Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3uyQjyQDoHubTvpIvIQSNebwBOg.roa
File: 3uyQjyQDoHubTvpIvIQSNebwBOg.roa (raw, json)
Hash identifier: zLEvBS/JYlhyK8U3/x4nqNMT14YMFgHnlMM4Smu2F4c=
Subject key identifier: DE:EC:90:8F:24:03:A0:7B:9B:4E:FA:48:BC:84:12:35:E6:F0:04:E8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3732
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3uyQjyQDoHubTvpIvIQSNebwBOg.roa
Signing time: Tue 02 Apr 2024 04:22:13 +0000
ROA not before: Tue 02 Apr 2024 04:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14130 (0x3732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 04:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DEEC908F2403A07B9B4EFA48BC841235E6F004E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:da:d4:bc:45:70:c0:e7:7c:b3:1e:cc:3b:
85:b5:1d:83:ca:5b:42:db:48:6a:a5:8e:7e:90:c0:
48:fd:c7:d5:12:71:85:dd:e6:9f:f8:92:23:e4:2c:
68:55:d3:11:78:7f:ec:7d:0f:94:34:2d:d0:07:87:
c4:ff:fa:a3:4f:93:8a:b3:f8:82:58:8c:3d:19:af:
19:57:79:3e:89:2f:cf:1b:61:2b:69:39:51:52:0b:
91:54:61:4a:4a:ba:15:e6:de:6d:e9:c8:b0:cb:e6:
fe:60:af:fa:a6:16:67:2f:4d:ce:40:de:04:cf:21:
49:d1:01:f2:a0:96:c6:16:44:4d:64:8e:0c:6e:4c:
2b:fe:a4:da:c9:33:23:98:ec:c1:b7:0c:f8:a5:6a:
5b:b3:17:80:1c:e5:1c:31:03:98:c7:ca:4b:ed:23:
3b:b6:4c:16:2f:42:a7:19:74:0b:4d:a3:e0:d5:87:
8b:01:43:58:79:68:7c:d1:49:cd:21:c2:33:a2:ac:
3b:1c:d8:6f:77:7f:b9:f6:9f:7d:71:20:5a:a1:03:
d4:43:be:26:ab:b4:a4:0f:c0:92:8e:f4:e2:36:bf:
46:85:46:97:eb:0c:b9:e4:65:8c:e6:6f:63:67:6f:
a6:95:87:a3:ab:5c:2b:21:62:e5:7f:13:31:55:1f:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EC:90:8F:24:03:A0:7B:9B:4E:FA:48:BC:84:12:35:E6:F0:04:E8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3uyQjyQDoHubTvpIvIQSNebwBOg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:c6:c2:d0:64:e3:0d:e4:63:56:d4:31:ce:f0:0b:22:ee:49:
a0:3e:29:37:c0:01:f2:09:68:9f:0a:3b:10:65:9e:f8:f6:0a:
fe:79:2f:bf:9d:3d:ba:12:34:e7:48:7b:f0:ae:b6:74:39:32:
cf:82:80:6c:bc:6a:ee:30:99:bc:98:ba:d7:a1:1e:62:3e:4a:
7e:fa:1f:b9:ff:6b:92:68:ce:ec:92:81:cd:20:41:fe:86:71:
a4:b0:50:10:ff:ae:08:05:7b:6d:50:46:72:fe:2e:9f:4f:4b:
80:80:58:26:0c:81:7b:9a:16:40:7d:8a:c4:ba:41:7c:ed:e8:
b7:d9:96:18:c7:ba:3b:c8:10:aa:d2:f8:85:b3:11:7c:b3:7d:
26:8f:07:d2:0a:61:bd:6b:c4:61:fd:fb:03:17:50:d9:97:ee:
1f:20:00:7a:33:66:b3:d7:50:64:42:37:7d:1c:41:1a:4d:57:
e8:90:f5:a4:33:87:3b:41:7f:b1:06:65:86:fb:32:74:dc:bd:
cf:ee:35:8b:d9:b4:1c:23:bd:61:1c:dd:87:d5:12:40:8c:b3:
68:0d:48:4f:5f:fe:90:2a:2b:62:ec:a2:38:2a:ab:34:c0:90:
8b:3a:76:27:be:8b:fa:18:8f:60:ea:12:ec:a8:94:b0:4a:cc:
24:f6:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:13 2024 by rpki-client on console-ams.rpki-client.org