Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/H9JfUfhbg_J5Esfo8t8IgUwA61U.roa
File: H9JfUfhbg_J5Esfo8t8IgUwA61U.roa (raw, json)
Hash identifier: JXbuyLGMFo84DuiPWr9+qbVL+0tfBRqT9N8XcyzANSY=
Subject key identifier: 1F:D2:5F:51:F8:5B:83:F2:79:12:C7:E8:F2:DF:08:81:4C:00:EB:55
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4DB6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H9JfUfhbg_J5Esfo8t8IgUwA61U.roa
Signing time: Thu 02 May 2024 04:53:58 +0000
ROA not before: Thu 02 May 2024 04:53:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19894 (0x4db6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 04:53:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1FD25F51F85B83F27912C7E8F2DF08814C00EB55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:03:ee:25:08:dd:22:33:f0:c2:1b:c9:9d:
02:d7:0a:f4:3d:cb:3c:d6:b4:ca:0c:2b:88:07:c7:
8c:cc:5f:d4:07:9d:4f:19:be:66:76:d3:43:4b:83:
98:8e:c6:d9:1a:1b:ef:7d:32:15:5b:a3:48:b6:25:
f1:3d:9e:39:af:c7:d0:d1:a6:5c:ee:25:98:5d:b6:
e0:dc:08:d0:96:a5:da:c4:41:e7:99:53:6f:8f:f9:
b0:2e:ce:d6:8a:36:25:f7:82:61:4c:13:81:b2:0e:
9f:f0:86:70:24:a0:e1:db:2a:75:e7:e8:82:1d:1f:
9e:e1:2c:0f:0d:70:8b:f4:d4:0b:cc:f8:ba:e7:20:
b5:72:bb:54:1b:c4:69:93:64:18:ed:ad:1e:eb:e0:
d5:3e:7d:51:70:f7:c6:0c:5b:b3:54:2f:9c:c9:46:
46:4b:b6:39:bd:ba:7d:8e:51:c7:9c:c5:4e:80:d1:
4f:55:f2:61:65:60:ca:ee:b3:31:d6:41:19:8a:cd:
98:45:e6:1b:0c:db:74:e6:d5:62:76:7c:41:cc:91:
db:37:0b:2d:1f:3d:e4:7e:16:08:49:ac:b3:f7:ac:
9b:05:64:34:ad:9e:b2:b2:88:6e:d9:ef:8b:b1:53:
ba:eb:e2:45:72:9a:1d:82:fa:2c:73:9a:31:5d:dc:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:5F:51:F8:5B:83:F2:79:12:C7:E8:F2:DF:08:81:4C:00:EB:55
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H9JfUfhbg_J5Esfo8t8IgUwA61U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:d0:ad:54:98:48:2c:3f:0e:0b:72:14:4e:3d:a8:79:ad:dc:
d5:09:c0:7f:48:04:e9:a0:60:d0:98:aa:c5:7e:1f:05:ce:c3:
6b:5b:90:5d:ef:98:23:5f:c5:f6:6e:19:c6:a2:33:a9:2d:8e:
0e:8b:8f:a0:77:57:8c:1a:9a:bb:ab:92:db:5c:26:4a:4a:ca:
03:68:5c:96:9d:dd:f4:f2:40:93:bc:e8:c5:1c:0b:f0:ec:5c:
30:01:72:08:e9:65:b8:0a:6f:9f:93:0e:a7:cf:62:79:0f:57:
d8:4e:44:f3:73:f5:83:13:3a:f6:20:91:08:25:2a:9b:05:b5:
82:ab:1e:ab:fc:2c:0d:87:3f:3b:f1:9e:a3:71:ba:65:90:fe:
83:42:f5:68:f9:6a:22:85:9c:37:89:27:db:5e:fd:a0:fa:fa:
9b:e5:94:c5:45:5f:71:02:e3:90:a6:b5:75:73:6a:ed:c2:19:
c6:4b:5b:43:cb:c4:93:06:2a:30:a9:f6:34:91:76:a3:95:8e:
34:cf:19:6f:d8:cc:4d:c2:21:d1:34:1e:c2:9e:60:75:77:ec:
c6:50:70:be:a7:74:80:bb:84:7d:57:95:18:26:52:4b:23:c7:
f0:73:c6:5f:be:ed:38:0e:f9:02:5d:fe:dd:23:6f:66:df:29:
76:1c:04:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:17 2024 by rpki-client on console-fra.rpki-client.org