Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5kJ2UbNg0O31x08Jtl0r--pSo7o.roa
File: 5kJ2UbNg0O31x08Jtl0r--pSo7o.roa (raw, json)
Hash identifier: nbigPecgfNaYrbU3N1ifvsKs2dPgdGpM6p31HDGt5fA=
Subject key identifier: E6:42:76:51:B3:60:D0:ED:F5:C7:4F:09:B6:5D:2B:FB:EA:52:A3:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F06
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5kJ2UbNg0O31x08Jtl0r--pSo7o.roa
Signing time: Fri 12 Apr 2024 14:53:17 +0000
ROA not before: Fri 12 Apr 2024 14:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16134 (0x3f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 14:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E6427651B360D0EDF5C74F09B65D2BFBEA52A3BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:8f:73:91:ab:bf:5f:6d:d6:ec:ad:46:ba:
48:2d:84:8c:59:fb:41:c6:2f:7a:f1:cd:20:1c:1e:
98:08:d6:d6:c9:79:ca:07:98:95:23:17:6c:aa:02:
7f:72:a4:45:bf:cb:71:e5:93:08:0f:30:58:2f:05:
c3:1e:7d:c6:2c:50:89:4b:32:49:cd:8f:d1:51:88:
ff:0f:ef:d4:c8:c0:84:55:1d:05:d2:4f:a5:60:e3:
8f:da:ea:35:7e:23:ea:98:d7:f7:91:9d:ac:42:fe:
c2:cd:3f:6d:f1:7b:82:9a:d9:43:6e:15:6a:a0:25:
9f:0c:40:61:fd:bd:b4:29:aa:eb:c2:b9:fc:38:54:
85:d7:ca:df:ff:0f:96:5e:9c:85:9e:31:d6:6f:66:
03:ae:1f:9b:4c:21:5c:42:85:e3:c0:ad:72:06:7f:
a6:91:2f:7c:53:b7:c2:d1:5b:df:88:20:0e:b8:13:
f9:89:30:52:36:e8:f6:9b:d9:5a:47:9d:a8:55:f8:
4c:20:a5:bb:00:f5:0e:58:c6:43:65:f7:e0:01:78:
e6:bc:6d:f6:4c:12:14:65:c2:93:12:dd:85:75:a9:
0a:4b:b4:eb:e5:1c:3d:26:ae:00:45:cb:de:94:75:
b0:4b:4b:bb:4d:60:d3:49:f9:94:18:fd:d8:c2:39:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:76:51:B3:60:D0:ED:F5:C7:4F:09:B6:5D:2B:FB:EA:52:A3:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5kJ2UbNg0O31x08Jtl0r--pSo7o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:ee:f4:60:14:49:01:14:35:99:44:09:db:15:08:6b:c4:24:
20:a4:eb:d1:b0:36:86:ba:d8:49:aa:ed:41:38:1a:16:37:6e:
15:af:aa:8f:e2:a0:69:e5:d7:b4:15:e9:94:b1:7c:9f:a5:9c:
13:ea:e2:33:9c:79:93:91:72:d4:cc:99:b3:7d:9f:a9:25:6c:
e5:89:ab:d0:23:42:8a:00:0d:87:16:31:05:7d:29:5e:e3:37:
4d:99:38:d3:95:41:9d:9e:57:88:48:83:de:0c:0d:b8:59:5b:
6b:09:52:58:32:5e:2f:ea:5d:f3:40:9f:c0:21:f1:c1:18:99:
59:ef:ac:e2:b6:fd:d4:bf:dd:ff:2d:69:ba:c5:3e:74:5e:84:
5e:99:b3:9a:4d:19:4f:22:26:ba:a6:cb:9c:e9:ee:6e:4e:fd:
17:df:7a:e7:93:43:91:fa:0b:a9:e8:43:d7:52:4d:7b:0f:f2:
aa:41:be:34:60:d9:47:41:3a:49:61:f2:a4:96:66:c8:3e:fa:
e2:91:30:1c:a4:c8:10:7f:03:3e:3d:87:fd:3c:ef:22:5c:66:
37:19:78:a0:50:92:bf:4a:11:a0:b4:1e:6b:cc:13:51:af:da:
8c:b5:0b:7f:7f:54:69:33:b9:f4:8c:1e:f3:46:3a:bb:8a:18:
4f:14:38:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:15 2024 by rpki-client on console-ams.rpki-client.org