Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JUBX-jCwKhQwmq3aDg2RFIhn02s.roa
File: JUBX-jCwKhQwmq3aDg2RFIhn02s.roa (raw, json)
Hash identifier: FjGcaS5c92Pn21yrmHOcwcl4HStjejzzI4L5dMtCyGc=
Subject key identifier: 25:40:57:FA:30:B0:2A:14:30:9A:AD:DA:0E:0D:91:14:88:67:D3:6B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CCE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JUBX-jCwKhQwmq3aDg2RFIhn02s.roa
Signing time: Tue 30 Apr 2024 23:53:35 +0000
ROA not before: Tue 30 Apr 2024 23:53:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19662 (0x4cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 23:53:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=254057FA30B02A14309AADDA0E0D91148867D36B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:35:ff:26:66:95:51:65:35:92:1e:61:e1:
b0:c8:78:52:a0:6b:13:1a:21:92:5f:c2:a2:98:61:
b0:ee:48:a2:9f:e7:e8:5b:98:03:03:27:80:4a:e9:
cc:11:ee:ca:e6:75:98:3b:1e:6f:3b:08:d5:80:23:
af:99:a8:26:6f:f1:68:de:a0:ee:9e:49:76:a9:a9:
77:62:4d:ce:da:7c:80:fc:75:7f:1d:9c:bf:a8:f1:
8e:50:e5:7f:da:f0:60:7c:25:f9:20:a3:9c:b0:d7:
62:78:be:e0:2d:4e:ae:25:35:10:cc:55:bb:63:24:
50:d8:e0:0e:82:7c:ec:20:0d:eb:e1:33:5e:8d:63:
60:fc:0b:93:9b:5d:e8:a0:0e:12:fd:ad:ef:70:eb:
d0:ed:74:e0:1b:11:1b:78:97:90:f7:3e:08:4e:0a:
87:3f:f8:50:9d:1b:54:74:26:48:6d:8c:20:4c:a8:
b8:cf:99:2d:92:08:ba:e3:3f:4f:eb:37:5c:ad:22:
3a:f6:2d:15:d0:ce:a2:a1:9f:60:a1:50:d5:a6:a8:
41:29:8d:94:05:6d:1c:a0:5f:b1:dc:24:05:4d:64:
e6:e8:66:3b:93:63:f2:5e:0d:e6:80:39:20:69:8b:
19:50:de:4d:0a:e7:21:a2:ef:13:c0:2c:28:dd:ad:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:57:FA:30:B0:2A:14:30:9A:AD:DA:0E:0D:91:14:88:67:D3:6B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JUBX-jCwKhQwmq3aDg2RFIhn02s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:72:b3:77:6a:7e:6a:25:4e:63:e5:57:13:25:ff:84:86:bf:
2e:63:fa:fa:50:92:16:43:6c:4e:1f:b8:50:8e:ec:17:44:c7:
28:01:07:66:be:f6:5c:51:6d:b7:4d:f4:42:4f:dc:7a:77:92:
9a:f8:fb:56:9e:0a:7d:df:5d:f6:3c:4b:fe:35:d6:91:47:e8:
79:11:f2:b7:68:7a:33:4d:70:34:99:fa:77:2a:7a:23:da:77:
73:3c:b4:26:17:9f:b9:4a:35:d9:fa:52:05:46:4d:95:4b:24:
50:17:a6:b7:99:8f:4b:e7:c9:18:b2:e1:23:de:36:8e:99:8c:
b6:16:59:0d:87:a1:a7:ac:cd:7d:f8:e9:94:ee:d2:ae:6c:70:
4f:8e:37:cf:80:85:3b:e9:84:9e:28:94:af:44:f0:e3:c7:8e:
73:65:75:19:0e:0e:1b:d1:35:9a:ad:d0:b1:8b:93:73:53:df:
6e:62:15:38:54:d9:09:08:5a:b3:dd:86:ed:e0:ca:2c:df:99:
61:2c:3e:d3:9b:9f:4e:d3:73:a6:d9:f9:2c:51:c9:10:fc:cc:
a9:3e:34:1c:83:7f:e4:d9:ee:74:09:53:6b:55:1f:11:d0:1c:
6e:4c:17:a7:7e:78:39:80:fd:6d:b4:bf:1c:cd:24:ac:4b:26:
e4:ac:38:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:31 2024 by rpki-client on console-ams.rpki-client.org