Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JunjSVRYFSVutcIVWDecGJhVl6c.roa
File: JunjSVRYFSVutcIVWDecGJhVl6c.roa (raw, json)
Hash identifier: nFTsCwFS3NGrVEVdaiqVeWz8h58F2WsZvWDHjHfMTi8=
Subject key identifier: 26:E9:E3:49:54:58:15:25:6E:B5:C2:15:58:37:9C:18:98:55:97:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4862
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JunjSVRYFSVutcIVWDecGJhVl6c.roa
Signing time: Thu 25 Apr 2024 02:23:19 +0000
ROA not before: Thu 25 Apr 2024 02:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18530 (0x4862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 02:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=26E9E349545815256EB5C21558379C18985597A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:29:83:ca:d2:70:6e:bc:91:8c:39:45:56:
eb:ca:fb:f1:f4:32:27:0c:a3:08:a8:dc:b7:cc:6d:
a0:54:68:5f:e4:23:69:60:19:ee:ce:66:bd:b3:ee:
10:0a:ad:d5:fa:ed:4a:22:e3:c6:a1:9f:f7:81:4f:
05:2b:31:2e:4a:20:f5:dc:5c:ed:7f:78:89:98:7c:
09:fd:88:f0:98:4c:68:52:83:ba:66:c7:4f:24:27:
77:70:42:6d:f5:63:59:65:7d:31:0f:4b:10:4a:55:
17:52:c9:7e:0e:b2:49:5e:49:b0:45:b0:98:66:0e:
2a:2c:09:ed:31:16:ef:0a:34:5e:88:e7:5a:1d:e8:
ba:5f:5b:1c:a6:96:32:10:8e:82:27:5c:47:c1:58:
a9:e4:b1:03:58:2d:db:59:9e:30:54:e0:b9:28:24:
3a:e9:ed:f5:49:46:58:93:23:8f:a8:a8:b9:b2:50:
14:fb:8c:fa:60:af:44:b1:3d:f6:8e:5b:4d:0c:18:
75:80:05:12:5b:96:e0:3a:e0:40:72:2e:c2:66:9e:
d5:38:37:45:b7:f9:de:ae:fe:57:40:4a:78:c0:4b:
7d:1d:5a:40:cc:fc:97:31:01:bd:be:e3:02:31:16:
57:f6:13:bd:7c:51:69:86:02:09:03:86:82:53:51:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E9:E3:49:54:58:15:25:6E:B5:C2:15:58:37:9C:18:98:55:97:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JunjSVRYFSVutcIVWDecGJhVl6c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:92:da:16:f4:14:52:e0:f1:e3:02:17:c9:5a:60:21:b2:9b:
3f:ae:2d:15:77:c6:1a:44:25:1f:0f:99:62:2f:9e:89:4a:f9:
4f:04:d8:ff:a2:45:83:af:b0:6d:46:3e:39:f0:19:91:14:11:
87:79:6a:3f:e9:47:82:1d:89:89:f1:29:73:91:e3:5b:ce:f2:
ca:38:b1:c4:a0:cf:64:43:ef:e1:ff:5e:6d:4f:cc:d9:a6:9e:
fc:37:8e:5f:f3:ed:97:27:1b:b6:75:39:9b:7b:8a:4d:05:5e:
5a:bc:0c:c8:22:e8:1d:c8:07:20:c4:97:1b:f5:48:18:84:c1:
33:81:81:a1:fa:41:b9:3f:32:a9:0b:2a:34:f0:be:e4:79:c5:
25:dd:34:7e:f3:8e:7b:0b:d5:92:df:32:41:e8:21:41:f6:47:
fa:3a:8a:92:ec:95:32:a1:73:aa:9f:cb:90:7b:68:47:c1:02:
90:b2:e4:37:e3:1b:1a:a1:3e:60:58:7c:41:53:a1:1e:04:13:
a8:fc:52:b1:12:f6:01:31:cd:df:7e:6b:85:62:a2:a7:98:aa:
8c:a7:fd:66:4e:9d:1a:e1:ef:60:64:88:4a:af:50:0c:e6:00:
07:e7:63:a8:7a:6b:d7:70:34:34:f0:11:ee:b6:92:7b:5e:45:
f4:98:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org