:92:40:ab:13:82:20:
7e:18:1d:6b:31:db:e6:c3:63:c6:ef:af:3f:ab:40:
e1:6a:bc:76:24:89:9b:34:04:65:4b:0e:c0:b1:aa:
bc:1a:d5:53:3d:6d:ea:d1:a2:77:85:6b:43:7c:0e:
e0:2c:22:66:ee:a5:e5:43:09:dc:f0:d4:d5:c0:3a:
e7:10:51:e9:b1:89:4b:29:a0:9f:1b:0f:c1:9a:cf:
1b:4f:79:d3:23:b1:5f:18:c3:98:23:c6:ff:21:f7:
c1:68:b6:e1:55:c7:b0:04:cb:aa:56:23:dd:18:b5:
d3:c7:75:64:08:68:88:20:ff:06:84:38:e0:5c:56:
94:51:8f:38:92:39:1b:f9:64:4e:23:e2:aa:9b:0d:
f5:95:0c:f2:61:14:b0:ee:01:f6:ad:1f:88:22:de:
4f:f8:2a:af:3a:ce:4e:cf:4d:d6:3a:e7:cd:0b:91:
ec:60:b3:4c:91:14:72:7b:55:70:c5:c2:e6:46:17:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FD:72:4C:22:45:BE:81:B2:2C:97:80:61:41:65:01:ED:63:D3:3A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0f1yTCJFvoGyLJeAYUFlAe1j0zo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:1f:f0:d1:97:2d:75:af:1d:01:87:04:21:65:d8:e2:c9:02:
dc:b3:ba:cc:6c:33:3e:63:e3:6c:6f:dd:46:2c:d4:ee:a2:dc:
80:39:fc:0a:9d:72:8b:86:79:10:2f:9d:7e:04:f9:77:90:e8:
de:90:e5:e3:7d:3e:8d:6b:68:09:03:87:12:89:bc:78:96:70:
9a:a8:d0:73:d1:ec:a0:a5:3b:51:12:64:2a:1d:a3:63:63:93:
48:01:d6:7a:8b:66:99:79:5b:dd:fb:97:72:0d:b5:4e:0d:4f:
d1:a2:41:c6:be:8c:8b:d9:2a:e2:83:eb:de:fd:44:6f:95:da:
c3:f4:3c:d0:8f:63:0b:1a:27:a0:57:9f:e5:2a:2c:27:48:60:
c6:63:1f:d1:6d:d8:3c:27:1f:c6:33:04:01:84:a1:06:6c:00:
2d:84:e5:b4:12:e3:5b:14:db:38:bb:84:ff:83:c1:76:6b:4c:
c1:12:a5:3f:f7:12:ff:d3:58:3f:b6:cf:d8:15:dc:96:85:2a:
47:a1:7a:55:38:fd:24:35:9b:14:16:97:cc:05:49:6d:5c:52:
ab:ce:6b:35:61:69:87:9d:18:61:1a:a7:ce:5e:98:86:83:a4:
0e:58:b0:a6:22:57:ab:21:33:b4:4c:b0:f0:5f:d8:2e:09:08:
20:d0:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:02 2024 by rpki-client on console-fra.rpki-client.org