Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8-FUvdheBYIEGVYptrb0WFz7NyA.roa
File: 8-FUvdheBYIEGVYptrb0WFz7NyA.roa (raw, json)
Hash identifier: ba/TA5muP0LD+bmyfTwW25VpiTSYS0Pk/OIkzsCrEIE=
Subject key identifier: F3:E1:54:BD:D8:5E:05:82:04:19:56:29:B6:B6:F4:58:5C:FB:37:20
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5826
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8-FUvdheBYIEGVYptrb0WFz7NyA.roa
Signing time: Thu 16 May 2024 02:54:16 +0000
ROA not before: Thu 16 May 2024 02:54:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22566 (0x5826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 02:54:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F3E154BDD85E058204195629B6B6F4585CFB3720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:24:91:2f:3c:ba:b8:1e:d5:4f:15:fb:54:
8b:bd:b6:ad:e8:44:03:45:03:f9:81:96:cc:3f:5d:
d8:55:c9:ae:c9:51:70:e1:07:76:cb:ea:0d:8b:58:
11:fe:67:b1:65:98:b9:99:19:55:08:b1:69:a6:95:
48:e6:c5:3f:ba:17:6b:01:10:85:31:87:46:c3:95:
92:2e:27:0c:bb:22:07:e1:4d:8e:d8:b3:a6:2b:a5:
1a:92:b2:22:fc:18:c8:a8:37:e8:9a:cf:c3:fa:e9:
b9:ff:19:eb:18:65:e4:9c:4d:ec:15:df:86:bc:5b:
aa:1b:cb:62:da:b5:04:dc:72:e8:91:4b:3f:3d:86:
79:21:2d:4d:c0:db:51:0a:70:68:b6:43:55:d1:be:
42:6c:c5:bc:f4:22:e2:97:63:3e:70:9c:7b:9a:24:
9e:ab:2b:85:ab:49:92:df:52:59:24:31:29:89:2d:
72:9d:3e:b7:59:bd:8a:75:5a:00:0d:a6:27:44:6a:
66:8e:3a:ec:2a:04:d6:12:fa:8d:da:9b:ba:0c:e8:
55:22:7c:74:cb:d1:ac:5b:72:8b:71:93:06:b7:31:
dd:c1:53:40:cd:51:1b:66:81:ae:a3:53:d2:19:2f:
11:57:33:6e:66:89:0e:ee:4e:f9:38:13:9c:b9:33:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E1:54:BD:D8:5E:05:82:04:19:56:29:B6:B6:F4:58:5C:FB:37:20
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8-FUvdheBYIEGVYptrb0WFz7NyA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:1f:bc:55:65:ef:bf:9f:6a:02:d0:b9:c6:bf:3a:63:9a:c8:
12:e3:40:43:88:3e:f0:06:05:bd:3f:c7:ac:d1:8f:4c:43:4c:
88:bc:83:60:a3:af:23:0c:9d:9c:c0:34:e8:7b:59:0b:ef:7a:
5b:fd:6c:88:88:08:b0:20:67:1b:09:10:51:96:d6:3f:dd:2e:
b3:c4:24:91:1e:2a:f4:ec:a6:f0:97:ba:c1:16:6e:31:53:15:
aa:05:93:e6:2e:4b:13:b9:6f:e0:71:b4:c7:7b:58:ee:79:b2:
95:fc:13:57:c3:52:8d:b9:b8:7d:f5:a6:c6:de:08:f8:ed:46:
98:76:c2:1f:a7:b0:37:2f:d5:60:96:db:09:a5:01:ed:b7:0a:
c9:14:68:60:90:08:3d:f5:72:67:c7:0c:b6:83:ff:40:9d:b4:
71:e6:aa:62:af:d6:33:95:11:84:ed:a5:0f:7e:47:93:ed:62:
d2:fc:d6:62:aa:51:5b:17:6a:66:92:01:60:e1:94:98:2f:8c:
64:7d:14:64:00:0f:22:eb:81:ea:04:ee:52:66:b5:27:cc:5c:
1d:ce:3e:93:a1:5e:7a:b3:1d:8d:75:57:3a:02:0f:d0:83:a4:
c3:7d:72:21:5a:20:a4:c8:5b:0d:e1:db:f4:08:d8:26:7f:bb:
eb:79:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:18 2024 by rpki-client on console-ams.rpki-client.org