Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/J7JIHVqi8sdzRrW4j4pWKNrT_Hk.roa
File: J7JIHVqi8sdzRrW4j4pWKNrT_Hk.roa (raw, json)
Hash identifier: q/3soDkg/j7osvj/ybCaa6eTRNv6uRFtOkME8e4iEeA=
Subject key identifier: 27:B2:48:1D:5A:A2:F2:C7:73:46:B5:B8:8F:8A:56:28:DA:D3:FC:79
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B72
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J7JIHVqi8sdzRrW4j4pWKNrT_Hk.roa
Signing time: Mon 29 Apr 2024 04:23:28 +0000
ROA not before: Mon 29 Apr 2024 04:23:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19314 (0x4b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 04:23:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=27B2481D5AA2F2C77346B5B88F8A5628DAD3FC79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:ef:06:ea:e1:e5:48:8a:10:e8:3a:78:c6:
c4:8d:1d:f3:52:99:3c:2f:8a:fb:4c:7f:f0:73:31:
5c:d2:06:58:f2:58:b6:e3:88:1f:ca:23:d5:56:3a:
a3:76:4c:62:1f:d2:b1:8f:5d:ba:5a:16:d8:fa:dc:
7a:15:e2:02:88:cf:15:d1:e5:50:cb:96:57:99:21:
93:f0:dd:69:eb:93:d8:0e:64:2a:a2:cb:e7:9d:0e:
83:fa:de:91:f3:94:ee:6a:49:88:ff:26:fa:a4:ff:
02:40:5d:67:f9:e2:3a:b8:9b:8a:31:ec:d3:33:1b:
f3:3a:52:b2:a4:d4:64:22:b2:be:ad:d7:5f:c3:b8:
38:1c:7e:3c:86:5a:35:b6:ee:90:d1:9b:ee:0a:9a:
b9:2e:d2:5c:e4:6f:8f:0d:b7:c9:a9:0e:ab:da:c0:
7f:94:aa:0d:b7:57:26:58:a0:01:63:1c:b9:9b:0b:
2b:52:92:c6:a2:56:0f:f5:32:83:16:c7:69:4d:16:
e2:ed:cf:66:38:73:4a:e9:8e:44:62:b7:e8:04:98:
6a:d3:9b:b1:f8:19:e7:23:eb:7a:60:ff:39:2c:7a:
77:6b:91:f4:c9:a5:e3:a9:66:17:23:74:8c:40:d9:
4b:cd:58:ad:c9:f5:35:60:8b:24:52:93:60:3f:49:
34:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B2:48:1D:5A:A2:F2:C7:73:46:B5:B8:8F:8A:56:28:DA:D3:FC:79
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J7JIHVqi8sdzRrW4j4pWKNrT_Hk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:d9:fd:20:8d:1a:ff:34:c7:4a:e8:43:9f:d3:6d:1d:5a:1d:
da:07:83:94:32:44:c4:e8:d2:f6:ff:85:28:27:78:d4:ba:c0:
89:86:72:ca:33:79:db:11:95:ac:f5:32:1b:bd:a8:c4:b8:37:
2a:93:a5:eb:dc:78:a4:90:c4:72:74:38:cb:2f:df:fb:c3:66:
ee:bb:93:65:19:93:28:6a:da:67:fd:94:c9:52:c5:14:5b:66:
d0:e9:cf:a7:28:7f:b2:75:04:c4:92:b2:ca:e3:d5:c3:7d:5d:
d4:7a:87:e0:b9:3a:6a:db:4a:22:4c:22:7c:b1:19:27:c6:a2:
b6:a7:a2:dc:95:5b:7c:8e:94:16:aa:74:0a:1b:ed:9f:68:f5:
45:63:4a:a4:04:52:e6:44:5f:b1:86:8d:be:71:d1:a4:96:85:
3b:95:ca:9b:f6:af:d0:db:11:64:e5:07:e1:81:45:df:b5:5d:
d4:23:01:d2:0f:52:e6:84:10:fd:75:ef:53:34:d8:92:6b:4f:
97:4a:46:b3:44:61:a4:a9:30:f5:be:cb:ea:54:1c:49:a2:81:
d2:bd:51:76:2a:04:cd:b5:14:49:01:01:d5:1e:5d:10:fa:e2:
ca:89:3e:8a:8f:91:58:55:e0:b2:55:9c:7e:43:68:08:b8:72:
f3:95:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:18 2024 by rpki-client on console-fra.rpki-client.org