Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/H5gSwt2jrp941T_2QY9fkJ3yHoA.roa
File: H5gSwt2jrp941T_2QY9fkJ3yHoA.roa (raw, json)
Hash identifier: EsLqAxYO0i2CSq7fS7/Arq5y26wXJnCniYOmAzFhEFM=
Subject key identifier: 1F:98:12:C2:DD:A3:AE:9F:78:D5:3F:F6:41:8F:5F:90:9D:F2:1E:80
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5562
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H5gSwt2jrp941T_2QY9fkJ3yHoA.roa
Signing time: Sun 12 May 2024 10:24:03 +0000
ROA not before: Sun 12 May 2024 10:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21858 (0x5562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 10:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F9812C2DDA3AE9F78D53FF6418F5F909DF21E80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:65:5e:fb:02:a5:49:d6:a3:bb:3c:12:cb:83:
b6:9d:2e:c8:4a:f9:91:4a:9b:d9:15:bc:20:b2:ba:
a6:a9:4b:8f:aa:5c:58:02:20:ce:08:ce:2b:76:38:
79:d4:e8:d7:b5:74:40:b2:e5:ab:13:ee:66:fb:7d:
9b:16:32:82:9d:d8:df:80:62:fa:37:a8:9f:60:0a:
f9:0a:05:ef:4c:68:34:9c:11:cb:01:28:98:ac:86:
7c:d8:b6:ca:d5:c4:37:a2:79:8b:2e:b5:ad:95:b9:
b2:81:ab:37:b2:e8:b9:17:46:46:f1:8e:8d:c1:b1:
e7:b0:de:8f:e2:6a:53:90:85:d1:a5:6b:77:61:83:
a6:6a:5d:f6:32:e2:6e:8d:91:cb:c3:eb:81:3b:a2:
1c:20:0a:f4:60:5e:be:c0:e0:80:b3:34:44:06:08:
91:8c:cb:27:bc:5d:b3:3f:4c:8c:e6:2c:08:5a:02:
c4:d7:ee:44:e9:1e:1b:89:74:99:f9:7b:2a:97:54:
05:62:db:b1:0e:ef:83:b2:0f:cb:0b:6c:5a:7a:5b:
b9:45:49:40:d5:af:e0:7d:f1:ba:4f:21:78:fe:06:
8c:56:29:30:71:07:3c:4f:73:cb:e6:4f:02:5d:aa:
a8:06:a5:66:e2:3e:77:f7:23:23:41:0d:06:1f:dd:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:98:12:C2:DD:A3:AE:9F:78:D5:3F:F6:41:8F:5F:90:9D:F2:1E:80
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H5gSwt2jrp941T_2QY9fkJ3yHoA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:1c:10:37:7e:15:d9:58:af:e1:77:bb:76:23:a7:47:29:08:
4e:d7:3d:aa:4e:71:d9:6f:c6:8d:8a:6d:0b:81:98:04:b4:4f:
ec:6c:61:18:b1:f9:26:49:a4:8f:f4:31:5d:cb:c4:8e:b0:00:
c0:14:2a:4e:d0:9a:b3:65:c1:4f:85:2d:9e:c5:c4:71:d9:31:
99:eb:e1:4b:35:78:d5:e8:c3:09:02:cd:3b:3b:2b:c0:3a:04:
42:4a:b9:31:ef:09:79:14:b8:b4:b5:cc:2f:b8:84:02:53:55:
5b:56:d1:bb:ab:77:2f:bd:3f:9d:c8:65:3e:80:b4:92:9b:58:
df:96:41:66:17:31:09:8c:6a:1c:3d:fc:61:43:b5:8e:f0:09:
13:0f:75:34:fa:2b:2d:2c:07:d1:17:20:c4:7b:66:5d:c5:f2:
e5:ed:79:1f:ef:01:02:ab:3b:91:e2:7c:e5:8c:6f:57:36:9e:
d0:d7:dc:63:d0:4a:58:8d:90:b8:b6:a5:77:ce:44:1e:ec:92:
85:6d:62:6d:11:31:23:81:b9:f7:f1:66:16:fe:75:e5:84:78:
34:91:d7:2d:aa:74:50:90:7f:ec:28:3b:99:3b:60:d7:77:16:
05:da:f9:a1:e6:8c:de:e0:35:37:53:43:27:a7:86:d0:3c:d2:
f9:e9:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:16 2024 by rpki-client on console-fra.rpki-client.org