Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9MvENlyhhV1KJixQd3K6eYBsQkc.roa
File: 9MvENlyhhV1KJixQd3K6eYBsQkc.roa (raw, json)
Hash identifier: TwOnQH8HA4njQjQ4N5L323P8GFuWLE5EQb2rWZxYkJw=
Subject key identifier: F4:CB:C4:36:5C:A1:85:5D:4A:26:2C:50:77:72:BA:79:80:6C:42:47
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EB2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9MvENlyhhV1KJixQd3K6eYBsQkc.roa
Signing time: Fri 12 Apr 2024 04:22:51 +0000
ROA not before: Fri 12 Apr 2024 04:22:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16050 (0x3eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 04:22:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F4CBC4365CA1855D4A262C507772BA79806C4247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:b9:ca:9a:19:ca:be:46:c6:d0:35:5a:42:
72:19:21:0a:25:b7:80:13:84:15:7a:f9:69:49:bf:
fc:b3:60:76:0f:97:24:5e:67:23:38:67:d6:90:66:
21:9a:78:fc:1e:ba:6e:b9:45:2a:6f:3b:74:4b:19:
8c:2f:19:f4:84:c8:8f:3d:7d:43:87:6d:16:23:1d:
15:b4:86:cb:0c:9a:72:66:48:44:a2:fb:bd:ab:74:
dd:b3:58:d8:35:9a:9a:de:83:00:33:3a:f7:b8:df:
6a:2a:15:c3:a0:45:77:67:86:4d:75:ee:a6:da:7d:
55:4f:6b:30:38:8c:0f:27:98:86:0e:6b:14:3c:93:
5d:cf:19:af:34:95:d3:7f:af:9d:eb:43:e6:bf:e4:
ff:a4:ca:b8:79:db:36:29:ee:1f:4e:9c:0d:7f:ab:
07:e8:65:0e:e4:ea:01:12:eb:25:80:a2:68:71:d5:
71:24:67:8b:1e:50:5d:36:3e:8f:1a:ba:38:b3:e0:
1c:12:b5:58:6f:27:2d:2d:65:53:91:78:80:ea:9b:
19:2a:27:3a:43:84:45:c5:2b:d6:de:98:c3:88:8b:
3a:44:06:b2:52:8c:4d:c4:30:d7:99:7a:2f:a1:91:
02:3f:41:fd:97:b3:7e:3c:a2:1e:3b:1a:e8:b0:d8:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:C4:36:5C:A1:85:5D:4A:26:2C:50:77:72:BA:79:80:6C:42:47
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9MvENlyhhV1KJixQd3K6eYBsQkc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:fa:3d:07:85:cb:76:5a:19:f8:23:b3:f3:45:c0:9c:3d:7f:
28:9e:43:c1:dd:16:bd:1b:a1:97:00:75:44:36:14:c7:74:bb:
94:49:71:3c:eb:55:00:b3:20:78:ab:aa:f4:80:d4:45:b4:e2:
b8:7f:5d:b0:b0:78:59:6c:2f:f2:59:ac:d5:0f:f3:ee:b4:99:
15:14:b0:07:dd:ab:0a:46:5b:60:11:09:14:42:df:c3:e6:af:
a9:72:9a:68:0b:c7:2b:8a:17:8f:70:73:db:e4:72:c4:4f:3c:
8e:73:08:7b:6f:de:a8:cb:c4:0a:76:06:5b:d5:d1:aa:a8:5c:
b1:72:97:b7:44:e0:17:e2:b4:82:d0:a1:70:9f:8c:f3:0f:cb:
12:b4:44:4c:8b:b4:a5:79:01:75:4f:18:31:41:02:06:76:e7:
98:7a:6f:b0:d7:cc:d1:01:a0:28:d7:2c:53:ef:0d:7b:ac:d0:
5d:90:8a:ea:d5:0d:40:8f:a4:71:d5:e5:d8:aa:02:6e:9c:34:
1d:59:4c:56:0f:ea:5d:3a:38:69:61:86:f8:b6:06:6c:80:9b:
b5:fb:36:c0:7c:9e:30:10:d2:27:31:a1:38:e3:e5:51:e4:87:
84:0e:60:a1:1d:24:9e:d6:63:c0:63:62:a2:72:6d:ab:23:78:
05:a9:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:10 2024 by rpki-client on console-fra.rpki-client.org