Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/E87QeQ7LRPgD5PUq9QKjjzGeCe8.roa
File: E87QeQ7LRPgD5PUq9QKjjzGeCe8.roa (raw, json)
Hash identifier: ZSJrNUd7llvEFReZRf4BTEuBastAn+QInMSx+A15SiE=
Subject key identifier: 13:CE:D0:79:0E:CB:44:F8:03:E4:F5:2A:F5:02:A3:8F:31:9E:09:EF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 488E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E87QeQ7LRPgD5PUq9QKjjzGeCe8.roa
Signing time: Thu 25 Apr 2024 07:53:19 +0000
ROA not before: Thu 25 Apr 2024 07:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18574 (0x488e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 07:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=13CED0790ECB44F803E4F52AF502A38F319E09EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:d5:1f:00:78:98:70:73:45:89:ad:c9:92:
69:5d:c1:d7:7d:3b:05:d6:b8:40:ec:0e:06:bc:c0:
68:2d:7b:48:8e:76:3b:f8:ed:a3:bc:c4:e4:3a:5c:
49:2f:f6:5b:ab:fb:41:40:e5:f3:ef:96:be:a3:bc:
20:23:74:1c:97:57:98:09:a7:f0:cd:69:45:6d:c0:
38:0b:1e:55:a6:2a:1b:bb:7d:d7:b2:99:00:76:0a:
75:ba:d8:05:6d:f7:54:0e:ad:0a:66:17:2a:57:dd:
16:df:4a:11:cf:c1:2f:2a:bb:8c:97:b6:e6:1f:11:
93:6e:8c:1d:d4:62:50:ae:05:e5:78:e1:03:e5:96:
6f:30:80:79:f4:14:e3:72:a3:1a:2f:c4:bb:e4:07:
d1:6f:ae:e9:96:c0:d9:76:40:9b:10:a4:cf:6b:4c:
7c:80:29:d0:98:19:8f:e4:db:cd:dc:81:80:24:6b:
94:f6:a0:d1:ea:f3:49:3a:03:8e:43:87:f0:56:77:
3c:1a:b7:eb:78:2b:8a:84:59:4c:ad:9e:a9:27:e5:
59:de:75:4e:34:4d:81:b3:c0:cd:e0:2e:fc:4c:5e:
93:6a:d0:a5:0e:98:b7:38:76:8f:ae:8f:e5:10:f1:
79:c7:59:f6:b6:4c:6b:86:65:cc:fe:c0:c1:d5:6a:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CE:D0:79:0E:CB:44:F8:03:E4:F5:2A:F5:02:A3:8F:31:9E:09:EF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E87QeQ7LRPgD5PUq9QKjjzGeCe8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:05:d2:b2:51:73:9d:75:15:4d:f2:ea:01:35:b0:18:f1:57:
1a:63:3c:0e:06:36:c8:2f:21:02:29:80:33:ed:f5:82:17:c3:
51:80:29:ba:7f:0c:d5:4e:8e:c0:97:16:ac:7b:8e:49:55:37:
33:2d:c4:9e:d6:01:12:95:5f:68:cd:ef:a5:10:9e:9f:0c:6c:
45:1f:13:f2:bb:8f:6b:8f:51:6a:76:37:6b:10:2e:e4:d7:4a:
41:b6:7e:ca:c1:73:6c:9c:11:8c:a3:7c:87:c8:6b:2e:88:f4:
a1:be:ae:7a:b5:cd:7b:c8:7b:75:84:f6:84:6b:44:75:0a:e0:
1b:ca:28:f3:32:4f:0e:05:54:ab:ce:6b:30:ac:42:37:55:0f:
10:66:c2:36:9b:e6:0c:74:30:db:07:30:b2:7e:82:91:f8:6d:
4c:35:e7:89:3e:6d:c0:78:65:00:f6:82:5f:ca:49:24:2f:5b:
95:91:28:1c:77:63:08:5b:aa:0d:78:0b:98:8f:2b:e4:3e:d9:
a5:0a:64:e6:ca:bd:f2:1b:8c:4a:f3:79:b3:37:5b:91:59:83:
40:10:5d:ec:3c:13:fe:fb:a0:dd:7c:06:1f:65:02:22:26:07:
17:db:64:bb:10:b4:7c:6c:49:6f:e1:ab:ce:e6:d7:49:97:b4:
92:13:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org