Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/E6qN2-pRc6jV56jcGLv7d724Pqc.roa
File: E6qN2-pRc6jV56jcGLv7d724Pqc.roa (raw, json)
Hash identifier: L9OOyJ7p83EjHV20/tCZLaTzYFGcJEIozw40M6p8pKo=
Subject key identifier: 13:AA:8D:DB:EA:51:73:A8:D5:E7:A8:DC:18:BB:FB:77:BD:B8:3E:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AEA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E6qN2-pRc6jV56jcGLv7d724Pqc.roa
Signing time: Sun 07 Apr 2024 03:22:30 +0000
ROA not before: Sun 07 Apr 2024 03:22:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15082 (0x3aea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 03:22:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=13AA8DDBEA5173A8D5E7A8DC18BBFB77BDB83EA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:59:47:19:99:6c:81:00:c2:f0:c8:38:e3:
65:ae:37:df:7d:1b:25:48:de:1d:fb:4e:f1:2f:ae:
41:37:14:91:9f:a4:fe:b7:57:b3:5a:64:df:c4:1a:
ba:fc:5c:1a:80:64:b0:54:f6:a9:50:9a:34:71:5b:
5c:25:ee:50:60:6e:16:03:b4:33:b8:9b:3e:8f:04:
bb:12:48:2d:a7:3c:37:f2:24:e2:cf:34:69:2c:99:
9a:df:ae:3e:ac:5f:a9:ea:8e:68:b5:a4:7d:6c:5d:
6a:03:57:6a:76:2a:d4:0d:19:59:24:35:09:07:43:
8e:81:95:4f:16:64:df:54:0a:95:55:63:1a:e4:56:
a5:b9:70:04:9e:84:b2:40:6a:1d:6d:16:6d:44:5a:
2c:81:57:10:57:2d:1b:8a:a6:4e:e4:ba:46:c0:77:
4c:ce:cc:6f:3b:19:a0:5c:f3:a1:2b:8c:af:fd:6f:
93:78:cc:02:9f:19:2b:bd:6a:b9:a4:64:7f:86:cb:
52:a8:83:84:87:5e:32:51:72:e1:1c:54:0a:83:90:
11:ce:e9:95:13:f6:ed:68:a6:6f:62:bf:61:2b:de:
bc:33:52:28:42:23:3a:ff:29:10:6f:4c:71:30:f3:
0c:af:67:b1:c2:fb:1f:7b:59:49:5d:a9:a6:77:96:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AA:8D:DB:EA:51:73:A8:D5:E7:A8:DC:18:BB:FB:77:BD:B8:3E:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E6qN2-pRc6jV56jcGLv7d724Pqc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:83:3c:22:11:ca:da:2b:1e:7f:e7:69:e0:d5:db:a2:3d:c7:
3e:77:90:0a:b8:f8:76:4f:68:3d:7e:02:a4:43:a8:f5:29:cb:
20:9b:4a:d0:9a:82:a7:a5:bd:fa:30:e4:9d:0f:50:3e:91:7c:
fb:79:b7:f1:d3:cd:47:1d:5f:c0:d7:b5:24:34:87:8e:0c:8a:
da:c6:ca:d5:40:18:9f:76:1b:d8:f9:b6:2b:73:bf:25:65:9a:
8a:99:06:b0:a0:40:ba:84:03:4a:0a:61:ff:11:b9:b0:dc:17:
76:8b:6e:6b:71:12:79:b4:d4:c1:08:ca:1e:d2:52:8b:bb:a2:
75:c4:4f:cc:9a:02:da:39:c0:5d:5f:c1:0a:d6:4b:e9:2a:69:
78:4d:fa:36:c8:12:80:e3:24:f6:09:93:49:d8:84:b8:47:b8:
c5:c4:c4:1d:04:d6:d7:c7:25:5b:0a:59:c1:8f:81:69:22:3f:
22:86:f0:fc:f7:58:2a:c0:01:55:84:da:94:be:dc:cc:b4:b7:
f7:61:e0:7b:99:34:0c:82:8a:cb:bd:d9:8b:08:13:80:eb:e7:
83:f8:90:2e:e7:72:eb:92:bc:31:d2:1d:2e:3b:ae:af:ba:07:
1c:f1:b1:3f:b5:34:7f:3f:be:bd:53:30:40:63:45:fe:c2:d9:
d7:13:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org