Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EOtI5Km5ejerSnWP1-vG4qqTQBs.roa
File: EOtI5Km5ejerSnWP1-vG4qqTQBs.roa (raw, json)
Hash identifier: wm1KYcPHf+eWTE99UnAlHHeYYlyvYGu2vfMtP8tM/WY=
Subject key identifier: 10:EB:48:E4:A9:B9:7A:37:AB:4A:75:8F:D7:EB:C6:E2:AA:93:40:1B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5666
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EOtI5Km5ejerSnWP1-vG4qqTQBs.roa
Signing time: Mon 13 May 2024 18:54:19 +0000
ROA not before: Mon 13 May 2024 18:54:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22118 (0x5666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 18:54:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=10EB48E4A9B97A37AB4A758FD7EBC6E2AA93401B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:18:d2:31:be:aa:88:5c:d3:45:e5:78:09:43:
65:64:e0:02:39:11:a1:2e:c1:97:e3:2f:86:b2:2f:
7c:a9:fe:67:70:0a:07:71:04:f0:38:83:7f:d3:6b:
8d:54:a6:f2:d5:17:bc:ed:eb:ec:23:93:d0:09:41:
0b:1e:5c:43:49:4a:63:16:a8:53:10:bf:5f:97:39:
0f:44:40:36:6b:04:3a:eb:82:d0:b1:4a:ee:33:b3:
c2:b6:e0:cf:4e:e1:3a:7d:79:24:13:64:07:ee:56:
c1:61:d9:5e:42:7a:a9:c0:c3:36:bc:d5:ec:9e:d2:
32:72:c0:20:5a:1d:1c:53:1f:7e:a8:9b:b4:5d:ab:
ee:00:50:9b:15:66:73:39:bd:af:f1:fa:9f:15:06:
c0:17:82:43:7d:0e:47:82:00:1e:c6:f9:09:79:e0:
5f:35:dc:67:16:4d:50:a5:ff:1e:9d:99:a1:42:5c:
56:d0:10:76:dd:33:6e:a9:19:c9:56:31:4d:d4:e2:
39:82:35:32:87:57:d8:b8:7b:4f:66:12:d1:b3:83:
84:d1:f8:10:1c:f2:bd:dc:4c:13:f5:1c:15:47:35:
f3:18:0a:a9:f6:57:1f:79:1d:ac:66:0b:57:1f:8a:
7a:e8:d0:01:c4:f2:04:c2:d5:44:52:1c:eb:e7:a2:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EB:48:E4:A9:B9:7A:37:AB:4A:75:8F:D7:EB:C6:E2:AA:93:40:1B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EOtI5Km5ejerSnWP1-vG4qqTQBs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:53:8b:02:7b:d4:27:13:33:70:a2:0b:ef:31:22:96:e6:b6:
54:4e:e3:76:9f:5c:f6:ee:66:de:6b:72:de:51:99:84:b9:42:
a7:14:9a:29:28:dc:cc:c3:1b:8b:9b:85:82:f2:aa:86:8f:7f:
c4:02:4b:05:68:9f:65:ea:8c:33:7a:cd:c7:79:e9:75:db:be:
c2:7e:42:bd:a8:13:da:9e:58:a0:07:be:80:f9:83:27:cf:3c:
48:4f:c9:f9:a4:a3:c6:b0:e3:b9:9c:c5:bb:0b:9c:e7:a4:cc:
55:a9:d5:4a:4f:ca:13:c6:eb:a2:bf:ca:3a:6f:e1:b6:94:96:
20:b4:ae:d1:b0:63:97:5f:52:99:a1:8a:f5:14:98:1a:5b:4c:
fb:71:e4:3b:be:93:6e:e9:9d:e8:8f:2b:d0:43:d9:51:0a:8e:
90:76:45:4e:f7:31:c4:31:c0:21:c9:fa:31:08:09:2d:6f:b1:
cc:fb:e1:8b:68:52:50:88:90:91:f0:64:24:6b:ab:3e:17:02:
b6:95:a4:03:6f:c5:68:3f:eb:00:ab:eb:32:00:ab:e5:af:fa:
2d:39:41:c6:9e:46:3f:2c:8d:c2:4f:83:25:e5:38:3d:95:be:
07:bc:b3:26:47:4a:bf:ba:3a:d0:f5:c4:0f:d6:18:b8:30:9c:
cb:b2:e2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org