Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3509uWmPzEVhb3QD8SWo_HQkp0s.roa
File: 3509uWmPzEVhb3QD8SWo_HQkp0s.roa (raw, json)
Hash identifier: zgpK7eexYBH2j6F9Ue9xXp5zNQvBQb73fXL0InXQBgA=
Subject key identifier: DF:9D:3D:B9:69:8F:CC:45:61:6F:74:03:F1:25:A8:FC:74:24:A7:4B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3756
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3509uWmPzEVhb3QD8SWo_HQkp0s.roa
Signing time: Tue 02 Apr 2024 08:52:15 +0000
ROA not before: Tue 02 Apr 2024 08:52:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14166 (0x3756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 08:52:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DF9D3DB9698FCC45616F7403F125A8FC7424A74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:ed:10:d0:6f:5b:be:c6:27:68:f8:42:e9:
c7:1a:37:25:81:c1:22:d9:a7:71:7e:a7:45:50:80:
75:fa:c1:74:85:27:11:6e:54:8e:a0:aa:9b:1e:c9:
34:0a:a8:32:ee:75:31:b7:b1:7f:8c:84:aa:86:9e:
37:14:5e:0e:68:76:f0:48:09:05:78:33:11:27:f1:
ba:62:cc:40:0d:c7:95:43:7f:c9:b1:69:f9:76:ad:
a7:69:c4:36:3b:f8:1a:35:60:40:b9:e8:c2:b7:a3:
9f:32:fb:ed:2f:e5:48:74:5c:f5:ac:a4:43:7d:8f:
fc:e6:3e:30:ca:d2:73:db:bf:3d:10:fb:75:81:f2:
ec:06:e5:13:4b:47:d7:f9:69:0d:6d:77:5a:28:c8:
b1:b2:02:d4:5e:2b:34:f7:20:89:d0:6b:52:0f:bb:
e1:f5:c8:71:57:a7:80:6c:58:f1:9f:4f:76:01:64:
17:d1:2a:46:c1:64:94:14:5f:1f:5e:5c:82:31:5b:
fd:4b:d7:69:ff:67:2b:23:cc:d6:48:b3:d8:41:a5:
5c:13:43:9e:32:ce:af:24:e7:85:62:6d:8e:ce:1f:
50:74:a4:7c:e7:57:52:77:67:8a:1f:26:53:85:43:
67:1f:f8:ca:ba:8c:5f:74:c2:dc:54:35:6f:de:6a:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:3D:B9:69:8F:CC:45:61:6F:74:03:F1:25:A8:FC:74:24:A7:4B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3509uWmPzEVhb3QD8SWo_HQkp0s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:95:a0:d0:e4:0c:fe:c5:9c:e0:a6:00:aa:6f:11:14:d7:4b:
62:b6:7d:d6:df:70:52:a2:7c:5a:01:33:51:3b:17:47:54:cf:
49:f8:16:19:56:eb:ce:2a:aa:10:16:58:20:b1:c8:5e:87:35:
63:fc:1f:8a:60:5e:70:86:81:67:be:8d:ba:b7:2b:46:f5:d6:
96:4c:60:12:94:b6:aa:c3:9e:20:fe:7e:a3:b7:d5:6f:98:c1:
89:92:2e:27:6a:51:1a:cc:4f:2e:94:bd:01:7b:95:54:f6:9f:
de:1c:3a:a6:21:1d:6d:40:82:ce:e0:de:3d:7a:97:1f:80:33:
97:0e:6a:ef:0c:f9:e5:26:9a:fb:cf:4c:90:e3:99:97:70:84:
7b:0b:ff:4e:ba:61:ff:8a:ef:ad:9a:10:d4:3e:48:bb:a2:7b:
ca:b1:43:c4:8e:5b:ea:74:36:9d:82:54:99:a9:6e:0f:2f:0c:
d3:9a:ec:8a:31:20:fa:6e:16:c8:19:73:e5:d6:08:11:ab:d9:
ec:0a:29:b6:5e:a3:57:51:e9:01:fa:3f:12:23:bc:0d:4a:73:
9f:ed:1d:87:15:52:bb:c7:e9:45:5a:d8:86:e7:9c:fe:b7:d7:
de:43:08:00:3a:8e:af:76:e3:cd:df:3d:5c:a2:6b:e8:b3:1d:
c5:21:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:04 2024 by rpki-client on console-fra.rpki-client.org