Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/No4Krqp7t4kUGP4e5CWdmD_zVm4.roa
File: No4Krqp7t4kUGP4e5CWdmD_zVm4.roa (raw, json)
Hash identifier: LLrdPebVXxv+ZY/fIqJLLniDuEhtCxufYxOv83OqvBg=
Subject key identifier: 36:8E:0A:AE:AA:7B:B7:89:14:18:FE:1E:E4:25:9D:98:3F:F3:56:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4286
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/No4Krqp7t4kUGP4e5CWdmD_zVm4.roa
Signing time: Wed 17 Apr 2024 06:52:58 +0000
ROA not before: Wed 17 Apr 2024 06:52:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17030 (0x4286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 06:52:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=368E0AAEAA7BB7891418FE1EE4259D983FF3566E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:63:0c:53:0a:02:c4:2f:b7:39:a6:1c:11:
95:c9:3e:c2:c6:dd:7a:29:a5:b2:da:48:53:1b:11:
a9:36:12:a0:cf:56:5d:77:5e:b9:8c:a4:d9:f6:06:
d7:19:e7:b7:4a:7e:9d:51:c5:a7:23:56:99:9c:3a:
c4:6d:23:57:1a:83:1b:94:e8:c3:f8:c7:f3:6c:ab:
32:41:4d:ad:a8:d4:e2:71:4b:57:89:1c:6b:1f:6c:
02:ce:32:13:f7:2a:d8:e9:e1:78:c5:9d:f5:e4:67:
24:fe:17:45:e2:60:b3:d9:79:3d:2a:3d:cc:8f:40:
9d:8c:ca:ff:d3:f5:be:cc:3a:eb:57:79:18:0b:a6:
cc:ee:5a:61:86:8b:91:dc:90:e7:62:2e:01:cc:db:
9e:3a:ad:0d:5d:64:a9:f5:25:45:e5:0f:e8:72:78:
95:2e:18:29:db:87:fd:f9:cc:1e:9d:49:52:07:ec:
1b:3a:c4:95:c5:22:a6:b2:74:39:03:19:61:45:55:
13:70:5f:7f:ce:26:54:17:bb:2b:ed:bc:ed:84:38:
67:ec:bf:14:9e:10:4e:b0:2e:4d:6e:f4:bc:ae:40:
a1:91:03:8d:e1:d0:c7:77:7c:a1:ad:0e:d2:df:d7:
26:86:37:e9:3c:f2:ad:6a:06:a9:42:34:21:c5:71:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:0A:AE:AA:7B:B7:89:14:18:FE:1E:E4:25:9D:98:3F:F3:56:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/No4Krqp7t4kUGP4e5CWdmD_zVm4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:25:64:de:ad:23:aa:5b:a8:da:a0:2b:db:01:92:8d:79:31:
eb:2b:ab:d4:26:03:78:94:0f:49:68:9d:28:75:10:7b:43:ea:
55:29:3c:20:dd:5d:e4:90:49:ae:82:3a:f9:e0:70:54:32:fb:
13:64:a7:89:5e:9e:c3:aa:d2:9d:a5:f7:24:28:53:64:c6:80:
b2:54:b6:fa:aa:ef:7b:0a:6d:64:30:93:71:90:d0:a5:3c:17:
65:65:5e:3e:9a:8c:9b:0a:4c:51:53:33:b5:d5:c8:b1:8e:5a:
48:6e:55:60:ab:49:45:e9:8f:8c:6f:37:83:fe:76:73:4e:f5:
48:ee:59:85:5c:4a:60:3f:c8:55:6d:9c:a1:b1:b7:e8:ba:25:
bc:13:9d:77:f8:18:11:c7:39:6b:11:87:9b:86:72:38:7d:3a:
c2:69:cb:03:f3:52:f5:bc:d3:36:ea:8c:78:dd:a2:0d:87:60:
02:47:4c:a2:b2:09:ec:65:05:ae:f5:7d:3f:7f:d4:d0:23:d9:
e4:ad:8c:ce:36:08:17:a6:5b:f4:24:2a:8b:aa:a5:cd:48:78:
01:29:7b:59:72:db:ef:90:f8:08:29:53:e9:aa:53:89:06:3d:
d2:35:da:a8:6f:bf:87:64:4d:e2:0d:f1:44:55:c4:19:7f:e8:
d5:2c:9b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:22 2024 by rpki-client on console-fra.rpki-client.org