Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CPx_Vs2Wuz7Rk7z61FAmOrqJ2QM.roa
File: CPx_Vs2Wuz7Rk7z61FAmOrqJ2QM.roa (raw, json)
Hash identifier: yoI0YyWHs9cNqN0dkQ/LkojFvFv2fKAQWw+egAmHtAg=
Subject key identifier: 08:FC:7F:56:CD:96:BB:3E:D1:93:BC:FA:D4:50:26:3A:BA:89:D9:03
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4266
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CPx_Vs2Wuz7Rk7z61FAmOrqJ2QM.roa
Signing time: Wed 17 Apr 2024 02:52:57 +0000
ROA not before: Wed 17 Apr 2024 02:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16998 (0x4266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 02:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=08FC7F56CD96BB3ED193BCFAD450263ABA89D903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:27:94:af:f4:30:b4:6a:8d:3d:b2:22:ca:
83:70:b5:d1:f6:f9:67:2e:e0:bb:c3:17:c2:c7:ca:
e0:2d:47:ed:04:6a:10:c3:ee:73:d7:31:42:48:77:
e3:cf:c4:e0:54:9d:e6:43:e7:62:5e:b9:78:2a:48:
ec:78:66:40:fc:37:00:39:a1:d8:66:2a:68:42:c4:
f0:f7:3b:b9:6d:ec:3e:69:7d:7d:cb:c8:4a:30:26:
a2:f4:8e:8c:ce:74:ea:b2:5e:4f:e8:7b:21:f8:f4:
dd:98:ca:0a:9a:da:f9:0f:53:8a:82:0a:40:3f:f3:
b1:75:1a:bb:f8:d6:b8:b1:c0:f4:ff:bf:09:ae:6a:
b1:03:d8:7a:5b:af:d5:d9:77:d5:56:40:e0:92:78:
ab:4f:ad:97:7f:f5:e1:67:3f:38:41:8c:4b:bd:2d:
2b:65:1f:d6:86:35:99:f4:0c:10:f1:dc:bb:26:bd:
d0:76:73:03:32:f8:99:68:68:b4:53:59:07:00:76:
f9:bd:76:00:9b:19:ca:bf:a3:45:78:e4:cd:10:d6:
f8:e8:ca:95:5d:8e:5f:51:16:2d:1f:4c:9b:fb:b6:
08:89:fc:29:b1:7c:a7:8f:62:79:c7:c0:f3:3f:3b:
34:3a:2f:8f:c7:46:e1:2c:bc:12:17:5e:63:68:26:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FC:7F:56:CD:96:BB:3E:D1:93:BC:FA:D4:50:26:3A:BA:89:D9:03
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CPx_Vs2Wuz7Rk7z61FAmOrqJ2QM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:6f:ef:da:55:15:a1:c9:6d:91:53:ce:ad:8a:36:51:84:93:
66:df:66:7b:8c:96:be:06:9b:16:cf:e3:b8:48:0a:a1:89:a0:
2d:cd:4a:c7:2a:00:c0:d9:7b:5d:c9:da:99:56:28:04:5b:d3:
3e:ba:19:b4:2c:07:58:ec:e8:80:32:5f:77:d6:66:b0:0e:4a:
02:00:27:be:3f:50:8a:f7:15:a3:0c:e5:21:ab:a1:37:59:a4:
93:e4:cf:01:bd:c3:e6:ea:21:b7:f0:11:07:8d:85:db:2e:83:
4b:9b:ac:1b:39:62:db:64:0c:98:9c:96:cd:9d:19:1f:c3:7f:
80:c1:9e:35:09:d1:aa:39:45:de:da:36:e4:3c:93:1b:b9:99:
b2:93:d2:88:2d:4d:2b:e1:9d:5f:b4:84:cc:5e:bd:e8:bd:b3:
e0:a7:40:7b:66:28:19:f7:74:e1:97:34:02:86:22:72:8b:f6:
5d:c0:d3:97:1c:55:7e:6c:e2:c1:47:ca:e1:0d:91:61:60:7f:
33:95:3a:9c:82:b2:d7:11:60:27:7d:50:1b:d0:20:a1:f3:a9:
4b:3d:96:26:b0:72:0c:d4:d8:d2:9c:84:0f:57:00:39:c7:b7:
fa:58:8f:95:11:49:43:51:6f:52:01:2e:0c:e2:48:df:4f:10:
d7:58:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org