Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/34o-IbwyMhfzGZ_r-3QAY3zEs24.roa
File: 34o-IbwyMhfzGZ_r-3QAY3zEs24.roa (raw, json)
Hash identifier: NLwuQfvdF8a31ZgPxHuesnWv5fNYDRmXpP4NmwNxMzY=
Subject key identifier: DF:8A:3E:21:BC:32:32:17:F3:19:9F:EB:FB:74:00:63:7C:C4:B3:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 449A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/34o-IbwyMhfzGZ_r-3QAY3zEs24.roa
Signing time: Sat 20 Apr 2024 01:23:03 +0000
ROA not before: Sat 20 Apr 2024 01:23:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17562 (0x449a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 01:23:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DF8A3E21BC323217F3199FEBFB7400637CC4B36E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c1:48:aa:7b:e2:69:8f:18:8a:77:ab:46:36:
3a:c9:46:02:11:3a:2f:9d:e9:86:4e:5b:fa:0f:69:
f5:78:1f:4d:7e:a1:0e:ca:46:6d:7b:20:cf:2d:0a:
58:81:36:53:92:5c:85:7f:47:68:23:b8:54:33:b7:
40:34:d0:a7:c1:21:c7:89:a8:23:22:31:26:d6:56:
59:16:77:dd:ef:f6:de:68:5d:87:07:8a:cf:e1:fa:
dc:c9:af:9a:a1:c0:e3:d6:ec:8f:62:49:dc:fe:38:
05:55:5d:e7:92:ec:72:c3:83:8a:d6:90:54:47:98:
a7:26:2d:2c:4d:0e:df:f6:d5:e5:4e:50:2f:82:c9:
86:30:09:62:e8:8a:f3:96:b4:0d:4f:3e:4c:74:7a:
aa:a4:e4:d2:a9:fb:8b:c3:be:3c:55:9c:73:67:79:
11:39:4b:b2:4f:af:00:6a:33:b3:60:83:20:25:7b:
c3:0c:3f:04:ee:eb:e2:d7:55:71:b4:4b:49:db:c8:
55:8b:c1:8f:e5:24:be:a2:3c:0a:fb:56:91:d5:10:
d0:b7:e1:3d:1b:df:23:a6:fd:1c:54:ec:cd:51:28:
5a:c6:d2:28:f1:d0:26:e5:fb:f9:81:31:a9:17:e1:
46:41:f9:f7:bf:ea:e4:94:0a:e6:13:f8:94:32:e8:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8A:3E:21:BC:32:32:17:F3:19:9F:EB:FB:74:00:63:7C:C4:B3:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/34o-IbwyMhfzGZ_r-3QAY3zEs24.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:33:ab:37:fd:bd:ff:7f:e0:86:0b:e7:93:19:72:ee:f3:59:
ef:f0:5e:9d:2b:d9:8f:03:b5:68:77:70:53:6c:82:f0:5b:a2:
b6:bb:ab:bc:a7:7a:3a:d5:e4:f8:c0:fa:b4:3a:f5:74:74:17:
ef:f7:aa:33:94:e9:05:e4:3f:c0:ac:ff:9d:17:91:f1:37:46:
f8:e1:00:4a:f6:cc:c1:a7:08:ae:13:df:2b:03:42:ad:1b:80:
7b:0f:1a:2b:4d:c9:0d:67:44:a9:d3:6f:99:ec:4c:aa:a8:7f:
73:43:a0:22:f3:a3:db:0f:ab:11:8a:29:1d:b1:c8:1e:1d:1d:
e5:3a:60:59:2e:0e:f0:87:a5:5b:ba:64:98:00:c4:7c:0a:8c:
5c:7a:f4:cc:a3:e7:32:e4:d9:b4:19:21:a3:cc:c8:10:22:48:
40:d5:12:c5:08:ad:16:f4:ef:a3:78:26:66:8a:34:22:44:ce:
bf:32:2b:ff:f6:b5:6f:44:97:6e:3b:d3:20:95:4f:fb:c2:6b:
a2:55:27:32:3f:46:86:cf:0e:da:b8:c1:b6:91:6c:b3:83:74:
b4:96:36:a7:40:d7:d4:1b:e9:ea:c6:68:da:f0:ac:3f:94:d9:
fb:61:3e:03:02:ee:ac:d5:4a:b7:af:e4:c2:09:3d:c1:2b:fc:
33:7d:62:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:04 2024 by rpki-client on console-fra.rpki-client.org