Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6TPDQvBM4Ev_EGYXWVs1AIGzwEE.roa
File: 6TPDQvBM4Ev_EGYXWVs1AIGzwEE.roa (raw, json)
Hash identifier: UYqBUTlyNGISmZ6hoMxNV8CrC3rWlITv4/cbOOcocyA=
Subject key identifier: E9:33:C3:42:F0:4C:E0:4B:FF:10:66:17:59:5B:35:00:81:B3:C0:41
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BAA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6TPDQvBM4Ev_EGYXWVs1AIGzwEE.roa
Signing time: Mon 29 Apr 2024 11:23:37 +0000
ROA not before: Mon 29 Apr 2024 11:23:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19370 (0x4baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 11:23:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E933C342F04CE04BFF106617595B350081B3C041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:52:3f:50:ed:70:ad:27:08:e4:01:7d:48:
0b:1e:e6:48:28:fa:de:f6:6c:28:5d:80:ba:94:d9:
c8:ed:06:e0:cc:28:23:a2:90:1a:7b:93:4f:63:ca:
00:60:5b:c9:5e:b0:a0:0d:e6:c5:e5:d6:b8:9b:b4:
d2:95:af:2c:b5:3d:2a:a0:91:55:e0:1f:51:f5:1d:
f8:6e:c7:41:31:9f:22:92:73:0b:bf:e5:46:c2:76:
7d:99:1c:4c:ed:a1:08:e2:66:0b:fd:51:53:c8:d4:
8d:e9:01:17:4e:ce:2b:75:7f:88:29:1f:1d:07:ce:
93:7f:c2:e5:d4:6c:e9:bb:05:c0:e5:43:12:c9:a7:
a7:4a:72:4e:ec:8f:81:a0:54:bc:54:82:0f:b1:00:
e3:72:f1:b1:4e:0f:37:67:1a:9c:ae:57:15:e4:ae:
52:92:23:cb:30:13:87:ff:68:40:ed:f4:29:58:72:
12:e7:d6:d4:49:8d:51:83:75:ff:6a:3b:d6:d3:d5:
e2:1d:5d:72:e2:f3:a1:36:34:66:17:3c:84:81:50:
fc:b5:0b:b6:80:de:45:24:98:e8:7d:cf:bf:06:24:
8b:80:0c:fd:79:a8:ac:40:72:7d:31:d0:ee:66:f1:
41:e5:2a:5b:b9:d4:03:b7:f7:98:2b:c8:78:03:ce:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:33:C3:42:F0:4C:E0:4B:FF:10:66:17:59:5B:35:00:81:B3:C0:41
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6TPDQvBM4Ev_EGYXWVs1AIGzwEE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:67:f0:c5:1f:c4:46:d7:ba:1b:97:e0:96:0b:91:fb:4a:df:
05:b7:bb:dd:d6:44:9d:59:83:4b:f7:f9:44:3d:fb:8b:98:75:
7b:6d:92:67:8a:5a:90:a1:a2:5a:df:8f:2d:77:4b:ed:cf:0d:
ab:28:da:6b:d2:7e:18:c4:fe:f6:17:60:24:8d:a2:fd:93:55:
91:06:d5:60:d6:29:17:5e:b1:25:bd:3f:8c:ee:0a:c5:2c:93:
ed:db:a3:c9:73:37:b6:b4:40:fb:0c:1a:ac:93:94:ba:e2:21:
7a:09:24:ee:cc:a6:88:c1:ec:ef:36:d3:5c:62:3e:07:c4:26:
d4:21:5a:e0:f2:25:af:8e:4f:50:ab:81:f6:09:61:bd:8b:b9:
c4:a3:98:d1:e4:78:57:77:ab:f0:d3:e0:ad:e6:9a:6b:3f:79:
7c:94:20:f7:39:b2:32:78:54:f9:4c:fe:da:d7:6e:e5:19:e2:
53:a1:54:16:b6:3c:2b:c8:ef:0e:5a:56:01:21:19:b3:74:d3:
f8:a6:b0:6d:fe:66:84:1f:d4:3e:25:5e:a4:ac:38:2b:32:6b:
02:44:e3:44:6b:44:45:55:44:ef:bd:4b:19:80:04:57:ad:b5:
9e:65:1f:f6:47:2a:9f:54:b6:4d:42:0e:e9:a6:75:ac:a6:4f:
5d:88:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:08 2024 by rpki-client on console-fra.rpki-client.org