Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AnOG-CIzeFe_VyWLlQxlzCXorsc.roa
File: AnOG-CIzeFe_VyWLlQxlzCXorsc.roa (raw, json)
Hash identifier: RJNoJZXVcF+THbsrccORbr83cjFesVdMGrfdAJu2UN4=
Subject key identifier: 02:73:86:F8:22:33:78:57:BF:57:25:8B:95:0C:65:CC:25:E8:AE:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56AE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AnOG-CIzeFe_VyWLlQxlzCXorsc.roa
Signing time: Tue 14 May 2024 03:54:08 +0000
ROA not before: Tue 14 May 2024 03:54:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22190 (0x56ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 03:54:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=027386F822337857BF57258B950C65CC25E8AEC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:b8:66:ce:10:87:13:62:a0:b3:57:19:36:
b1:55:c0:3b:10:1a:e0:28:26:56:d9:2c:5d:67:00:
c6:a4:67:c4:88:1c:8c:dd:54:ef:38:c5:42:2f:29:
c9:4b:31:ba:1e:41:54:c5:82:c8:50:54:11:e5:53:
c7:ef:8d:87:42:26:47:44:a2:a9:f7:36:5f:93:5f:
ca:8c:d4:6a:e1:f7:8e:c9:68:8f:4b:81:41:97:a0:
cb:02:f5:9b:3f:12:30:4c:b9:80:b0:8b:d8:25:41:
3d:b6:09:ce:2a:d1:0e:64:f5:53:20:a1:8d:25:e2:
c1:c3:4b:97:15:79:27:35:0b:47:1e:a0:08:ee:08:
aa:c3:08:36:bb:1a:c3:a7:69:b3:ca:bf:c2:45:d6:
2d:d5:c7:97:bc:b5:d5:e6:50:2b:49:99:c5:ef:58:
46:c8:2b:43:27:8d:87:f0:12:04:19:27:f7:7b:be:
f7:5a:85:62:eb:c7:c4:b4:5f:a0:d0:4f:97:3a:65:
9f:23:05:74:35:1a:9d:07:a5:12:74:8c:9c:25:b7:
0a:22:7b:ba:87:df:eb:be:ea:05:40:77:8f:95:e4:
8b:e0:ec:85:07:bf:27:5a:52:f7:a6:df:86:c8:78:
01:63:58:7f:72:e1:c4:15:75:4a:ba:2d:c7:52:02:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:86:F8:22:33:78:57:BF:57:25:8B:95:0C:65:CC:25:E8:AE:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AnOG-CIzeFe_VyWLlQxlzCXorsc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:7b:0a:fe:9f:a3:75:a6:83:08:7d:55:cf:ed:ef:a8:7b:ed:
f3:a8:02:1b:31:1a:06:3d:fc:8e:16:2d:fd:8c:57:23:bc:71:
5d:c9:ec:55:0e:df:64:2c:ed:de:3b:3d:a4:75:87:da:bf:d6:
b6:a1:14:f7:03:a4:36:0b:7c:e2:ba:13:d7:c7:2c:3b:3b:83:
a2:08:8e:a3:d8:0b:be:07:5e:ca:28:dc:ab:e3:1b:20:e3:eb:
d2:dd:00:be:6d:5a:22:44:69:c0:96:0c:b9:e0:76:9a:7e:49:
33:bb:0b:a8:5f:04:d6:ed:9f:21:20:47:b9:d7:c4:f9:42:4d:
9a:bb:2e:10:fc:57:0f:20:b5:13:fb:5d:0c:1c:4c:39:73:39:
18:1e:dd:a2:72:99:4f:41:f6:83:90:4f:73:27:53:36:e4:9b:
3d:57:bb:35:5f:1a:e4:f8:ee:bb:0b:e0:57:ba:d2:c2:e2:29:
3c:56:6f:c4:36:6d:3b:c0:19:0b:b1:a5:89:ef:79:54:c7:94:
76:db:4b:b8:e1:aa:c1:1e:73:8c:77:13:0d:e1:a8:b4:a3:22:
ff:47:65:a5:3f:e0:a1:46:a1:44:49:5c:18:3a:78:85:15:d8:
b7:7f:ac:7b:e7:03:6a:43:5e:38:94:f0:52:eb:80:3e:a9:37:
43:32:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:11 2024 by rpki-client on console-fra.rpki-client.org