Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/G6WySBP4ZZAALsDid6TPdXmwdkM.roa
File: G6WySBP4ZZAALsDid6TPdXmwdkM.roa (raw, json)
Hash identifier: /WeSxXioCcoy4IDK6WUafOHSOjkgIZy34+PuyWCbSmg=
Subject key identifier: 1B:A5:B2:48:13:F8:65:90:00:2E:C0:E2:77:A4:CF:75:79:B0:76:43
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EB6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G6WySBP4ZZAALsDid6TPdXmwdkM.roa
Signing time: Fri 12 Apr 2024 04:52:47 +0000
ROA not before: Fri 12 Apr 2024 04:52:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16054 (0x3eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 04:52:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1BA5B24813F86590002EC0E277A4CF7579B07643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:bd:02:dc:94:8e:10:39:e3:fc:92:c9:6f:
e5:fd:6f:bd:5a:e5:a9:73:07:97:02:28:d8:48:a3:
3d:63:f3:f8:62:72:f4:34:3c:e7:90:b6:b7:27:38:
df:1c:c5:c7:cf:57:67:82:7d:f0:d3:24:fd:05:0d:
0c:c5:1c:bf:00:6f:5d:72:4f:b8:63:e9:ed:13:7c:
a6:6a:59:79:c5:9a:87:25:41:d1:79:7a:6a:a4:90:
f0:44:ca:01:cb:fd:33:5c:00:42:d1:e0:2e:66:ca:
63:5f:9d:8f:15:3f:19:a5:b5:75:80:3f:e2:dc:03:
4d:5e:d2:0c:47:4a:44:9b:ff:34:17:03:45:0a:4d:
af:d3:4d:88:8f:e5:81:ee:1e:5d:ce:bc:5d:c9:cd:
60:66:09:3d:f8:db:24:ac:1e:37:4b:42:e1:17:26:
87:66:e1:c5:a6:a4:d9:3d:22:44:68:eb:8d:47:75:
31:48:9b:f7:b9:eb:b7:e7:8c:18:b5:77:e8:c7:ad:
d4:6c:fa:b5:8c:3e:72:d0:e2:d8:0d:38:30:95:01:
f3:e2:fd:e4:b5:94:3d:9f:05:b3:e2:b0:cd:bd:fd:
56:3d:63:08:70:31:4b:d6:00:31:7b:59:be:cb:f9:
96:de:e4:85:ed:d9:cf:23:97:2e:4a:83:1c:41:16:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:B2:48:13:F8:65:90:00:2E:C0:E2:77:A4:CF:75:79:B0:76:43
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G6WySBP4ZZAALsDid6TPdXmwdkM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:32:24:45:11:60:a5:cf:d6:09:b3:8f:e0:c1:82:d8:0f:7e:
b4:96:7c:db:01:1d:68:00:f1:fc:14:3a:04:a4:51:c0:77:cc:
d5:9d:c5:d5:d9:47:c2:ea:8a:12:d4:ba:26:52:6e:b8:7e:24:
5f:e3:ac:39:25:c9:18:c3:dd:f7:47:79:ac:5b:c7:f7:75:ec:
55:77:53:d5:87:9a:b9:a5:8e:ad:b9:8c:9c:ed:dc:74:8e:37:
8f:92:3f:b3:74:07:b7:c0:c7:ea:c6:52:ce:96:1d:2b:08:5e:
43:8e:38:57:7c:3b:c8:1d:1f:5f:ff:be:f9:bf:c4:4e:41:9e:
b0:c9:e1:de:f9:d6:b4:65:d4:e6:fe:58:ee:82:02:67:7e:46:
d3:a0:86:8e:60:13:61:04:6c:3f:3b:d5:a8:bd:3b:78:92:f6:
a9:a6:46:20:9d:21:78:82:db:03:38:10:41:e5:85:26:84:b4:
33:cc:23:3b:aa:97:32:e2:11:3c:64:15:0b:91:6f:1e:8a:ed:
c7:c3:8c:43:71:75:60:33:f6:5c:0d:c1:cb:0c:bf:aa:24:e3:
30:4a:4b:5f:b9:c9:a5:04:de:4b:83:a0:87:b4:04:a5:b6:42:
41:d7:2b:92:a7:b5:dd:8e:03:55:18:8f:8b:e4:76:f4:0d:21:
4d:3d:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:27 2024 by rpki-client on console-ams.rpki-client.org