Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FaadaEzDohsCCPrNyz1zxrAHsuU.roa
File: FaadaEzDohsCCPrNyz1zxrAHsuU.roa (raw, json)
Hash identifier: trJo/hHDaV+LM8oDCz/oyV7vc0rpvJJ2NUDJ7qlvACA=
Subject key identifier: 15:A6:9D:68:4C:C3:A2:1B:02:08:FA:CD:CB:3D:73:C6:B0:07:B2:E5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 388A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FaadaEzDohsCCPrNyz1zxrAHsuU.roa
Signing time: Wed 03 Apr 2024 23:22:20 +0000
ROA not before: Wed 03 Apr 2024 23:22:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14474 (0x388a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 23:22:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=15A69D684CC3A21B0208FACDCB3D73C6B007B2E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:70:0d:73:f5:ed:d2:a0:c3:b2:ce:56:29:
a6:d5:77:4f:cc:59:e9:f2:90:4e:e8:ef:66:1c:d3:
18:92:d0:61:7f:2c:1b:25:e2:3e:51:1a:b4:a8:40:
dd:f3:82:75:b9:cf:a9:cc:a8:f8:a4:da:61:bd:77:
54:72:eb:46:43:09:19:88:5f:e8:ac:2f:93:d1:87:
6d:4b:4b:aa:1b:ba:9e:86:8e:62:b3:2c:3e:ef:63:
3a:40:f2:2f:a0:04:eb:a5:32:e7:9f:b3:71:34:96:
40:18:ab:e0:39:55:fe:fe:65:49:95:5c:b8:01:98:
61:c4:df:db:47:8b:97:77:4d:5b:9f:19:aa:91:38:
59:bc:75:3f:ed:1b:2d:25:69:f2:f1:e6:81:a8:9c:
2f:5a:ec:01:09:fd:9f:e5:cb:e8:c4:5d:4f:be:7f:
9f:50:97:00:a5:a4:df:f9:7e:cb:6e:83:d2:9f:0d:
5d:98:2c:a5:b5:b2:2f:ef:63:40:5c:b5:3e:a9:c6:
a6:d2:b3:fd:9f:68:f8:dd:4b:38:88:ee:13:42:39:
bd:d4:b9:68:38:0d:d5:ad:91:fd:3b:54:41:71:fe:
d1:91:b5:54:65:ba:d9:4d:cb:20:29:6b:65:6a:1a:
95:c7:4f:51:97:3f:89:3d:22:2c:b2:7c:e9:5d:f1:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A6:9D:68:4C:C3:A2:1B:02:08:FA:CD:CB:3D:73:C6:B0:07:B2:E5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FaadaEzDohsCCPrNyz1zxrAHsuU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:16:d3:2b:ed:45:40:06:af:9c:fe:d5:06:0d:07:16:08:5a:
06:2e:ab:7a:29:d3:25:c2:6d:0b:50:9a:8c:ce:35:0f:93:0e:
87:51:ee:52:2d:1f:47:9d:de:a2:2f:95:a1:f4:c8:0b:fc:08:
67:f1:fd:69:8b:5f:0e:60:2f:c6:7b:3d:75:80:7d:da:e0:84:
fb:bc:f0:de:0d:17:74:c3:58:9b:f9:5f:c4:2d:80:6b:cf:5e:
c9:3a:bc:5a:f3:de:08:f0:fa:c3:56:3d:ad:6f:bd:ad:a3:80:
c9:24:a0:cb:05:8a:ad:33:b4:05:21:95:05:7d:1f:b4:66:5d:
37:55:e2:e8:fd:84:14:28:95:57:d9:2d:35:00:4f:d4:c9:ce:
b6:7c:33:04:44:92:96:44:6e:fe:ff:37:d4:67:60:57:bf:59:
c3:10:6d:99:62:bc:39:b9:5d:ac:1f:60:8f:89:8e:4c:90:77:
2d:08:71:e2:21:cb:9d:c3:58:fa:06:3f:68:2f:ac:f6:6b:d6:
35:13:44:08:aa:07:22:b5:5a:df:b0:57:7b:30:4c:b1:df:6b:
a5:36:9a:03:db:de:99:95:89:d3:e5:b5:51:dc:dd:5e:8f:f6:
a7:e0:c8:4a:39:3c:26:6a:f9:e0:30:73:69:89:af:e0:0a:25:
dd:20:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:26 2024 by rpki-client on console-ams.rpki-client.org