Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7GlGJ1JDidX8dVTKr9iOFomXedo.roa
File: 7GlGJ1JDidX8dVTKr9iOFomXedo.roa (raw, json)
Hash identifier: 76u4fagZQmmimYPcraC5y8q0niJrQfiz9Zn2SdB8OSA=
Subject key identifier: EC:69:46:27:52:43:89:D5:FC:75:54:CA:AF:D8:8E:16:89:97:79:DA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E6A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7GlGJ1JDidX8dVTKr9iOFomXedo.roa
Signing time: Thu 11 Apr 2024 19:23:15 +0000
ROA not before: Thu 11 Apr 2024 19:23:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15978 (0x3e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 19:23:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EC694627524389D5FC7554CAAFD88E16899779DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:49:f8:6e:b1:e5:a4:c6:31:e9:aa:af:0f:
f6:e5:a9:97:93:3b:2c:42:be:69:53:49:bc:26:ba:
1a:7d:0a:10:32:18:8f:0b:3f:11:4a:35:df:11:3a:
0e:8c:1a:3f:bd:1f:43:51:60:bd:00:05:ad:15:83:
4b:52:57:c7:c4:5f:bc:1a:03:b1:99:4c:ba:ba:a6:
fb:e5:ef:d2:2d:e0:ac:19:96:e6:1e:84:92:04:fc:
9e:e7:41:13:05:18:b8:dd:97:d1:c4:21:52:70:22:
89:77:be:38:71:b4:4d:b0:33:08:5e:de:22:e8:af:
08:f6:2e:60:1f:16:71:4a:f1:af:8a:2a:6a:f2:55:
5d:76:95:52:12:e9:a1:87:d1:ed:f4:c7:c4:d7:7a:
8f:18:0b:d9:80:ed:b2:c9:14:4c:a5:2e:19:82:53:
6d:96:4e:82:09:f4:8b:c9:cd:e6:92:78:99:e7:8b:
65:40:7e:43:a3:ad:2c:99:54:f7:3e:c0:08:f6:37:
62:41:bd:1e:4f:8a:81:0f:42:00:52:ff:47:1b:6c:
57:ae:38:62:61:ed:86:8b:cd:e4:bc:70:f5:69:c6:
9e:65:63:77:cb:99:8a:2a:f6:08:af:90:0c:1e:a9:
ac:0e:77:3b:79:3f:4d:62:97:bd:21:a7:3e:f2:2a:
b9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:69:46:27:52:43:89:D5:FC:75:54:CA:AF:D8:8E:16:89:97:79:DA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7GlGJ1JDidX8dVTKr9iOFomXedo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:68:af:7a:17:a5:ff:70:90:e6:1a:d9:6a:c7:e8:87:85:72:
de:aa:3f:2f:10:b8:a8:b4:1b:36:df:19:1f:5f:e9:60:e8:4d:
2f:9f:ed:c2:49:0b:c3:a0:37:5d:2d:33:cc:35:79:2f:79:09:
e2:95:4b:d1:4f:87:6c:05:05:6c:b9:ff:37:a7:7c:95:2c:5f:
e8:6f:77:e4:ec:e7:22:a0:9a:eb:b2:78:00:b8:cb:00:f4:f7:
1e:cb:c9:08:49:43:d0:b7:c9:84:b0:df:04:96:5e:8f:7e:08:
a4:53:d9:e2:1d:de:89:de:42:1f:b0:07:24:86:dc:89:7f:d1:
7f:4e:4b:52:bf:41:66:79:94:3a:24:fe:b7:89:40:99:2c:1c:
8c:5b:91:78:58:57:3c:0f:32:9e:8b:14:64:bf:05:11:22:63:
82:5c:65:9c:b4:c2:76:05:3b:8e:e9:ed:1f:aa:d3:9c:32:1a:
fc:c0:c3:d9:ba:ac:a7:43:2d:34:c6:f4:f9:77:53:68:74:31:
87:75:a8:6a:34:2a:6f:ef:f8:9f:21:5f:cf:9b:fc:67:85:4b:
02:f9:32:28:7d:29:e9:fa:99:5a:53:37:0d:91:a4:c8:8b:23:
72:a0:6d:d1:89:f0:0e:34:40:af:06:c5:19:3d:7f:80:c8:32:
1b:c8:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:17 2024 by rpki-client on console-ams.rpki-client.org