Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2QfGz0sXiu1mPiX9dZU9zvN06Yk.roa
File: 2QfGz0sXiu1mPiX9dZU9zvN06Yk.roa (raw, json)
Hash identifier: ucNquUR1iKuVXsTivP+4CLC46dzEQsQSwTY5uB5L2+E=
Subject key identifier: D9:07:C6:CF:4B:17:8A:ED:66:3E:25:FD:75:95:3D:CE:F3:74:E9:89
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5332
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2QfGz0sXiu1mPiX9dZU9zvN06Yk.roa
Signing time: Thu 09 May 2024 12:24:24 +0000
ROA not before: Thu 09 May 2024 12:24:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21298 (0x5332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 12:24:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D907C6CF4B178AED663E25FD75953DCEF374E989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:a4:7f:e0:69:8a:ee:c6:da:49:62:24:b8:
1b:51:6f:ad:72:06:09:0a:ec:a5:05:fa:d1:98:0e:
af:9a:cb:53:d0:6f:44:6f:8d:7e:ab:ac:05:ee:ae:
5c:eb:79:a3:db:37:cd:87:07:ad:d2:56:63:b0:03:
40:2b:f7:94:5f:7e:0f:e0:ac:18:0e:58:9c:5a:3c:
4d:2a:f9:fd:2c:5a:3b:c5:8a:cf:bc:7b:9f:b5:fe:
86:8d:f1:de:30:17:9d:4f:58:e8:5f:1f:82:23:94:
d9:ab:3f:c8:61:43:83:70:c1:52:cc:7c:88:8c:b2:
84:f3:a3:66:af:a5:38:6c:58:2f:bf:bc:0d:e2:4b:
79:89:81:c9:c4:6f:89:f6:0a:f7:53:f3:e7:b1:79:
54:a7:36:81:dc:a0:99:11:9a:33:6f:d1:99:2d:40:
46:ef:53:8b:fe:95:62:ed:4c:4c:a2:f8:96:c9:80:
b3:77:31:89:1b:9e:35:d4:cd:c2:3c:1a:f2:d3:5b:
eb:8d:e4:7e:04:5e:2c:c1:87:db:44:21:09:f8:c8:
e0:ac:2b:ae:e7:e6:a0:16:f0:ae:9e:b9:78:cd:79:
d1:49:64:9a:d3:78:79:66:0f:cc:5c:7b:69:76:58:
a4:bd:0f:c9:c4:8c:26:2b:f7:9a:a5:98:ff:83:40:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:07:C6:CF:4B:17:8A:ED:66:3E:25:FD:75:95:3D:CE:F3:74:E9:89
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2QfGz0sXiu1mPiX9dZU9zvN06Yk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:8b:1e:28:b5:b2:b7:3a:19:12:8e:f9:be:23:28:79:d0:74:
3a:46:11:d8:b2:6b:6d:7e:69:cb:e8:f0:52:30:04:c3:11:30:
4f:51:07:7c:a8:68:fd:ad:7c:e5:1a:f7:5d:95:2c:f2:9a:e0:
8d:d3:2e:72:44:59:01:8f:9b:f1:ae:e7:e1:d4:30:a3:ae:3b:
1c:c6:1f:c1:76:e1:40:b6:10:81:b2:b4:18:24:1a:2e:24:55:
ad:73:f9:95:84:c1:c2:f7:53:ad:5a:ec:ee:ce:36:63:49:24:
b5:9f:e9:f8:f8:53:6f:0f:1c:c7:1b:3d:1a:80:4d:40:3f:59:
fb:91:b8:5c:af:12:b2:15:8b:12:df:03:b5:42:78:10:30:22:
df:7b:14:84:82:9a:8a:2f:0e:85:89:86:cb:5f:19:a0:c3:60:
ab:b4:e3:00:d2:5b:fc:bc:72:24:cc:68:7b:01:41:80:38:09:
18:06:fa:92:3b:9e:d0:0f:32:06:b5:e3:b5:84:f6:76:09:e6:
02:2d:19:91:14:61:2b:0a:b8:04:ee:d6:8f:57:ca:86:46:1b:
2a:c4:64:76:5e:3e:93:ea:30:b7:57:b8:af:a6:0e:f4:4d:45:
e8:04:ec:60:8a:95:f4:22:a4:8d:48:c4:ed:37:c2:3c:db:28:
db:82:86:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:03 2024 by rpki-client on console-fra.rpki-client.org