Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CELvga-Co-2ojrBiFrAWBqUsdoQ.roa
File: CELvga-Co-2ojrBiFrAWBqUsdoQ.roa (raw, json)
Hash identifier: vjAQBLMEZcvt5tdL3tCBNRlbmAhecfRnW15pcLpk0kk=
Subject key identifier: 08:42:EF:81:AF:82:A3:ED:A8:8E:B0:62:16:B0:16:06:A5:2C:76:84
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 368E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CELvga-Co-2ojrBiFrAWBqUsdoQ.roa
Signing time: Mon 01 Apr 2024 07:52:13 +0000
ROA not before: Mon 01 Apr 2024 07:52:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13966 (0x368e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 07:52:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0842EF81AF82A3EDA88EB06216B01606A52C7684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:2b:5d:d4:86:7d:27:41:93:39:6e:ed:2d:
ca:27:ee:96:5c:c9:de:3e:b7:b4:0b:ce:dc:88:6d:
7b:74:2c:42:46:b4:7f:bf:d1:fb:06:ff:9f:50:54:
a3:b9:a1:01:3f:9c:35:39:c2:22:8e:db:96:13:ae:
bb:c2:de:3d:24:4a:4d:d4:88:3f:37:76:24:57:d7:
99:9c:0d:92:79:a2:52:a8:93:92:52:69:5e:e4:3f:
1b:87:3b:32:cd:98:29:87:80:72:7b:b2:73:3f:e6:
73:b1:6b:62:4c:25:23:50:1e:f7:da:ce:83:c7:64:
e3:65:b0:2b:61:be:76:b6:8f:e4:ed:00:e6:b3:32:
6e:e1:de:c0:78:e7:49:ad:0c:ed:4c:5c:8b:bb:7d:
19:a3:d7:71:83:fd:96:e3:d6:3f:cb:2b:36:dc:0c:
63:f9:8a:fb:14:4b:b5:2d:57:30:6d:59:d3:26:6a:
8e:31:19:56:4a:84:41:86:69:dc:0e:08:64:1b:b7:
6e:8c:99:0d:5f:42:59:18:c5:d8:8d:14:29:5c:12:
8b:ae:a4:b1:0f:41:d2:2d:ff:32:57:00:4f:ca:35:
2f:72:b5:d4:02:df:1c:41:28:0a:86:3a:03:f1:fc:
8b:b4:91:68:9c:7a:a2:89:c5:40:fa:41:5a:54:ee:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:EF:81:AF:82:A3:ED:A8:8E:B0:62:16:B0:16:06:A5:2C:76:84
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CELvga-Co-2ojrBiFrAWBqUsdoQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:30:c0:46:78:12:e2:8b:31:f4:63:1b:4b:52:c1:d5:e0:a7:
8c:4a:0a:73:26:52:39:d5:08:a8:84:ba:db:3c:3c:ae:7e:e2:
fe:4d:71:d9:30:b0:1d:15:c8:2c:e4:79:16:e0:29:6d:ca:ca:
4a:a3:ae:37:c2:35:18:47:84:21:14:de:d6:43:e9:aa:74:c8:
97:a5:95:fa:17:7f:2d:18:e4:da:27:13:0c:78:34:5b:fa:cb:
74:fa:4c:96:79:32:91:78:1b:f5:9a:c2:da:6e:64:46:3e:f4:
38:4b:d2:eb:47:0a:43:02:3a:54:ba:df:16:51:1c:86:53:41:
1a:19:4c:b0:32:e2:54:11:ae:48:19:02:4c:ab:6e:68:32:1f:
df:50:92:f9:ff:76:56:e8:56:8b:a3:95:97:00:7e:11:ff:f7:
65:cb:ed:b5:8b:65:26:ab:3a:41:58:b2:09:45:53:3b:b8:08:
22:c2:5e:c8:fe:75:33:72:58:d6:5b:18:d8:c1:f5:e0:30:01:
3b:6a:b2:54:5e:fa:4d:c2:e2:4d:cf:b8:c6:92:8e:9e:b2:9c:
fb:f0:dd:e3:70:44:88:72:ce:b5:94:69:19:6f:5d:60:5a:31:
ea:36:a7:b6:26:0f:22:5b:2f:20:57:f1:3b:99:6f:6c:bb:cc:
05:e1:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org