Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/630mwkb8Yd8vyxKVrg5XsnxQe9o.roa
File: 630mwkb8Yd8vyxKVrg5XsnxQe9o.roa (raw, json)
Hash identifier: o5BriuqFtw69vk84ezSYGilWmChbos5huFQWJBfkakk=
Subject key identifier: EB:7D:26:C2:46:FC:61:DF:2F:CB:12:95:AE:0E:57:B2:7C:50:7B:DA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DBA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/630mwkb8Yd8vyxKVrg5XsnxQe9o.roa
Signing time: Wed 10 Apr 2024 21:22:44 +0000
ROA not before: Wed 10 Apr 2024 21:22:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15802 (0x3dba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 21:22:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EB7D26C246FC61DF2FCB1295AE0E57B27C507BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:c7:50:81:df:59:60:5e:7c:00:83:76:0c:
b0:eb:41:ac:d0:2a:c0:2f:48:d0:4c:e6:e9:9f:3f:
46:34:82:7e:6b:11:36:c3:e5:98:37:50:7c:b2:a4:
58:d9:ea:2b:e7:96:92:c2:13:96:b6:41:6a:2c:d1:
08:6a:04:21:b4:7d:63:f1:d9:af:8c:7d:27:a7:4d:
2d:e7:f9:8f:f6:7e:fd:4a:23:9d:8a:b0:70:99:43:
bc:93:18:14:3d:7a:b0:9d:85:35:4b:72:cd:77:21:
ac:69:fe:21:af:3f:e8:cb:c5:17:e3:31:5c:40:38:
a7:65:e9:ec:fb:3c:74:99:7f:97:5c:7c:fb:dd:b7:
75:7d:e7:5c:9e:7c:b4:df:1c:b0:70:18:a3:f7:8e:
e8:77:99:ad:b4:fb:3e:10:1a:03:e3:a2:94:d4:d1:
92:8b:c4:11:e4:ca:5d:5e:c8:7e:28:50:63:74:e8:
ee:14:58:05:2c:0a:14:07:fa:2f:0a:bf:a8:f2:ae:
17:57:f5:3c:6a:d2:e1:49:84:35:91:1c:24:76:1d:
dd:8a:dc:31:b9:42:df:eb:58:f7:c7:ea:62:ea:ff:
09:07:ff:e6:ab:ec:6c:f7:9a:3d:63:b3:cf:4c:fa:
f3:84:8a:c3:8f:35:f0:4a:d7:6e:fe:b7:bd:88:db:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7D:26:C2:46:FC:61:DF:2F:CB:12:95:AE:0E:57:B2:7C:50:7B:DA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/630mwkb8Yd8vyxKVrg5XsnxQe9o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:d8:9c:b5:85:df:6c:67:78:e9:16:9b:1b:fa:8e:93:97:02:
8d:bc:c2:39:84:12:59:42:61:6f:c4:f6:81:d0:47:49:c7:72:
58:0c:7d:30:83:85:ae:bd:c2:72:78:9a:7d:63:b4:6a:8e:26:
a3:09:9b:c1:e2:2d:89:9e:76:e1:d9:6a:59:04:1b:4a:f1:78:
26:5c:57:e9:90:3b:b4:5f:d3:9a:b1:8b:dc:29:9d:04:fe:a8:
80:b7:43:76:d7:c5:3e:14:8a:22:ba:2a:35:77:3b:0c:e7:eb:
43:20:dc:f4:82:c4:14:ac:f1:fa:62:73:5e:4b:a7:75:f0:0c:
bc:3c:fa:44:e6:b3:62:c7:2f:2b:5d:5b:f9:c0:60:b6:7e:4d:
dd:e0:94:33:b4:0b:cc:4c:40:67:b9:ec:0a:c1:e9:bc:7d:5c:
98:95:6f:fa:84:82:77:b5:5d:8c:e4:dc:5c:8c:c1:eb:a1:ee:
71:e8:db:19:70:11:77:17:99:75:24:29:95:48:a6:27:9a:58:
a8:f7:f1:b6:1a:a0:0c:c4:86:42:46:7d:4f:4e:2f:f1:28:24:
4e:bf:52:0a:77:b4:e2:d2:21:6e:99:ff:45:08:ab:7c:54:76:
19:3f:6f:08:6a:48:d6:e8:31:84:78:6d:1d:11:ea:e6:30:70:
c3:cc:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:16 2024 by rpki-client on console-ams.rpki-client.org