Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ME2C7qeTvcnO_5ijT_A6KBdyC-U.roa
File: ME2C7qeTvcnO_5ijT_A6KBdyC-U.roa (raw, json)
Hash identifier: pIz24GXekd+9n5H4l9JX8UwQBbEsi8F9mdlVZu/w2JY=
Subject key identifier: 30:4D:82:EE:A7:93:BD:C9:CE:FF:98:A3:4F:F0:3A:28:17:72:0B:E5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AC6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ME2C7qeTvcnO_5ijT_A6KBdyC-U.roa
Signing time: Sat 06 Apr 2024 22:52:29 +0000
ROA not before: Sat 06 Apr 2024 22:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15046 (0x3ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 22:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=304D82EEA793BDC9CEFF98A34FF03A2817720BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:36:3c:cc:e0:9d:9c:50:63:a1:df:b3:40:
ea:81:d7:aa:34:69:38:52:b5:a9:2b:e3:dd:2e:9b:
ab:b5:52:1b:bd:d6:45:e5:f2:a7:c5:84:e9:9a:e5:
21:e7:eb:f8:eb:52:4c:80:47:49:74:21:68:c7:96:
dd:eb:94:db:af:98:c8:d5:2a:39:4b:09:af:15:fa:
08:43:c9:d7:49:77:3b:d9:70:65:46:62:ac:ca:9b:
2e:97:7c:1a:21:99:f3:aa:1c:67:ad:22:c0:a2:47:
bb:a9:d9:7c:26:68:2a:0b:ad:18:24:f6:ea:81:82:
c4:a7:9a:29:46:cb:8c:76:7a:05:4e:45:d8:47:78:
bf:55:d5:2b:18:44:86:7f:dc:3b:4d:16:b6:4c:2b:
e0:1d:90:d8:84:83:02:2f:0c:a2:e5:b3:ec:38:61:
7f:68:d1:1d:9c:9c:5b:ce:83:af:db:e8:63:1c:d0:
e5:fe:2c:58:1e:61:f5:d3:80:3e:27:55:ba:33:a5:
ec:a6:b8:e9:3f:10:14:d0:d7:d6:8a:ee:30:49:74:
e8:7f:3e:b6:30:87:e6:80:1a:73:94:24:76:9b:54:
f3:e1:5b:72:c7:2e:91:a1:4a:1c:0d:f6:bf:22:bb:
4f:c4:80:65:ee:12:6f:1d:7f:a2:11:ec:c4:96:e4:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4D:82:EE:A7:93:BD:C9:CE:FF:98:A3:4F:F0:3A:28:17:72:0B:E5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ME2C7qeTvcnO_5ijT_A6KBdyC-U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:be:36:b3:f8:21:70:0d:2b:b5:26:fd:da:5c:05:94:58:84:
0d:8e:04:a7:3b:6c:63:62:3c:f6:1b:8f:24:2f:19:12:45:ba:
18:ee:45:ca:b0:d2:3f:aa:77:01:f9:0b:6e:1b:6c:1d:7c:9a:
d0:44:04:f7:bf:a0:86:bd:6a:8e:60:01:ca:e8:78:46:76:7b:
71:7e:81:34:19:d1:8f:a5:5e:2e:2d:bc:70:70:02:1f:d8:9c:
47:a1:03:a2:0b:c8:f9:84:a1:4c:8b:ab:89:f7:79:3a:71:27:
1a:03:b1:02:f8:57:42:d7:e6:a5:0b:41:da:71:c6:bd:7d:41:
d4:79:2a:57:e2:e1:5e:9f:69:ca:9a:c8:72:f3:34:98:5e:33:
18:10:d4:9a:4e:e4:6a:a4:a9:c0:fb:e4:7d:0d:91:37:f5:b6:
a3:25:fc:11:07:35:32:40:95:1b:10:43:1b:b0:f8:57:43:72:
c5:67:fb:26:34:94:3d:6f:24:4a:c3:4c:3a:46:e1:69:f6:cf:
1c:3f:42:fd:e1:1f:f3:da:05:dc:3a:3a:ce:4f:b3:e1:81:11:
e0:4f:81:5d:f4:f2:d8:d9:e4:5b:4f:5d:cc:a2:75:04:87:e8:
0b:85:39:91:9e:c5:e7:96:92:cb:48:cb:bc:67:e4:f3:c4:47:
46:50:69:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:34 2024 by rpki-client on console-ams.rpki-client.org