Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6NhwSE5rgj5-ez0DuOglDaCMZ7o.roa
File: 6NhwSE5rgj5-ez0DuOglDaCMZ7o.roa (raw, json)
Hash identifier: pZFAcHuahbSoOKSvGRSjjUTN905mC4CC+yBslGGqw1g=
Subject key identifier: E8:D8:70:48:4E:6B:82:3E:7E:7B:3D:03:B8:E8:25:0D:A0:8C:67:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 32F6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6NhwSE5rgj5-ez0DuOglDaCMZ7o.roa
Signing time: Wed 27 Mar 2024 12:52:02 +0000
ROA not before: Wed 27 Mar 2024 12:52:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13046 (0x32f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 12:52:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E8D870484E6B823E7E7B3D03B8E8250DA08C67BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:30:f9:d1:b7:d2:08:30:fc:18:5b:6f:2b:44:
44:5d:48:cc:c1:7e:f5:7c:f9:62:26:90:fc:bb:b9:
99:2e:f6:30:e2:52:9d:1c:6e:38:0a:c2:46:36:e2:
fd:8a:52:53:e5:27:f6:aa:0c:ef:24:05:2b:db:b0:
05:f8:ff:19:7a:5f:9d:60:e1:cb:9d:73:19:be:53:
9b:ba:13:84:17:68:b3:a5:1e:1f:53:54:46:76:1a:
65:26:13:df:38:74:8c:8d:2c:aa:8f:5f:d0:f0:b4:
c2:f4:2b:7c:72:1f:a2:15:32:96:f5:cb:d8:67:f3:
db:4d:24:b9:12:c5:7d:25:3e:6d:df:7c:99:48:a2:
ed:96:6d:66:69:d4:ad:b2:b7:69:a4:14:dc:40:85:
9e:79:c5:f4:a3:b4:81:eb:7b:eb:37:88:1d:76:e1:
1a:6f:3c:f4:e7:54:4a:35:41:80:45:5d:d1:29:35:
bb:3a:b0:2a:d8:cc:14:bb:a1:53:5c:09:49:6c:07:
f2:44:29:7d:94:9a:0e:6e:62:b9:4c:a3:0d:0e:d3:
55:c2:0e:05:0f:e4:c9:37:7b:56:b6:3d:84:fb:e2:
1e:82:27:49:41:f4:00:ef:ba:42:32:29:7e:9e:c7:
29:41:4f:d5:a2:4d:20:ed:11:19:80:38:8e:a9:da:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:70:48:4E:6B:82:3E:7E:7B:3D:03:B8:E8:25:0D:A0:8C:67:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6NhwSE5rgj5-ez0DuOglDaCMZ7o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:27:d3:8a:14:af:9f:dc:f3:9b:42:66:b0:75:da:63:3d:d9:
d3:91:54:e2:e7:25:f7:f5:bb:85:b7:e5:fd:eb:86:97:6d:f3:
c3:5a:77:a5:f2:65:40:27:fa:76:62:cf:0c:ac:e4:0c:2a:64:
65:a1:87:fb:06:b2:52:4f:3a:d8:f8:34:87:bc:1b:4d:65:77:
75:61:f3:bd:4d:aa:d9:eb:85:93:df:6e:79:bb:7d:ef:a8:21:
ac:81:47:45:5f:9b:c0:f1:d8:1c:7f:2b:99:cb:7f:a0:41:b7:
03:6e:4b:55:f9:8d:c8:47:ea:1a:1d:01:ac:de:4a:01:9a:3d:
df:94:4d:e8:ed:e8:62:42:92:a5:aa:ff:1a:f3:6d:53:ae:c4:
a9:d9:fc:bb:85:3f:0f:16:70:34:46:4e:8c:3e:95:51:1b:46:
a7:4e:fe:e3:b7:27:1d:0f:50:79:7d:43:32:1b:0b:0f:eb:db:
08:8a:2f:0d:86:ee:5c:43:d4:f5:0c:9e:2e:44:75:13:9c:82:
ea:51:82:cf:e0:d7:88:7a:c2:df:ce:25:4e:97:16:52:5c:82:
d6:10:07:ee:43:d7:94:5c:2b:45:78:f9:92:03:04:39:da:cd:
8e:3b:5a:a2:3b:ce:fa:1f:99:16:f5:03:08:f9:4e:d0:b8:ce:
4c:79:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:07 2024 by rpki-client on console-fra.rpki-client.org