Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6m9p8ieWfuLiY3sFAyrEp62JfPY.roa
File: 6m9p8ieWfuLiY3sFAyrEp62JfPY.roa (raw, json)
Hash identifier: pQ2/7YS33V5rZ2Jwnk842Eewf06ug4bTHggjiGUnaUA=
Subject key identifier: EA:6F:69:F2:27:96:7E:E2:E2:63:7B:05:03:2A:C4:A7:AD:89:7C:F6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44CE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6m9p8ieWfuLiY3sFAyrEp62JfPY.roa
Signing time: Sat 20 Apr 2024 07:53:13 +0000
ROA not before: Sat 20 Apr 2024 07:53:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17614 (0x44ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 07:53:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EA6F69F227967EE2E2637B05032AC4A7AD897CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:eb:56:a6:91:e1:0e:e1:09:44:da:38:7d:
c4:4f:b5:9c:5c:dc:85:bb:df:32:b1:14:6c:89:5c:
5c:29:9d:c8:48:9d:63:f0:89:72:39:4d:fe:8c:0e:
eb:cf:ea:4a:ae:e0:45:b2:92:89:3d:b6:ab:e6:b1:
e2:7d:8e:bc:bd:86:c8:e1:81:a1:f0:0d:f5:31:f7:
4e:f2:21:5c:1a:f0:9b:99:bf:7c:ee:54:b3:eb:a7:
42:20:27:91:c0:69:57:aa:54:02:f5:8d:b8:83:1b:
66:e4:4b:9f:61:6f:a3:14:f2:61:66:75:86:9a:32:
a6:8e:e2:0c:e5:73:e3:57:d1:9d:59:99:87:4a:39:
b1:2f:bf:e9:e8:28:81:cb:0d:22:99:53:fe:d9:9a:
d2:bf:38:72:11:af:42:eb:bd:dd:14:0b:ee:0c:11:
31:37:4b:be:32:96:5e:89:76:b8:79:7b:b4:48:55:
f0:2e:bc:92:d7:af:47:94:9c:bc:92:23:6d:33:2c:
b6:97:fd:27:d2:ba:0a:27:ef:40:a0:20:b1:ab:f8:
cb:d8:f8:fe:06:88:57:08:ca:13:55:8d:d2:d9:a2:
f4:9e:37:e5:48:83:4d:6e:03:59:be:b8:5d:42:85:
71:b2:20:70:bf:de:0d:2e:3d:17:b5:bd:14:c3:a1:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6F:69:F2:27:96:7E:E2:E2:63:7B:05:03:2A:C4:A7:AD:89:7C:F6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6m9p8ieWfuLiY3sFAyrEp62JfPY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:ee:64:69:8b:4f:eb:32:80:03:3d:e0:2f:f6:83:5b:c3:c6:
95:21:c0:3c:53:5b:04:d6:e6:0a:0d:fb:08:82:36:93:85:4d:
58:83:97:2d:a4:8f:0b:2f:1f:db:5a:4f:4f:b1:91:8a:17:a5:
92:0d:1f:98:39:4d:33:3e:5a:89:00:c3:da:2c:ca:fa:f9:ae:
64:2b:de:17:32:54:36:3d:d6:71:fe:d2:93:bf:c5:ff:69:c0:
7b:5d:9b:2f:99:bf:0b:f0:ba:ab:0d:39:55:05:c8:d2:a6:24:
65:2a:c4:49:d9:98:39:ec:d2:8a:83:22:35:2d:13:29:0f:eb:
74:c5:f4:7d:0f:5b:42:28:a3:de:d5:d6:92:74:ca:f5:ac:3a:
ae:f0:e1:ec:4f:e0:b0:45:e3:23:77:64:df:b5:72:59:15:50:
e7:84:4b:f1:d1:20:b1:ae:05:22:20:9a:9a:a7:9d:75:e7:5e:
16:de:74:79:d7:f0:4f:dc:ab:60:05:d7:43:1a:fc:8a:d7:10:
26:4a:08:72:e9:e5:0c:b7:71:60:9e:b6:91:83:34:a7:0c:01:
cb:61:4e:83:bc:8e:7c:7a:9e:2d:b7:15:93:0f:c7:1e:d3:e9:
9e:bf:be:f3:57:95:4f:d6:9c:5c:e4:97:8e:5d:a6:a7:f7:f5:
3f:0f:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:08 2024 by rpki-client on console-fra.rpki-client.org